Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File:                     djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier:          XdLP/ArXsOaRYa7cHBAlBIUIcH3Ml/QnWuHOoE+ZqQI=
Subject key identifier:   53:18:26:09:13:BE:8F:B3:02:E6:BB:C7:FB:E0:13:42:AB:3E:D4:5B
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer:       /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial:       01901DEADC6D755C1F00B145A53369F98A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:49 +0000
Files and hashes:         1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: AtjSKw8jLj3MR6MdNmTT4Frcfr08pzMwozHY6IFbNDA=)
                          2: fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa (hash: MZykPxCIQSWJ1GWxUBgNCque3AgkO/A+tfohP+K4SZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:dc:6d:75:5c:1f:00:b1:45:a5:33:69:f9:8a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
        Validity
            Not Before: Jun 15 22:00:49 2024 GMT
            Not After : Jun 16 22:00:49 2024 GMT
        Subject: CN=5318260913be8fb302e6bbc7fbe01342ab3ed45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8b:23:5e:87:f0:b4:c4:81:16:60:92:95:57:
                    13:0c:7a:c8:f8:11:6d:be:be:1b:04:03:cf:56:7c:
                    f5:7d:e5:f9:01:ed:c6:be:e0:b2:24:d7:b4:1f:40:
                    47:6a:b3:08:8e:65:fe:7d:dc:0c:3e:ed:6b:29:7b:
                    5b:bd:79:b2:28:06:1a:c9:46:a6:f1:f5:e5:7d:85:
                    57:43:11:e5:9e:4a:53:9a:91:d3:a1:37:b0:d7:40:
                    98:ab:b9:3e:9b:7e:ab:8f:1b:ef:d3:02:4d:34:37:
                    b9:79:1d:3c:48:00:74:d6:2d:a5:10:fc:aa:6c:b7:
                    01:7e:98:60:84:58:b7:93:8d:a9:46:9b:9c:1d:91:
                    c0:7e:1b:30:60:bc:ae:b3:59:ea:6c:69:3c:e6:36:
                    f4:25:15:33:0d:d0:f8:8a:20:e7:57:96:34:9c:e7:
                    ba:b7:1e:87:6a:d9:b8:36:36:ec:74:3b:9b:2c:e3:
                    bd:7b:ed:c0:9e:86:d0:7c:2c:19:9b:4c:c7:08:a3:
                    1d:86:fc:61:45:24:57:df:02:3c:55:4b:6a:ea:8a:
                    1a:aa:e3:59:6f:3b:32:d5:ba:d5:5c:54:bc:92:05:
                    67:12:25:f4:46:f9:47:d3:0b:a4:2e:ee:6b:ac:88:
                    d1:81:c3:5b:96:2f:01:2b:5d:b0:cf:39:71:06:7c:
                    58:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:26:09:13:BE:8F:B3:02:E6:BB:C7:FB:E0:13:42:AB:3E:D4:5B
            X509v3 Authority Key Identifier:
                keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:a0:ce:0c:53:33:a4:f9:8b:2f:c5:b0:fd:05:9e:a9:f2:
         e5:73:62:95:02:61:56:31:ec:0c:df:ff:b2:21:09:eb:e0:09:
         87:cc:f8:54:98:3b:3c:9f:f9:f5:b0:22:89:4f:76:38:76:dc:
         02:16:87:7e:d8:6a:7b:0a:bd:47:11:d1:df:48:c5:fe:b8:76:
         91:ca:33:94:4d:78:6f:5c:73:8b:46:e3:59:dc:ff:f6:99:8d:
         4f:63:f2:ea:83:d2:b2:d9:0d:0b:bd:f8:63:43:51:f7:d1:1d:
         f2:85:06:57:74:bb:a2:4a:7e:78:d5:d8:36:49:ca:dd:0c:dc:
         96:ec:c3:70:7a:8c:64:b6:34:7c:15:e1:48:61:6a:29:80:87:
         b2:65:dd:00:db:26:13:0c:67:7d:3a:ee:6e:9f:0b:c1:ac:b4:
         37:bd:07:cb:9e:5a:cc:4b:6a:1d:92:2f:f1:57:52:83:86:67:
         da:fa:a8:04:ab:28:6d:ea:0c:51:49:94:e7:fe:9b:5e:1f:51:
         22:17:cc:ae:fb:bc:b3:a8:2d:a4:12:65:4a:60:af:1e:b5:1d:
         e8:09:8b:37:ad:9c:d6:c6:bc:19:4a:5c:e6:25:06:50:33:4d:
         ba:ef:d3:e2:80:13:ec:5b:90:85:4f:c3:9c:74:ca:de:3c:b6:
         b6:85:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:50 2024 by rpki-client on console-ams.rpki-client.org