Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          viWykOo5ExiaXZ6UNUC/ASE67QEi9yVTAsl8FfkdZq4=
Subject key identifier:   86:75:35:EF:26:38:F5:9C:A5:77:AB:34:9D:C9:B7:2B:2B:DC:C8:11
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       01901D0F3C72AB33BF2630753212B1EFB651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          0CDB
Signing time:             Sat 15 Jun 2024 18:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:56 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: 3hJwLU/7h/kJfN7UMSQol6xObBUoCm5w1o+81sQz90I=)
                          2: d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa (hash: aV/wJa08dR1AdkBBTjInVUkIBkJKMxX+/vOd6B0pw8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:3c:72:ab:33:bf:26:30:75:32:12:b1:ef:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Jun 15 18:00:56 2024 GMT
            Not After : Jun 16 18:00:56 2024 GMT
        Subject: CN=867535ef2638f59ca577ab349dc9b72b2bdcc811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:97:39:a2:32:08:5a:55:b0:a7:ee:5a:73:
                    6d:9d:90:29:1c:09:7d:5f:d3:e4:4b:b3:ed:16:82:
                    a1:3b:a2:ec:55:ab:fa:17:0e:fd:48:8d:43:ed:55:
                    f6:45:4a:2f:e4:d0:c4:47:bf:32:d9:26:ac:a5:43:
                    a9:95:18:68:f6:25:03:7a:c5:6b:7b:c5:91:f7:3f:
                    1f:a5:2c:cd:1f:ee:e6:36:31:ff:a0:a8:3a:b6:2a:
                    fd:47:f9:ad:b8:a1:8f:fc:2a:b3:2a:25:92:ed:2e:
                    53:ed:2a:d1:98:84:dc:57:8a:71:04:20:1c:b1:1c:
                    29:f2:65:35:32:00:80:ce:5b:5d:ac:b8:39:4f:58:
                    63:07:9f:cc:f0:82:b7:8b:20:db:e6:21:0b:be:a2:
                    23:65:53:53:09:26:bb:2a:cd:9f:af:ea:5c:7f:fa:
                    a4:73:ac:0a:3b:3b:32:3a:45:7f:ca:c8:81:20:2c:
                    e0:27:84:78:d8:8d:72:38:8f:84:ea:dc:f4:44:47:
                    c3:11:4c:e3:2b:be:a4:55:75:23:67:40:09:19:96:
                    1d:2c:56:a0:b6:43:c8:35:dd:0d:63:0f:53:81:45:
                    7c:6b:80:85:01:12:a6:a6:ce:66:45:fd:d4:0d:0e:
                    8b:0f:f3:44:36:be:37:d6:fc:50:ef:ed:26:2a:77:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:75:35:EF:26:38:F5:9C:A5:77:AB:34:9D:C9:B7:2B:2B:DC:C8:11
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:35:22:f4:c8:d1:bf:30:bb:1d:1a:2e:a9:cb:43:f6:39:89:
         1d:4c:57:00:8b:f8:63:a5:65:c3:23:65:66:96:f2:e2:f6:53:
         8d:dd:8c:fb:9b:44:7e:88:c8:9b:dd:7a:b1:fe:04:be:40:59:
         95:63:f6:12:0e:4c:a0:72:ed:87:05:2e:79:e5:f5:39:b7:13:
         65:bc:5d:c6:7b:21:5d:45:a9:a9:13:4b:e9:d3:6a:31:9a:bd:
         81:ec:21:b5:c0:5b:23:d7:92:3b:8e:49:f0:df:4c:4e:47:a4:
         63:ee:94:c7:dc:30:8d:f6:d3:32:05:38:0c:15:93:32:ee:04:
         b0:92:91:49:a5:db:31:cb:47:9c:31:da:5b:67:55:1a:12:4f:
         10:50:06:fc:a4:19:46:b1:e2:df:68:43:49:63:d6:ab:93:8f:
         e3:47:34:dc:2a:87:c4:0f:ee:81:df:98:26:c9:c9:b4:9e:61:
         c4:3b:52:45:32:02:58:5d:08:d2:84:f6:89:7e:42:9d:2f:f2:
         35:62:4c:5d:11:c4:70:23:cb:c8:4d:3e:c3:c0:3b:26:53:e7:
         e6:36:81:f8:ab:11:f4:69:1c:b1:d7:a1:47:15:42:11:5b:bb:
         70:0a:86:cb:3c:60:4d:7f:25:0f:29:cd:37:f2:4f:4d:38:a9:
         3b:1f:7b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:51:07 2024 by rpki-client on console-fra.rpki-client.org