Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File:                     DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier:          PQjLgjc9Tfzh3P1DkfA050SsYQu8A29hfEHrIpQkVBU=
Subject key identifier:   00:75:83:B6:CB:08:E5:EA:1B:6E:C8:80:79:C3:31:9A:7E:C1:AA:2D
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer:       /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial:       01901CA1B734B4C70BD80539E4157DAC2641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number:          0453
Signing time:             Sat 15 Jun 2024 16:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:18 +0000
Files and hashes:         1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: hskv35KN5ZJSzKQBeCN/flYWHyJXLwcFB2khGS999z0=)
                          2: I50yJMmujcvyUcNjdw5Zu2sBYcQ.roa (hash: djbq/Nyrc27MmDQ5s4HWqjan48sjl1k4hdk9Nzc9RaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:b7:34:b4:c7:0b:d8:05:39:e4:15:7d:ac:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
        Validity
            Not Before: Jun 15 16:01:18 2024 GMT
            Not After : Jun 16 16:01:18 2024 GMT
        Subject: CN=007583b6cb08e5ea1b6ec88079c3319a7ec1aa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:be:13:f1:f7:ce:52:dd:99:ce:dc:41:d5:fd:
                    ac:1a:c1:8f:74:5d:94:05:f7:23:f3:48:f5:87:5a:
                    bd:1d:e1:fb:37:06:5b:ba:1b:20:79:17:91:6f:45:
                    3f:0b:3f:8c:41:5c:3c:e6:8a:c7:d3:78:41:66:61:
                    74:20:10:c3:d7:1f:e2:94:d0:16:37:63:6a:9e:1c:
                    80:ae:97:ec:13:b6:51:45:1d:81:3e:4c:e5:0a:d1:
                    36:c8:48:8b:9c:36:79:4d:5b:49:49:ab:cc:3f:ef:
                    9f:cf:04:9e:98:e3:67:15:8a:d4:2b:68:3f:c5:8e:
                    c8:38:b8:46:45:3f:5f:9d:79:91:66:7c:b3:9c:db:
                    26:cc:6d:c5:36:20:1a:8c:8a:32:a6:cb:c9:47:6b:
                    67:3f:24:e6:5e:56:fa:ec:24:08:d4:6f:a5:ae:c0:
                    7a:8b:53:df:ca:46:e3:07:57:38:e0:5e:a2:95:47:
                    65:69:77:7e:34:45:db:65:f6:3f:8d:cb:52:39:6b:
                    a9:de:67:55:7d:5f:1a:1f:f6:0d:32:30:1e:32:f0:
                    c9:3f:f0:5c:08:77:2d:29:b8:47:90:bb:da:3c:26:
                    93:35:d1:35:f1:d8:52:83:dd:cc:1c:31:93:1c:bf:
                    e1:b9:bd:13:c0:a1:81:4e:e9:fa:42:30:7b:5e:d6:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:83:B6:CB:08:E5:EA:1B:6E:C8:80:79:C3:31:9A:7E:C1:AA:2D
            X509v3 Authority Key Identifier:
                keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:c2:1a:45:87:46:ad:8b:6c:be:03:0c:0f:ff:e0:4b:a6:
         50:c2:77:76:83:05:f5:28:52:bc:19:72:cf:9b:66:ce:62:3b:
         af:dc:f7:12:b8:2f:97:2a:8d:00:41:57:22:33:fa:1d:73:74:
         c5:ee:11:c7:67:98:d0:e6:65:6a:72:df:8d:58:36:9b:25:73:
         04:27:12:a5:f9:49:12:2a:07:e8:ed:ef:7a:a2:a9:fb:45:4d:
         8a:f5:31:63:c6:34:f3:1a:23:76:cc:9c:36:08:3e:81:4b:27:
         8a:b7:5b:6f:8d:88:a5:3f:89:64:07:2c:11:5d:ee:ad:cd:03:
         b4:3c:c9:0f:22:8e:0d:c0:95:02:b5:6f:c1:81:97:29:10:e5:
         55:81:fb:ba:cf:b8:e6:5c:10:d0:ce:46:9b:84:98:6d:bc:db:
         ed:fc:12:73:76:f9:1e:0f:1f:17:aa:e7:86:91:de:81:ac:65:
         70:e6:89:6b:2a:80:d4:41:9e:84:fe:1c:5b:0c:4d:62:17:eb:
         57:21:e5:45:f6:6e:de:4d:87:51:16:db:e9:bb:a0:fe:22:8a:
         2d:95:df:f7:18:b9:0a:bb:cb:1a:6c:c5:f7:25:3f:eb:07:ae:
         bb:92:78:73:48:eb:bc:fe:3f:8b:e5:40:4c:5c:d9:5b:42:bc:
         15:c7:2d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcobc0tMcL2AU55BV9rCZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4
NzJiMDUwHhcNMjQwNjE1MTYwMTE4WhcNMjQwNjE2MTYwMTE4WjAzMTEwLwYDVQQD
EygwMDc1ODNiNmNiMDhlNWVhMWI2ZWM4ODA3OWMzMzE5YTdlYzFhYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA874T8ffOUt2ZztxB1f2sGsGPdF2U
Bfcj80j1h1q9HeH7NwZbuhsgeReRb0U/Cz+MQVw85orH03hBZmF0IBDD1x/ilNAW
N2NqnhyArpfsE7ZRRR2BPkzlCtE2yEiLnDZ5TVtJSavMP++fzwSemONnFYrUK2g/
xY7IOLhGRT9fnXmRZnyznNsmzG3FNiAajIoypsvJR2tnPyTmXlb67CQI1G+lrsB6
i1PfykbjB1c44F6ilUdlaXd+NEXbZfY/jctSOWup3mdVfV8aH/YNMjAeMvDJP/Bc
CHctKbhHkLvaPCaTNdE18dhSg93MHDGTHL/hub0TwKGBTun6QjB7XtaGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB1g7bLCOXqG27IgHnDMZp+waotMB8GA1UdIwQY
MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et
YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl
LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAXCGkWH
Rq2LbL4DDA//4EumUMJ3doMF9ShSvBlyz5tmzmI7r9z3ErgvlyqNAEFXIjP6HXN0
xe4Rx2eY0OZlanLfjVg2myVzBCcSpflJEioH6O3veqKp+0VNivUxY8Y08xojdsyc
Ngg+gUsnirdbb42IpT+JZAcsEV3urc0DtDzJDyKODcCVArVvwYGXKRDlVYH7us+4
5lwQ0M5Gm4SYbbzb7fwSc3b5Hg8fF6rnhpHegaxlcOaJayqA1EGehP4cWwxNYhfr
VyHlRfZu3k2HURbb6bug/iKKLZXf9xi5CrvLGmzF9yU/6weuu5J4c0jrvP4/i+VA
TFzZW0K8Fcctow==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:29 2024 by rpki-client on console-fra.rpki-client.org