Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File:                     0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier:          iEwOsJkpL9sZrz8CxvY8sr21jqclzV3CCGRk+kPjLl4=
Subject key identifier:   7D:BF:65:11:A1:9C:E2:92:6C:F6:CD:B9:B6:14:14:05:9E:EF:48:A7
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer:       /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial:       01901EFD9FF05432CE1E27329DDC94D8E234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number:          0E62
Signing time:             Sun 16 Jun 2024 03:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:56 +0000
Files and hashes:         1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: e40FFZEK71/L2aHm2YFepk6t8eZWvWyG3CCjkHr2UXw=)
                          2: LSilrmrxPp762MenUw8eQG1dpDQ.roa (hash: N3RpDlrEloSqs/Ni3QJV/BFuhIS8wjcdED+rtr1hky8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:9f:f0:54:32:ce:1e:27:32:9d:dc:94:d8:e2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
        Validity
            Not Before: Jun 16 03:00:56 2024 GMT
            Not After : Jun 17 03:00:56 2024 GMT
        Subject: CN=7dbf6511a19ce2926cf6cdb9b61414059eef48a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:96:df:63:63:d6:50:ab:fb:29:ad:0e:21:
                    b0:0a:1f:7a:d8:88:35:06:35:3e:30:95:58:9a:25:
                    06:d5:2b:5b:0a:57:e0:ba:8f:ab:a6:c9:e1:72:52:
                    fb:34:5b:14:ef:74:f1:67:d1:44:f1:bc:fa:4b:7a:
                    6d:21:f4:03:cf:ca:89:53:24:04:61:5c:88:0f:0d:
                    bc:88:6e:cb:e3:b3:6d:df:3f:70:e8:6a:13:e9:75:
                    26:54:51:bd:d3:69:34:53:68:1b:b9:e5:e0:88:de:
                    3b:04:d4:e6:04:0d:b2:d3:34:bc:33:0b:58:6b:06:
                    49:7c:a9:f1:b1:58:3b:e6:44:45:2b:26:a4:a8:d2:
                    89:56:5e:86:6e:3d:e2:bd:ec:63:4e:66:79:b4:4f:
                    f5:d8:89:2e:ab:9b:8b:ed:1b:a4:c8:77:fc:5f:b8:
                    99:71:13:f8:f2:ba:39:5a:c2:3d:5c:a5:aa:dd:57:
                    2a:16:84:70:d4:f2:f0:e7:ae:2b:0f:8f:cc:2f:63:
                    65:b4:01:a2:8d:cf:9d:10:40:39:53:ae:3f:23:8a:
                    11:25:a7:ef:11:b0:90:6d:d4:a4:c8:4b:fc:fc:59:
                    03:f6:09:15:c9:b9:02:45:2e:f4:1a:a6:1c:6c:8b:
                    df:e3:af:d5:19:7d:b4:1a:bb:e9:e3:d9:34:fe:4e:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:65:11:A1:9C:E2:92:6C:F6:CD:B9:B6:14:14:05:9E:EF:48:A7
            X509v3 Authority Key Identifier:
                keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:56:97:0e:02:cf:70:96:3a:eb:71:2f:82:da:6b:88:a0:
         d5:00:8a:75:77:58:fe:b0:31:fd:13:bf:26:4c:f7:5a:55:86:
         6e:3b:17:ad:18:b2:c1:e4:63:dc:47:15:7d:28:66:fc:3f:44:
         81:be:1d:ea:05:82:a1:73:e5:f5:a2:47:b4:56:6b:82:b2:31:
         41:7f:5e:f9:67:30:d6:4a:ca:1b:1d:59:8e:e8:f7:9b:4b:72:
         c5:91:24:6f:f2:f1:31:51:52:38:b4:71:36:ea:8a:b4:76:3f:
         c1:7a:09:54:93:e7:29:90:15:c7:c0:1b:22:77:7d:cb:65:f2:
         39:a2:2e:0d:06:37:5b:f3:74:cd:33:26:31:50:40:2b:99:c8:
         4f:3a:af:f0:f5:79:d6:29:57:d7:49:08:e1:1e:eb:f9:81:b2:
         3c:3c:6f:0b:85:e4:3c:eb:66:92:90:c7:e3:1f:de:56:49:03:
         c3:bb:ad:9f:0f:8d:24:5b:49:ab:87:00:c9:2e:ec:61:da:f4:
         4c:a7:d9:fc:97:08:2f:cc:8a:77:a5:88:e9:d3:c4:81:3c:b9:
         ae:99:82:f4:53:c9:a2:76:0e:0a:23:eb:c3:01:67:cc:7f:ce:
         98:55:82:ec:d6:9c:a0:d5:e9:1f:79:2d:53:10:2f:17:49:a5:
         cc:ff:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:52 2024 by rpki-client on console-fra.rpki-client.org