Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File:                     DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier:          AQ54b3/454hO3XcFjX/INf8qEh7P5N7Cp4kIANNSCkw=
Subject key identifier:   D0:B0:1E:70:2E:68:1A:C2:60:E7:68:74:77:6E:A8:2D:9F:52:5D:13
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer:       /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial:       01903AE3EC5051733E15D13637EECD855E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number:          1125
Signing time:             Fri 21 Jun 2024 13:02:13 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:13 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:13 +0000
Files and hashes:         1: DGHZfxKkPZ0U0K76ps1pA7WjgFs.roa (hash: eIIsnrnmldXq85Y0NjvDM3h7EV85y/dWrYtK0n9jQJo=)
                          2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: GYGJbsMlsBdrzLVekAWg9AvHPp+jRXdcV8zhevizpP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:ec:50:51:73:3e:15:d1:36:37:ee:cd:85:5e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
        Validity
            Not Before: Jun 21 13:02:13 2024 GMT
            Not After : Jun 22 13:02:13 2024 GMT
        Subject: CN=d0b01e702e681ac260e76874776ea82d9f525d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:8b:71:f9:ec:b5:b1:40:fe:cd:25:1a:3a:
                    60:a6:76:48:31:fc:85:13:4d:72:2d:61:a2:92:ea:
                    31:43:e4:ce:24:56:dd:e3:17:0d:1c:dc:bf:86:25:
                    e2:15:b4:13:35:b6:91:dd:e2:62:f8:b6:38:75:0d:
                    ce:ee:74:c1:cf:c0:d0:b4:94:96:a5:07:92:c8:ec:
                    14:82:56:6f:ad:1c:89:e2:59:36:7a:a5:cb:36:6a:
                    0d:75:05:0b:ee:59:a2:15:ae:52:6e:fc:01:3c:36:
                    ec:ed:fe:f8:da:af:44:79:53:a9:ed:74:fa:b8:80:
                    40:4f:b1:90:a9:e3:ad:c3:ab:f7:38:db:28:c2:59:
                    a7:44:24:c5:a2:f1:e9:15:81:54:11:b5:f9:5d:b9:
                    e0:43:1e:d1:a8:e9:76:8c:46:0a:2f:b1:d8:be:af:
                    4e:2d:1a:bd:30:25:bd:3e:28:1b:0f:a7:3e:56:10:
                    13:43:b4:6e:dc:af:9a:b8:65:59:3b:4e:cd:ea:b8:
                    80:80:94:5f:3a:5c:70:e7:1c:90:c4:8f:2a:8e:99:
                    cc:33:3b:30:64:8d:79:d6:fe:69:c1:d2:6d:c9:0c:
                    91:e9:af:a1:14:f1:0a:90:64:92:fd:33:fc:0a:8c:
                    36:a3:98:03:40:e9:75:9f:68:c5:68:0e:c5:0e:6c:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B0:1E:70:2E:68:1A:C2:60:E7:68:74:77:6E:A8:2D:9F:52:5D:13
            X509v3 Authority Key Identifier:
                keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:dd:f4:32:8d:fb:d8:15:69:5f:3c:5d:b1:d8:96:5e:1a:
         dd:94:5a:af:71:9b:36:58:eb:c0:23:31:d6:cd:ae:de:32:07:
         1c:c0:a3:e3:70:3d:cc:0c:aa:8f:62:cb:c7:9f:5e:25:c5:bd:
         b2:d8:0d:48:fe:b2:c7:57:e5:e3:f8:10:08:f0:c2:2f:59:23:
         97:ac:a2:9a:58:9d:2c:62:8b:52:9c:ca:8b:fb:8e:be:ef:f8:
         70:c8:c9:ee:27:3b:e5:f0:73:bd:ac:93:b8:c7:46:f4:87:29:
         6f:ea:7d:88:7a:1c:2e:1e:fd:e9:ed:99:8e:c7:f6:87:62:80:
         74:ac:05:02:32:d3:24:35:fc:c7:f5:2a:24:1d:00:67:b8:b4:
         93:ea:a7:15:7e:79:0b:68:3c:4e:55:24:c4:a8:32:db:0b:a0:
         fd:1d:42:eb:5f:56:7b:be:56:6a:47:d7:7a:b4:f0:12:bb:49:
         2a:c5:5c:59:da:b7:80:b4:5c:d7:6a:87:e2:23:94:86:61:a9:
         7e:9a:32:7d:f1:00:fe:e9:0c:b7:3f:86:dd:3d:85:3f:f1:fd:
         ca:9d:03:3c:c9:b3:a7:f2:f5:e8:44:86:1b:4f:d5:84:00:37:
         35:0b:63:f6:94:57:6c:e0:66:76:1d:cb:3e:63:31:5b:f5:71:
         80:6e:b3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA64+xQUXM+FdE2N+7NhV6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0
NGQzMGMwHhcNMjQwNjIxMTMwMjEzWhcNMjQwNjIyMTMwMjEzWjAzMTEwLwYDVQQD
EyhkMGIwMWU3MDJlNjgxYWMyNjBlNzY4NzQ3NzZlYTgyZDlmNTI1ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxaLcfnstbFA/s0lGjpgpnZIMfyF
E01yLWGikuoxQ+TOJFbd4xcNHNy/hiXiFbQTNbaR3eJi+LY4dQ3O7nTBz8DQtJSW
pQeSyOwUglZvrRyJ4lk2eqXLNmoNdQUL7lmiFa5SbvwBPDbs7f742q9EeVOp7XT6
uIBAT7GQqeOtw6v3ONsowlmnRCTFovHpFYFUEbX5XbngQx7RqOl2jEYKL7HYvq9O
LRq9MCW9PigbD6c+VhATQ7Ru3K+auGVZO07N6riAgJRfOlxw5xyQxI8qjpnMMzsw
ZI151v5pwdJtyQyR6a+hFPEKkGSS/TP8Cow2o5gDQOl1n2jFaA7FDmxUbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCwHnAuaBrCYOdodHduqC2fUl0TMB8GA1UdIwQY
MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt
MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj
LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm3d9DKN
+9gVaV88XbHYll4a3ZRar3GbNljrwCMx1s2u3jIHHMCj43A9zAyqj2LLx59eJcW9
stgNSP6yx1fl4/gQCPDCL1kjl6yimlidLGKLUpzKi/uOvu/4cMjJ7ic75fBzvayT
uMdG9Icpb+p9iHocLh796e2Zjsf2h2KAdKwFAjLTJDX8x/UqJB0AZ7i0k+qnFX55
C2g8TlUkxKgy2wug/R1C619We75WakfXerTwErtJKsVcWdq3gLRc12qH4iOUhmGp
fpoyffEA/ukMtz+G3T2FP/H9yp0DPMmzp/L16ESGG0/VhAA3NQtj9pRXbOBmdh3L
PmMxW/VxgG6zUg==
-----END CERTIFICATE-----
Generated at Fri Jun 21 16:59:26 2024 by rpki-client on console-fra.rpki-client.org