Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File:                     0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier:          g4caVqrsczCGnQjBkk1y0bhRPmQ1HZfL6vJnL56BojA=
Subject key identifier:   10:F3:50:45:CB:D3:6C:A4:3F:80:9A:66:37:2A:9F:B1:BD:DE:36:1E
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer:       /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial:       01901D468CE6709B4CCF4FA6138805B382F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number:          061D
Signing time:             Sat 15 Jun 2024 19:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:21 +0000
Files and hashes:         1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: zCdR2nP3gxYoXJa9qRQGO+a8v17UqRkqOphuQQXgAGA=)
                          2: cwE96DdtPA9UFoEk0S1oqTvNRoI.roa (hash: IdztfzoBKAV61CrJ70BD5e2+dLlP3i9mD3+mpPqBcvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8c:e6:70:9b:4c:cf:4f:a6:13:88:05:b3:82:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
        Validity
            Not Before: Jun 15 19:01:21 2024 GMT
            Not After : Jun 16 19:01:21 2024 GMT
        Subject: CN=10f35045cbd36ca43f809a66372a9fb1bdde361e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:64:3f:bf:4b:75:c6:6f:dc:e5:4d:c5:98:23:
                    77:f5:3e:84:e9:c4:8f:72:32:57:11:5d:5d:1a:88:
                    d4:e7:6b:ff:04:63:77:ce:18:23:7c:ba:76:8f:76:
                    fa:28:b7:a2:7e:d5:46:cb:ff:d2:3b:f1:f3:86:5d:
                    ba:84:a3:1b:71:79:6e:81:5e:8c:4b:bf:e1:13:75:
                    06:57:f3:b7:c0:29:f6:18:2e:90:24:00:f7:2e:66:
                    5a:05:1a:04:4a:c0:58:24:77:81:b6:6f:b0:7d:bc:
                    40:cc:12:bd:b8:e0:ae:9a:cc:75:f4:70:c6:9d:94:
                    a0:4b:58:6e:38:59:17:71:a6:06:eb:32:a8:ed:d4:
                    f9:0b:66:05:a2:4c:d1:f9:60:1d:97:29:f8:92:cc:
                    63:e9:dc:d8:97:54:ca:2c:fd:f7:a7:fc:9a:11:d9:
                    f5:a1:4e:f6:5f:ae:ee:09:d9:b8:a5:94:ba:79:7a:
                    21:13:38:55:9f:9d:d6:fe:40:ac:53:46:86:ce:d9:
                    3a:cb:33:20:dd:cc:83:45:ac:77:55:fd:0e:5f:8b:
                    c0:02:c5:80:2a:f9:55:97:5f:c8:23:2b:8c:fd:b2:
                    2d:61:30:e6:08:11:f1:9a:19:d8:0d:9c:40:70:65:
                    e3:65:8f:05:2a:7f:bf:5e:54:58:49:41:7c:b7:98:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F3:50:45:CB:D3:6C:A4:3F:80:9A:66:37:2A:9F:B1:BD:DE:36:1E
            X509v3 Authority Key Identifier:
                keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:e7:84:5f:89:33:87:5c:fc:4b:dc:ef:f3:33:09:17:b9:
         47:d1:50:b4:0d:46:04:1e:d7:ca:82:ea:94:b4:d9:f3:94:6f:
         d2:8e:cc:e2:51:1c:0f:02:01:ab:7d:4f:4b:12:60:9a:1f:a5:
         68:2f:aa:da:13:95:48:5f:3a:93:39:34:e6:6b:56:d3:70:e2:
         71:49:7d:9b:7b:69:13:0e:8e:3d:d5:53:15:ca:5e:62:fc:2a:
         b2:ab:38:85:ea:b6:43:18:e1:2d:43:5f:bc:2f:4a:0b:32:68:
         93:54:e9:d9:fb:00:e9:3c:89:25:d0:71:c7:ad:ec:c8:43:ca:
         99:dd:71:7f:a9:85:d9:13:f7:dd:b7:a8:1e:b8:cc:fc:5e:09:
         31:ae:2f:02:d4:23:f9:1a:f5:f4:07:36:27:91:57:74:5b:39:
         32:d2:00:ed:7d:1b:cc:eb:a3:9a:19:a8:99:5a:3e:7a:66:bc:
         70:6d:5f:40:27:b6:4f:88:62:7c:77:40:a3:9a:6a:63:7d:d3:
         8c:ee:64:c3:ef:26:4b:0a:f2:ec:77:99:6a:c2:0f:03:52:0d:
         41:67:1d:29:11:ef:0a:75:bb:51:87:f4:01:68:dd:a9:df:68:
         26:de:78:cc:ef:fb:d5:06:4f:6f:5d:a0:a7:d9:e3:06:46:31:
         54:30:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:56:13 2024 by rpki-client on console-ams.rpki-client.org