Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File:                     pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier:          KQh95z8dUJNmbIozEG6EqIeAwfjtZDL8I9tYUMtAyw4=
Subject key identifier:   A5:61:2F:0C:9C:D3:66:82:DB:FF:6A:E3:F5:BD:73:3E:BC:0D:A3:B4
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer:       /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial:       01901F34D4BA1546D1CCF3E295A2E52B77A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number:          0BC1
Signing time:             Sun 16 Jun 2024 04:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:14 +0000
Files and hashes:         1: QFDEnmyVVreGiXPWhW9NPGB02W4.roa (hash: GlMlSvFaoxwUlk1n2LyvA+Mv98sMsgtOYxAF7sNysSM=)
                          2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: l1uv3OQMQpNGznm7JKGz70kFw0jcxu+PTMLTBXtUopU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:d4:ba:15:46:d1:cc:f3:e2:95:a2:e5:2b:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
        Validity
            Not Before: Jun 16 04:01:14 2024 GMT
            Not After : Jun 17 04:01:14 2024 GMT
        Subject: CN=a5612f0c9cd36682dbff6ae3f5bd733ebc0da3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:26:be:4d:e5:e0:61:10:c6:f7:29:e6:1c:
                    3a:b1:62:c5:fe:4a:4a:c1:cd:87:c6:f4:dd:6c:27:
                    83:fb:1d:e2:2c:23:82:87:4c:cf:6e:9d:9b:cc:ca:
                    f3:5f:11:dc:c7:8d:bc:13:6c:04:62:32:26:8d:77:
                    96:50:49:21:ce:56:0b:41:72:7d:2e:f9:ea:f4:b2:
                    7d:62:17:ff:85:75:3d:2c:fa:60:18:fd:fd:81:6c:
                    11:d7:bc:ae:e9:4c:12:4e:38:54:5b:a2:95:ac:44:
                    e0:a2:20:9f:b6:49:a3:1b:7f:70:38:d8:aa:00:60:
                    8b:ee:5e:77:67:72:79:d6:9e:b5:1a:0c:61:8c:1c:
                    de:56:49:b1:67:e4:62:3c:f6:f9:22:a1:61:20:32:
                    ec:4c:15:e9:1e:69:db:80:39:18:14:6b:e6:b7:87:
                    6d:ec:da:16:a0:c3:82:32:03:fc:ba:6b:ad:24:00:
                    c3:79:ef:6d:40:65:9a:d0:5e:39:49:44:9a:97:a3:
                    fa:0c:0a:21:01:ba:ca:51:7c:42:cd:c4:d5:ec:01:
                    ab:38:e7:93:fb:f3:9c:37:87:4d:a3:18:c0:f5:af:
                    37:10:f1:9d:ed:1d:e1:9c:12:48:67:97:17:9f:0a:
                    cf:5b:7a:fe:55:e4:25:44:14:a9:12:4d:19:0f:e4:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:2F:0C:9C:D3:66:82:DB:FF:6A:E3:F5:BD:73:3E:BC:0D:A3:B4
            X509v3 Authority Key Identifier:
                keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:5e:28:2b:a8:b7:4e:9a:0c:60:20:5c:bd:35:66:b2:1f:
         5e:51:4e:e8:fc:83:3c:82:c3:51:b2:ec:48:7d:a3:ad:fe:9a:
         b4:d6:31:3a:44:74:0f:29:d2:42:d9:97:1b:e3:92:f5:e8:7a:
         63:8e:49:71:5b:45:e1:55:a9:46:7e:36:b0:e2:09:06:e4:3b:
         92:fc:77:23:b4:63:f6:fb:b7:5d:9e:ae:e4:74:43:59:02:40:
         e3:9c:ff:6c:da:e3:6f:b6:be:4c:de:3c:d2:c5:16:e9:33:95:
         05:38:fe:cf:ca:83:81:94:86:87:f2:70:25:34:1d:bd:16:c5:
         25:d1:2f:eb:fa:e3:65:1b:e3:2d:72:e1:b0:39:4b:0f:5e:cb:
         db:79:c3:7f:11:2e:58:76:36:ec:1f:bd:94:3b:b6:51:37:28:
         73:ec:90:78:3d:cc:e4:ce:54:45:30:e0:76:d6:93:8b:50:4e:
         f1:40:85:30:b0:ba:a9:1a:3f:c3:4e:2c:48:1a:63:e6:cf:74:
         53:b7:95:8c:19:cc:16:23:ed:ac:7b:fe:94:6d:9c:bf:32:45:
         a5:df:2e:69:9a:ff:0b:9d:9e:31:f4:21:20:50:38:e4:64:48:
         81:76:ba:fc:be:0e:c3:a0:46:0c:61:f6:17:37:c4:fc:14:d3:
         1c:85:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:04 2024 by rpki-client on console-fra.rpki-client.org