Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
File:                     dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft (raw, json)
Hash identifier:          2snrtw7wmy9qEUwUhBaWmk05HwAwzrr/FNUy14B+DPo=
Subject key identifier:   78:53:BD:FB:74:88:CC:61:58:1C:03:B6:A4:82:52:89:89:63:E6:41
Authority key identifier: 74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
Certificate issuer:       /CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Certificate serial:       01901CA12AA51243F59081BF0FA811DF21BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
Manifest number:          111A
Signing time:             Sat 15 Jun 2024 16:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:42 +0000
Files and hashes:         1: dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl (hash: Z9ERxFENZuz8g1l6f2Fn5CbAAwuYKp9uBIONiKAXPwI=)
                          2: s1FgNcrgtLXRJUBPk45z2nmhh9E.roa (hash: 2Fv8L021ngMMjqR+nudMGSM97Za9ARUHC+vevmZOiqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:2a:a5:12:43:f5:90:81:bf:0f:a8:11:df:21:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e87431bebf703cc4e4a33106f4618a1a00a969
        Validity
            Not Before: Jun 15 16:00:42 2024 GMT
            Not After : Jun 16 16:00:42 2024 GMT
        Subject: CN=7853bdfb7488cc61581c03b6a48252898963e641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:33:bf:af:94:e5:7f:0a:16:d0:7f:cd:17:
                    e7:42:54:5e:e5:19:99:f3:94:b6:f7:ee:f2:74:14:
                    de:bd:9e:9a:06:99:90:b1:9e:1d:a2:d4:f9:48:19:
                    95:bd:d8:f6:5a:3d:4a:97:3a:39:a5:13:e9:7a:3a:
                    13:bf:92:d8:58:b1:90:58:47:e3:d8:76:f3:89:f5:
                    6d:88:89:91:44:6c:9f:13:2d:6c:8f:48:a4:74:31:
                    14:8b:84:1d:2a:d5:f1:ba:b4:9b:c9:88:49:9b:7e:
                    2f:7a:59:96:fa:74:3c:ed:ce:64:6e:41:a8:b8:89:
                    58:69:fa:bc:31:cc:a8:43:ac:b9:cf:8e:ff:c0:5b:
                    cf:0d:06:2b:e1:9b:13:ba:68:b0:44:f4:bd:d0:44:
                    cb:04:4d:df:10:ca:0c:29:dc:b1:d5:d3:f2:5e:ee:
                    4f:f8:fb:1b:4f:89:98:a6:da:57:c2:b1:de:67:15:
                    34:64:ef:37:83:49:cc:b7:2a:ac:c3:78:aa:6d:a6:
                    65:cf:27:0b:92:e9:2b:d6:85:04:51:50:09:b2:3b:
                    b6:27:28:9b:34:a9:2f:0a:9b:55:d7:b0:cd:ee:10:
                    df:0e:69:2b:3a:94:ea:7a:dc:a1:9f:87:e5:50:45:
                    25:f7:bc:23:ab:ae:66:54:27:18:85:f3:8a:bc:c0:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:BD:FB:74:88:CC:61:58:1C:03:B6:A4:82:52:89:89:63:E6:41
            X509v3 Authority Key Identifier:
                keyid:74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:35:2c:39:47:cb:53:4e:b3:41:19:e8:4e:5b:9f:82:9c:
         71:a4:1a:c1:c2:f8:92:60:cd:ad:25:fe:83:84:ae:1a:e7:fa:
         a8:d7:30:79:d6:58:ae:97:3d:1e:dc:38:6c:d6:68:47:56:f8:
         5a:f0:c8:07:c8:b7:45:6a:00:76:47:c5:d2:69:9c:d1:75:76:
         0f:e0:95:c5:f6:1f:44:cb:87:1d:ca:20:40:15:01:e3:13:d7:
         71:fa:5c:61:6c:a8:26:82:aa:81:c4:bd:d5:c8:dd:d1:ce:e0:
         98:c1:7a:06:86:9d:c6:69:f2:7f:bb:14:f6:c5:62:3f:93:8d:
         08:a8:34:a7:47:18:ab:c7:e7:3e:3d:60:ca:5c:f2:f2:f0:91:
         f5:9b:27:be:ea:85:b2:3b:93:13:81:14:3b:bc:11:ea:55:d2:
         ce:32:99:5e:15:c9:bb:06:e2:eb:8f:96:13:71:07:03:8e:69:
         8d:53:1e:b8:ed:3b:8e:3c:41:a0:ab:c7:d6:46:d8:19:c4:4d:
         07:dd:14:45:e7:ae:6c:1c:9d:9d:3d:2f:c7:dd:f1:05:98:26:
         c2:e2:9b:d4:fc:07:a7:fd:f8:05:f6:7b:01:b3:53:59:8b:4e:
         ec:30:04:fc:d0:d9:ed:06:a0:6b:04:6b:7c:7d:d4:cf:c9:ee:
         24:c9:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:40:00 2024 by rpki-client on console-fra.rpki-client.org