Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File:                     0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier:          TS9BdkEn8dAEIRJ/eM/3Yjg2INgddlLMj1AyaSKyBMQ=
Subject key identifier:   24:77:5C:5B:3D:75:A4:C6:BE:BD:DA:0B:A3:BB:A7:2C:76:DD:62:C7
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer:       /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial:       01901E588966B95B2B3AA77C5FF20D31E7DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number:          08D1
Signing time:             Sun 16 Jun 2024 00:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:37 +0000
Files and hashes:         1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: 8xrGRcWay8zVfVR4doBUXO6chZxOfFFrhhSx4F56VCc=)
                          2: 8xcNa6_AcGgRQIq7h9FyIYJueQc.roa (hash: MNclM5IvJ4hIu9a8NL7DfymxqVGIWXFcJrIRcnAsqEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:89:66:b9:5b:2b:3a:a7:7c:5f:f2:0d:31:e7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Validity
            Not Before: Jun 16 00:00:37 2024 GMT
            Not After : Jun 17 00:00:37 2024 GMT
        Subject: CN=24775c5b3d75a4c6bebdda0ba3bba72c76dd62c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:06:f1:cd:e4:45:8c:e9:9a:bb:e3:a9:54:
                    07:f2:0f:d6:b9:c3:77:a8:79:fe:4c:d0:d9:0e:4e:
                    7d:d0:5d:75:71:25:87:c6:7b:26:fd:d5:f0:5c:9e:
                    2e:5d:99:9d:8f:e4:3c:ad:0d:4c:a0:a8:7d:ae:04:
                    25:55:f6:dc:e0:ba:1a:d2:35:6a:8f:b9:7a:cb:80:
                    a0:9f:3e:ac:30:00:a8:a0:e5:1e:08:d4:09:91:82:
                    66:06:a7:08:7c:5f:d0:5a:a0:8e:1f:c2:d8:f4:97:
                    ba:34:4f:1d:e1:a0:08:af:f1:06:05:de:95:94:77:
                    a8:6f:64:08:c5:40:c2:a0:49:63:b1:b7:ad:33:8e:
                    d6:2a:3d:c7:de:d0:b5:e0:c9:b4:cc:ec:4a:66:83:
                    67:40:bc:fc:de:78:91:48:bc:b9:d8:79:7f:73:8b:
                    34:27:cc:cb:c2:96:4f:fc:ad:dd:44:a3:8a:15:fb:
                    36:39:87:1a:5d:97:4b:fa:ee:25:16:73:44:7b:72:
                    24:96:95:08:15:7c:63:b3:73:9f:b0:84:d4:d4:03:
                    e6:f6:52:73:90:2e:e3:37:5d:31:1e:76:a3:7a:4e:
                    ff:4e:e9:9b:77:bd:79:e8:02:cb:22:45:22:5f:f1:
                    7b:50:26:fa:7d:a4:ee:f6:fa:f6:28:8e:81:aa:1a:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:77:5C:5B:3D:75:A4:C6:BE:BD:DA:0B:A3:BB:A7:2C:76:DD:62:C7
            X509v3 Authority Key Identifier:
                keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:a9:d4:82:61:95:2a:b7:d6:0d:c0:6c:9d:bb:a4:f5:97:
         0c:31:62:75:0a:38:12:6c:52:16:bb:64:d0:cd:52:6a:ce:62:
         b7:6c:e6:cb:0f:8c:ed:09:4b:c8:97:ca:b9:8b:4a:60:51:d5:
         f2:86:4a:50:2b:00:ed:d3:7d:f9:fb:63:53:17:db:cc:38:a2:
         02:c0:83:4e:1e:86:70:6e:00:11:62:6e:f8:67:73:5a:32:3d:
         67:5a:fa:24:c6:a1:84:8e:97:51:28:2c:14:f2:fd:02:27:07:
         71:19:bc:07:22:62:d7:04:e3:ff:67:8a:17:7d:91:c0:98:15:
         0f:26:d4:f2:2a:69:1f:73:76:64:31:6f:92:dd:e2:31:c3:07:
         a4:b7:b5:c3:9b:c4:c9:f6:4a:55:24:b2:11:cc:cb:28:92:47:
         0c:68:f1:15:27:46:57:14:ae:55:98:59:50:fe:2d:4b:13:06:
         e3:53:f0:94:a6:48:ed:e2:14:05:05:cb:88:b0:c8:a4:d2:62:
         20:18:64:3d:b0:b4:22:c1:88:88:da:da:7c:1e:8a:4c:00:85:
         52:a0:f5:1d:24:f5:f6:e3:16:87:54:f4:72:65:45:0f:b2:b2:
         f0:a3:13:af:22:61:ba:57:ff:08:01:83:68:78:0e:d1:36:f0:
         e9:76:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:09 2024 by rpki-client on console-fra.rpki-client.org