Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File:                     DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier:          pYYC+Lj1OwWTICHlZ4QPUKh2ozNGbQlEAetJlAV2p7w=
Subject key identifier:   90:49:4D:7F:97:09:45:71:E8:8F:C5:12:1B:83:66:C1:2A:9F:D6:1E
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer:       /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial:       019045D413B76490E773DE45EAA3A983F78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 16:00:44 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:44 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:44 +0000
Files and hashes:         1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: Vl/LRoNggQ+wOy1f/JPtFRfPtxQcqra0ci/enrltVbI=)
                          2: uatX_CmG54A1PWiXNHEO5hKh3SY.roa (hash: 0gUizD629rrkVdaK0KNVm9Yrt5mZFrgTB2fKs4TOd/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:13:b7:64:90:e7:73:de:45:ea:a3:a9:83:f7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
        Validity
            Not Before: Jun 23 16:00:44 2024 GMT
            Not After : Jun 24 16:00:44 2024 GMT
        Subject: CN=90494d7f97094571e88fc5121b8366c12a9fd61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:8c:f4:00:96:d4:ad:98:49:3e:f4:3b:ca:
                    c9:9c:fc:74:32:15:da:69:f5:34:e2:4d:8c:8a:73:
                    56:0a:31:f9:63:49:c0:5f:0c:e5:18:35:31:66:2e:
                    f4:53:47:2b:5c:a1:f0:cf:d2:71:84:ca:18:f3:16:
                    cf:b9:8d:f0:f9:90:41:7f:d2:91:5c:cb:dc:52:dd:
                    39:7f:47:ca:2c:f6:46:01:99:d6:81:65:49:62:15:
                    06:bc:bf:ae:57:f9:c5:50:41:88:5d:81:ea:e1:8c:
                    1d:ef:ea:ec:7f:87:86:4d:61:03:4e:03:65:67:63:
                    79:54:2e:c0:d2:a1:7e:47:df:c8:f8:c1:ae:c7:db:
                    74:fd:17:ee:fd:2e:c6:d7:7b:05:a7:e7:c3:45:eb:
                    46:5a:96:ee:20:e7:96:04:1c:3c:bd:16:e3:09:87:
                    d3:d4:c5:14:e6:b0:46:0f:a9:b5:83:0c:7b:e1:52:
                    fe:36:5a:61:a5:54:c8:cb:15:c1:29:ec:bc:42:25:
                    94:cd:ce:51:b0:f9:7b:9f:b1:fd:df:2f:ba:6d:98:
                    93:2b:9d:54:5b:77:4d:d3:02:90:09:35:ee:19:7b:
                    50:10:c7:81:af:b8:a5:23:94:06:f6:1e:f8:f5:2d:
                    dc:71:68:96:8b:70:6a:87:c5:7a:35:20:4f:5a:18:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:4D:7F:97:09:45:71:E8:8F:C5:12:1B:83:66:C1:2A:9F:D6:1E
            X509v3 Authority Key Identifier:
                keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:be:81:40:2e:f0:2a:01:94:5e:04:2d:81:96:4e:28:ba:24:
         2d:db:e3:c2:8e:17:f5:e3:6d:64:30:ad:61:01:9d:d3:c9:24:
         05:02:51:e2:d1:cc:fd:fa:3d:02:9d:69:3d:df:b3:1c:6c:75:
         08:3e:ab:00:ea:1c:a0:e0:8e:25:52:78:18:17:88:50:13:3b:
         5c:ec:9b:44:31:52:33:13:0e:60:e7:e4:c5:26:4f:2f:ad:3b:
         40:e1:a4:d8:26:cf:74:b6:d6:88:d6:fc:99:2f:a0:7b:0b:e0:
         20:b9:51:45:0e:7c:8c:8d:41:78:19:2b:56:a2:24:9c:a8:1e:
         f6:4d:78:04:6e:f9:1c:2f:fa:27:1f:28:d1:ff:e5:e2:ab:cd:
         9e:e4:b8:d4:0f:0b:9d:40:03:02:98:84:97:e2:40:60:9a:e5:
         06:aa:94:19:6a:65:f5:6c:f8:93:69:3f:43:43:94:2b:bf:2a:
         f9:b0:e3:17:44:94:a3:7f:81:c5:38:5a:ae:d4:a3:65:34:0c:
         2f:4c:4e:7f:b2:b9:82:45:17:e7:b3:cf:1f:c8:da:9a:19:83:
         59:d7:99:68:a3:61:da:b6:ef:1e:53:68:13:8b:b6:b9:00:af:
         b7:12:50:62:39:57:30:26:bb:98:91:a9:9f:b4:70:88:90:fa:
         db:89:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:24:07 2024 by rpki-client on console-fra.rpki-client.org