Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File:                     DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier:          DEFX3CwQNeaq0ymgff51PNNqEpOhHKPAekpPI6VBzsc=
Subject key identifier:   EF:19:10:0D:F2:75:D8:D7:FF:53:07:70:4E:23:B7:92:9F:54:C7:B1
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       018FAFD7260F2AEAAF9A001DB755EE708170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number:          0760
Signing time:             Sat 25 May 2024 13:01:03 +0000
Manifest this update:     Sat 25 May 2024 13:01:03 +0000
Manifest next update:     Sun 26 May 2024 13:01:03 +0000
Files and hashes:         1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: kUYGC4vtBez5dsYsqz3ON844QD1hen7lChrKedLhGYs=)
                          2: Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa (hash: Wllycfypi6aGm5kcvc2vgto5ykCI7k2yPdRK/s6GWME=)
                          3: GEXGTv6ubD69pjTSwWqYH2OpF6s.roa (hash: ImztnbeF4TyDYd/30OC1KWC7onee4YU8z+39SDw1xko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:d7:26:0f:2a:ea:af:9a:00:1d:b7:55:ee:70:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: May 25 13:01:03 2024 GMT
            Not After : May 26 13:01:03 2024 GMT
        Subject: CN=ef19100df275d8d7ff5307704e23b7929f54c7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:41:19:c0:4c:2c:84:eb:35:91:97:7d:f7:
                    a4:50:dc:b2:93:7f:fc:47:12:73:c0:4f:27:d0:10:
                    1b:8d:6b:1c:ed:ac:3b:d4:c3:c3:9b:96:99:6e:18:
                    0a:c9:db:29:7a:0c:00:0b:9a:2d:78:12:03:c5:e7:
                    51:10:7a:75:aa:dd:e7:f3:0f:bc:23:8f:7c:62:26:
                    1d:08:ee:dd:24:eb:af:36:d9:f0:20:07:d5:18:62:
                    d1:1e:61:f1:16:24:e7:16:66:0e:cd:9c:61:f0:6b:
                    b0:74:ef:8a:cc:1f:b9:0e:79:8b:97:79:40:74:bd:
                    19:8e:f2:82:2a:f8:ed:5c:7d:3f:7a:22:5e:9d:66:
                    ed:c5:b0:1d:07:95:19:ba:09:47:94:78:29:65:b2:
                    1e:de:05:78:4c:79:5c:32:95:17:ef:30:e6:4b:c6:
                    0e:42:f2:48:f1:6a:f2:b1:0a:0b:e8:75:63:c6:40:
                    c5:f2:5c:75:79:f0:08:ca:6e:85:08:a0:b9:92:91:
                    59:de:f7:50:70:59:25:f0:fd:09:f9:f1:2b:2a:95:
                    33:15:b5:09:32:e3:5e:81:62:2c:74:5f:87:64:4e:
                    d2:8d:59:05:57:6a:b6:3a:4c:df:72:5d:48:8c:e9:
                    10:5e:02:55:44:c9:7b:57:88:34:a9:7e:98:00:c6:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:10:0D:F2:75:D8:D7:FF:53:07:70:4E:23:B7:92:9F:54:C7:B1
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:7d:a7:83:fa:b9:0c:de:e0:03:e6:9f:4d:c7:a4:66:50:
         1a:8a:81:fc:35:ee:cd:03:4f:28:e6:3d:67:e5:6b:35:70:ff:
         7f:6e:6b:dc:71:3d:1e:34:09:8f:30:37:c5:d2:26:83:05:32:
         0b:03:88:87:54:6a:78:e8:d5:db:83:0b:48:7b:1e:6b:db:79:
         98:20:fe:36:52:14:09:2f:93:04:1d:46:b2:88:75:e0:42:74:
         e7:cb:c9:49:11:f0:de:82:eb:0a:01:a3:aa:2c:76:26:77:3d:
         42:92:e3:26:35:79:0e:82:c2:cf:30:bc:81:f4:b1:5c:d3:a9:
         bb:58:bb:ff:d3:40:d6:29:b1:83:3a:9d:a9:23:69:d3:b4:34:
         19:c4:ff:de:79:8e:91:c3:0c:5b:5a:52:fe:e1:64:28:a9:64:
         e5:64:bf:04:59:d0:3b:f3:c6:95:9a:8a:de:67:14:98:9c:21:
         08:51:4d:b2:9b:8d:d7:bf:f5:76:5d:09:39:0b:13:27:ae:bb:
         15:88:d3:83:c5:96:15:2c:6e:17:f5:ad:4a:84:ac:7a:87:27:
         05:ce:ac:73:10:ce:5b:8f:bb:02:11:27:ee:24:27:07:2e:da:
         7a:60:2b:2e:45:2b:1b:5d:d6:55:b8:d6:68:b5:79:21:4a:2f:
         7c:ca:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:06:27 2024 by rpki-client on console-fra.rpki-client.org