Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
File:                     dDbW6AAjNMdDTqze-L8s5yFslT8.mft (raw, json)
Hash identifier:          gNLZoT/+Wo4qtwvgYkespvX0wC8l2E5Tc6Nmnd3GaMI=
Subject key identifier:   00:F7:3C:05:42:53:EA:C3:D3:9D:E4:C2:63:45:C4:6A:7F:D7:72:11
Authority key identifier: 74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
Certificate issuer:       /CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Certificate serial:       01901F3453D529C5E0285C5108D0DF978644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
Manifest number:          0B67
Signing time:             Sun 16 Jun 2024 04:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:41 +0000
Files and hashes:         1: JGsJOXsM1MeaLAh590gBW7PNApU.roa (hash: ZludnWROEhMg+ODqZnJ0blQNcE9dZiGcbIRgJlKOi00=)
                          2: dDbW6AAjNMdDTqze-L8s5yFslT8.crl (hash: ukr8QECuac+P4e1a+Peag/dSZmuti6Z8bkYhl5BwaVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:53:d5:29:c5:e0:28:5c:51:08:d0:df:97:86:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
        Validity
            Not Before: Jun 16 04:00:41 2024 GMT
            Not After : Jun 17 04:00:41 2024 GMT
        Subject: CN=00f73c054253eac3d39de4c26345c46a7fd77211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:dd:6d:30:4c:d6:aa:bd:1c:5c:4d:df:be:
                    91:0f:d5:c5:c3:de:c8:39:85:c6:7f:a8:b6:28:5a:
                    73:3f:b2:3c:db:ab:d1:e7:14:8b:af:05:0f:ad:3c:
                    a1:8c:14:3d:c8:8b:d2:d3:8b:5b:31:7e:13:07:d4:
                    92:d8:dd:c9:4c:9c:b8:92:e8:56:b7:62:d4:6e:3e:
                    2d:fb:a8:36:98:cc:de:18:90:66:16:91:ba:7b:a2:
                    a0:9e:5f:7b:fe:d4:fa:ec:5c:ec:39:0d:d1:a8:14:
                    bb:5a:4e:57:9b:dd:57:85:ca:73:b1:5d:71:76:a7:
                    5d:31:42:ef:14:22:6a:c2:33:28:89:b9:a9:b3:02:
                    7c:d0:0d:1f:ed:a5:d6:60:d9:a1:77:f1:17:58:d1:
                    79:45:10:a3:d1:47:bd:85:0c:8e:46:9c:14:eb:40:
                    01:90:e0:26:7c:1b:66:b1:c5:00:32:37:ef:bf:b3:
                    25:4b:c6:9d:af:2e:80:a9:eb:87:b4:89:f5:dc:50:
                    71:38:ba:81:1d:6f:e9:6c:e7:3b:74:eb:11:c7:a3:
                    9a:3f:d0:4c:2a:0b:9e:ba:a6:bf:fb:e0:57:f5:42:
                    93:c0:c1:9c:82:cb:10:39:45:93:64:af:a4:e7:16:
                    eb:84:de:ba:b0:66:d3:48:11:92:b4:be:16:24:db:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:3C:05:42:53:EA:C3:D3:9D:E4:C2:63:45:C4:6A:7F:D7:72:11
            X509v3 Authority Key Identifier:
                keyid:74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:36:65:32:39:85:5b:78:3e:34:a9:74:29:91:f0:da:d0:
         51:60:67:56:da:87:ad:71:9c:9f:b6:a9:05:e6:3e:86:8a:cd:
         e9:14:78:f3:c1:62:35:89:a5:17:b4:12:71:9c:6c:df:f4:04:
         21:49:13:a1:c9:77:09:b8:9e:40:84:3f:53:30:31:ff:02:08:
         79:19:ca:71:17:ff:2b:f1:a0:ec:b2:19:cb:f7:ed:29:ec:13:
         a4:41:51:17:7e:84:12:2b:f1:d0:94:1e:2e:67:64:d0:35:4e:
         6f:86:2f:d2:5b:81:53:36:27:8c:08:fb:96:b2:39:91:e2:57:
         d9:b9:ce:2c:ff:09:c3:aa:45:7e:19:01:68:9b:fa:cb:4c:02:
         22:0d:78:42:9e:06:93:f4:27:54:1c:92:47:02:96:e4:f5:54:
         27:f0:a2:0a:ad:b2:4d:fd:22:d3:11:35:b5:87:9b:13:2d:18:
         b6:16:cf:47:5b:e9:b7:32:2a:56:5f:df:e1:e8:ce:a1:65:6c:
         2b:75:56:1c:77:a6:f1:b9:2c:c3:24:63:bb:51:03:d2:cc:a4:
         d3:d1:e0:ad:48:d0:d9:87:c2:e0:6a:d8:cc:df:1a:a9:6e:e8:
         65:d7:ed:ad:af:ed:34:1f:a8:10:70:10:d6:24:57:22:31:f6:
         09:82:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:49 2024 by rpki-client on console-fra.rpki-client.org