Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File:                     DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier:          0HAUDgBUoIj6fyr01tWyPBd5+4nFDethBvhqcnpHn60=
Subject key identifier:   7E:0F:A5:65:81:0B:43:50:C2:0C:ED:36:8A:F6:B1:36:06:BA:18:DC
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer:       /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial:       01906D4F44221EBB3906B89B54BF43360FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number:          93
Signing time:             Mon 01 Jul 2024 08:00:29 +0000
Manifest this update:     Mon 01 Jul 2024 08:00:29 +0000
Manifest next update:     Tue 02 Jul 2024 08:00:29 +0000
Files and hashes:         1: 4gJ1dh1hVVhW7uZyinjeu6HCAoM.roa (hash: qZw4Mt/zE52oWBU0vHMOD25/wYpDc5vH6AA7yKw8O94=)
                          2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: qEFU+Kryi50JpQ43VkWqpVaZzJ8mcQ2VPaB2Rwl/GC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:4f:44:22:1e:bb:39:06:b8:9b:54:bf:43:36:0f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
        Validity
            Not Before: Jul  1 08:00:29 2024 GMT
            Not After : Jul  2 08:00:29 2024 GMT
        Subject: CN=7e0fa565810b4350c20ced368af6b13606ba18dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:3d:76:47:67:e4:9f:bf:79:e2:87:c8:ac:
                    3f:55:b9:c7:57:79:af:9f:24:9b:d8:b1:33:e8:e8:
                    c1:83:2e:37:b9:38:d0:9a:2c:63:7b:af:64:ec:0c:
                    1f:ec:bd:91:6e:0a:fc:11:fb:bf:3a:bb:ed:3d:1f:
                    ba:f0:c5:18:fd:cf:b1:5c:f3:19:bf:50:63:48:95:
                    e5:3a:e8:ba:04:5a:ae:01:52:0d:8f:98:fa:95:e8:
                    ff:a1:fd:7e:b5:19:6f:d0:86:3d:0d:4b:e0:ac:49:
                    6b:91:cc:9f:63:b2:ec:39:85:3d:20:89:cc:35:af:
                    d4:ea:52:13:2e:ea:6f:df:d7:a0:3b:06:dc:d9:38:
                    40:71:15:8f:c1:af:e1:dd:b9:ad:cd:7b:68:a5:b5:
                    50:68:ec:4d:1c:a6:17:ea:93:09:41:3d:4a:1b:69:
                    62:30:c0:9a:6f:f7:86:a2:36:26:c1:fd:a2:65:be:
                    48:78:ff:c2:41:7c:40:04:17:e1:b2:cb:26:fd:bc:
                    80:15:25:5f:91:bf:84:5b:03:4d:6c:28:92:ed:ee:
                    a1:15:ee:f6:c6:79:69:c6:2f:19:8a:9e:8b:af:3b:
                    36:37:3f:72:11:77:5c:1d:86:d4:0d:d9:fa:a3:27:
                    57:e4:f8:90:20:e7:a9:f7:45:da:35:c6:2b:4f:17:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:A5:65:81:0B:43:50:C2:0C:ED:36:8A:F6:B1:36:06:BA:18:DC
            X509v3 Authority Key Identifier:
                keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f7:bf:94:d5:f9:d9:b8:44:04:6f:3a:ba:1f:2c:42:9f:f1:
         33:95:e5:87:6e:b1:31:61:72:e3:57:08:73:3c:e4:5b:4c:b7:
         82:0c:a2:08:23:bf:37:4a:0c:0d:63:81:7a:2c:9c:11:41:da:
         3c:7a:2f:b9:30:33:ed:60:e1:2a:3e:09:8f:1c:6f:0e:9c:f8:
         5d:64:08:95:0d:16:a1:16:cf:c0:60:ba:74:6b:ae:47:70:97:
         23:54:24:5a:c9:6b:d6:22:2e:44:a9:cc:a4:72:dd:43:dc:f6:
         91:08:76:f0:ef:46:49:9f:34:f4:2f:9b:2a:10:66:9f:ba:46:
         c8:8b:45:68:c5:f4:6d:a7:ce:9e:3a:52:da:73:31:71:59:d4:
         16:cb:3b:22:fc:9c:23:96:27:d5:b3:98:a3:29:e6:fa:66:77:
         83:bc:cb:42:58:61:49:24:c2:61:ef:9d:c2:40:60:2c:e6:f4:
         48:6d:cc:b9:03:54:bb:8c:30:25:6b:a8:c7:72:23:7c:ec:82:
         8c:eb:a5:8f:dc:4c:7c:10:da:ac:4c:2d:04:f7:84:8b:d7:11:
         45:95:45:97:e5:67:46:e8:68:51:26:b1:b8:6e:84:4a:01:87:
         3c:c9:fa:03:a7:27:9b:5c:c8:e6:aa:84:32:82:f0:a3:12:f0:
         2e:7f:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:45:29 2024 by rpki-client on console-ams.rpki-client.org