Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File:                     Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier:          WldbDxAGt+zcqWGf+tiAzzPe8Q0gY2TBL59KEcWrkNQ=
Subject key identifier:   7E:C0:F1:CA:01:6D:0D:2D:4E:78:56:87:EC:BC:85:91:C3:5A:E6:6E
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer:       /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial:       01901BFE1CE3CA40D5B5A8908CAC4B6F3C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:36 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:36 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:36 +0000
Files and hashes:         1: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: pWsvYlGRJT9n2iOv27PG6o7BnWqwnIU4LRMD/KyG268=)
                          2: eyoLDYDc_nHqSsx1OZfEI7mDPcE.roa (hash: Mc/L6CEg6+9T2RECyLSidBA/++u+mFF3CjePvQbw0CQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:1c:e3:ca:40:d5:b5:a8:90:8c:ac:4b:6f:3c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
        Validity
            Not Before: Jun 15 13:02:36 2024 GMT
            Not After : Jun 16 13:02:36 2024 GMT
        Subject: CN=7ec0f1ca016d0d2d4e785687ecbc8591c35ae66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:eb:cd:ab:4b:8b:d9:ab:bc:98:43:33:56:
                    f7:a8:b9:7c:aa:b7:8d:66:06:c9:53:72:20:45:9b:
                    7e:ff:e6:b8:d6:1e:94:a1:7e:0d:cb:d9:41:ea:a4:
                    f7:cc:98:0d:0b:cb:bc:be:ed:a4:3c:a2:f5:ca:f7:
                    19:c1:90:f3:d0:5d:70:e1:e2:ee:87:a3:7e:bf:25:
                    1a:f0:a2:19:85:6f:11:06:32:f0:de:59:34:bc:38:
                    12:c7:32:4c:88:0c:76:ad:3c:ca:3e:80:50:b7:19:
                    3b:01:6b:11:da:d9:43:e8:d7:50:fb:ee:77:76:8c:
                    a0:b2:a8:dd:e0:50:18:df:b8:02:e5:fa:23:70:be:
                    60:59:25:66:77:cc:8c:43:b8:6f:73:4f:68:0e:e1:
                    a2:6a:70:11:d5:81:53:27:27:bb:c5:eb:16:72:d1:
                    a0:d5:d8:c5:86:a9:b9:1d:a1:b1:8d:4a:ac:5e:86:
                    65:00:ca:41:92:9d:03:ce:d0:80:b8:dd:24:df:ad:
                    57:c5:64:02:ae:57:ef:6e:c4:1c:6b:02:39:2b:d2:
                    ad:57:59:f4:94:31:e9:a4:1d:b8:9e:d0:c3:57:09:
                    d1:1a:e0:78:0e:8f:e3:39:76:60:dd:7c:bb:6b:5a:
                    1a:7f:17:8a:08:5e:e7:6f:11:18:24:91:da:2d:c0:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:F1:CA:01:6D:0D:2D:4E:78:56:87:EC:BC:85:91:C3:5A:E6:6E
            X509v3 Authority Key Identifier:
                keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:6f:8f:b6:73:4d:a5:77:8a:f4:ff:51:86:6c:50:62:6a:
         65:f3:0e:da:ff:f0:6c:4f:8b:ca:eb:c1:88:52:5a:4d:83:7f:
         2e:20:f8:61:d3:ee:6d:b9:fb:aa:f8:45:36:c8:c9:26:f3:97:
         af:5c:f5:1a:c2:4b:91:1e:cc:b2:c3:a3:0a:d7:3c:57:4d:6b:
         d8:85:30:65:a6:30:1b:b3:c3:02:a4:4e:6f:10:d9:16:e0:65:
         72:bd:2e:23:65:58:07:28:32:78:fe:7a:52:9a:22:2d:f0:aa:
         2b:65:e7:69:4c:2f:c4:bb:2d:62:dc:86:b9:a8:7e:2f:66:ed:
         14:12:46:6a:ff:16:7b:ef:41:4a:a2:f9:60:6c:e0:91:99:1f:
         98:13:a5:67:31:ef:06:a6:ae:aa:e1:8f:cb:a4:01:aa:fd:de:
         6e:96:ff:ab:d9:10:c1:ca:d4:68:46:e1:e9:da:f4:0b:a3:dc:
         95:b6:21:26:06:17:02:11:a0:97:12:3f:4a:73:7e:12:02:19:
         bd:80:2c:aa:a9:df:1f:6c:09:80:b5:ca:2d:05:22:12:cd:d5:
         52:a3:0d:d2:44:ef:34:e3:1f:0e:9f:36:25:cc:58:cc:27:2e:
         7a:ae:d9:d2:4a:60:c1:c8:3c:76:3f:57:61:97:3c:49:77:f9:
         a7:e7:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:15:24 2024 by rpki-client on console-ams.rpki-client.org