Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File:                     Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier:          PeGv3vqLg9P/9gt+8xpIlDarnUZAp5956RETCC23Bf8=
Subject key identifier:   69:5C:0D:9C:92:35:FE:86:9E:0F:1C:08:DA:ED:82:6E:4E:B6:7C:90
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer:       /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial:       0190332A14212AEFED21CD3D4A98BD754ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 01:01:53 +0000
Manifest this update:     Thu 20 Jun 2024 01:01:53 +0000
Manifest next update:     Fri 21 Jun 2024 01:01:53 +0000
Files and hashes:         1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: z9mwXUV0RNKPDGvBkRnHfRT2Eexe0pZMGSTYrFjPOdU=)
                          2: N1WC2hNvcCwkxKY9YZ22v1hX16c.roa (hash: JAk973GFQud3PLpcRIUHRDZ9s9DadVWA9g4BWX1g8Wk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:2a:14:21:2a:ef:ed:21:cd:3d:4a:98:bd:75:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
        Validity
            Not Before: Jun 20 01:01:53 2024 GMT
            Not After : Jun 21 01:01:53 2024 GMT
        Subject: CN=695c0d9c9235fe869e0f1c08daed826e4eb67c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:c8:a5:ad:82:9e:1e:c3:6b:28:c1:15:7f:
                    06:03:06:49:f6:02:61:fa:8b:3a:bf:6b:54:ea:16:
                    6a:b9:75:22:e8:21:4c:17:94:f1:07:26:e7:c2:b7:
                    86:df:2a:06:e1:63:a2:a7:5e:d4:de:64:8b:0c:5e:
                    8d:39:23:33:5e:08:d2:41:9d:de:d3:78:d5:60:fd:
                    5f:5a:05:68:35:57:95:47:29:9a:38:d8:db:a6:14:
                    e6:22:db:c8:91:a5:e0:1a:24:f0:95:27:e4:33:06:
                    39:31:b9:ea:7a:1c:41:66:f3:13:37:ba:2d:c1:a3:
                    59:c6:3b:40:92:15:5c:ae:f7:f4:73:e7:f4:88:ca:
                    92:85:60:a9:91:e7:97:47:69:47:98:a5:e2:63:c7:
                    02:de:30:5a:fa:80:ad:60:0e:bb:ba:b4:93:8c:46:
                    8e:cb:2a:85:1f:8e:b0:f6:3f:99:b1:45:4c:0f:98:
                    6d:00:d6:cb:da:11:5d:a0:44:a0:1a:2e:4f:57:3c:
                    f9:41:2b:6f:0c:94:52:b1:9a:74:05:06:fe:49:49:
                    bd:ce:24:f2:20:51:87:1d:74:47:bd:17:4a:eb:c6:
                    9f:ac:c5:b2:c5:8d:7a:37:64:82:ed:4f:0d:30:28:
                    20:a8:e2:95:43:be:f6:45:c1:f7:c4:55:6d:35:0a:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:0D:9C:92:35:FE:86:9E:0F:1C:08:DA:ED:82:6E:4E:B6:7C:90
            X509v3 Authority Key Identifier:
                keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:6d:46:82:99:a0:33:cf:7d:cb:f7:19:0a:00:62:a7:21:
         38:38:39:40:05:c8:95:81:0f:bd:7d:a2:33:8f:3b:bd:26:06:
         65:87:97:19:c5:cc:93:9f:50:f5:42:d4:ed:77:40:b9:a2:ee:
         71:be:cc:00:a7:62:9a:3c:f2:b6:f4:a3:a9:18:b3:15:9d:56:
         ed:81:a7:da:dd:b4:2d:37:68:3a:05:fa:2f:e2:3e:c8:98:e0:
         e5:54:4a:e7:ce:6d:20:91:bb:10:2c:95:62:0e:1a:78:ba:a4:
         b5:3c:d2:54:4c:2c:ab:3e:80:cd:e0:cf:ed:77:2c:44:29:73:
         35:e7:fd:c1:22:b2:c3:01:2b:de:0c:e9:58:fd:6f:38:1d:30:
         71:0f:41:b1:26:53:f9:73:83:65:80:08:a9:46:6b:cc:bb:e2:
         8e:02:3d:da:fd:0f:db:ba:30:7c:0f:ac:e1:3e:4c:17:92:72:
         ac:1d:45:39:f8:37:57:a2:52:4a:c7:79:2d:62:f8:bc:d9:b5:
         eb:da:f1:44:e9:cd:e0:8a:0e:59:73:0c:65:84:9b:87:ac:cd:
         df:87:43:20:c7:a5:07:8d:ba:f2:83:b8:23:28:97:1f:bb:36:
         4b:a6:78:a1:d6:29:bf:ff:a9:71:73:f4:41:5b:c1:95:c6:df:
         98:f7:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:24:04 2024 by rpki-client on console-ams.rpki-client.org