Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File:                     dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier:          8UNIlwGAmFADA71gRswZ6Ue+w+OdbiFIjq3czPeI1Xg=
Subject key identifier:   D3:88:92:A3:2C:DD:2B:2B:94:29:FF:51:FD:76:00:72:51:78:F1:A7
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer:       /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial:       01901DECAA404F2E01A75AD84CBF78E309E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number:          0C8F
Signing time:             Sat 15 Jun 2024 22:02:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:47 +0000
Files and hashes:         1: 5J4syWzMNYAAvhRky_13h9SCyrU.roa (hash: srbJ86XNEf4n3svadFEpEGitxG3+cjt+FTFTCgFB2KQ=)
                          2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: fBwGElwKT8Vnp/QATXX0n7NLBZgXIL0vOEpd+f+669o=)
                          3: j4GCoGR2ifS4g3vRyBFVOZyKhQY.roa (hash: waY3m/0AGdDp0LpEKELDEkJIuzP3S6IrvmOeMlAEtOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:aa:40:4f:2e:01:a7:5a:d8:4c:bf:78:e3:09:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
        Validity
            Not Before: Jun 15 22:02:47 2024 GMT
            Not After : Jun 16 22:02:47 2024 GMT
        Subject: CN=d38892a32cdd2b2b9429ff51fd7600725178f1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:54:7d:54:76:a0:bd:4f:ee:48:e4:e6:84:
                    fc:51:ad:ec:60:c0:93:bd:52:32:e7:fa:66:fd:f7:
                    04:f5:22:a9:29:e1:0f:84:00:a0:f4:d6:38:b4:86:
                    df:5c:f6:39:ae:02:c8:64:e0:89:40:32:ff:64:b8:
                    05:3d:d0:6c:8c:a1:f1:f8:b1:cf:d2:fa:87:f1:04:
                    f4:15:2b:fd:c5:71:6f:69:0a:fa:04:4a:57:8e:52:
                    e5:ce:71:fe:30:7d:14:de:d7:da:00:53:f7:b2:d6:
                    b6:18:12:8b:ba:6d:0d:0b:3a:61:4c:8e:2c:65:4a:
                    53:69:0f:ca:6a:3e:d1:d4:f7:6c:98:d5:c6:0d:c4:
                    2f:76:b6:79:08:1f:bf:7e:22:3e:bf:4d:80:59:05:
                    17:1c:f6:39:c9:54:25:44:a0:f3:3c:15:33:50:5f:
                    4e:d1:3a:f7:76:83:5a:03:a7:89:d3:70:29:b4:93:
                    d6:3d:d2:f6:d7:dd:6c:be:94:72:4a:df:7a:a3:69:
                    21:5f:2f:7e:3b:41:90:5b:cc:f7:90:98:ef:27:0b:
                    99:8a:28:7e:7c:17:55:f2:71:ff:cc:c6:25:fc:14:
                    48:29:51:1e:c9:c5:4b:8b:49:98:f0:19:24:44:92:
                    f2:b6:29:33:9c:c0:0b:4c:c3:02:8e:e8:1f:62:df:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:92:A3:2C:DD:2B:2B:94:29:FF:51:FD:76:00:72:51:78:F1:A7
            X509v3 Authority Key Identifier:
                keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:db:58:d6:53:c7:87:27:d1:d0:5e:fb:8b:bc:20:f4:a6:
         5e:c1:95:a5:e2:80:e9:24:f6:4b:e5:c7:e0:b6:01:5d:ff:a8:
         33:e6:e4:34:7b:d9:b6:b5:e8:e8:77:b9:13:23:0d:cf:01:55:
         f7:76:11:7c:ec:47:56:1b:c1:0d:6c:5f:fb:1c:a2:fc:2d:aa:
         67:2a:e0:56:02:e6:85:ff:5e:6b:3a:a6:79:e4:ed:31:82:1b:
         f1:82:25:03:b0:c4:35:9e:e6:25:17:fb:3a:5b:10:0c:0c:69:
         aa:0a:5d:8f:be:29:32:18:db:e6:76:42:02:da:70:7c:c1:93:
         4c:98:28:51:8c:6b:df:15:84:40:f8:c3:aa:66:da:d4:6d:a5:
         a3:9e:b0:9b:3b:8c:87:77:ee:a2:67:c1:7f:51:f3:f6:69:6a:
         ce:34:41:f9:86:2a:28:23:a5:33:c6:47:1b:e7:03:4a:5d:c9:
         d2:1e:bb:8c:19:99:2e:b4:e4:fe:ac:22:69:f3:8a:82:6b:c4:
         02:35:5c:21:55:92:16:8c:2c:22:88:14:67:d5:82:91:ba:33:
         6c:14:10:45:4e:ed:18:42:8d:10:f3:1d:c0:22:62:f7:5f:f8:
         3f:81:0a:90:2b:2c:69:a9:2f:28:c5:f1:6e:03:0e:ac:85:23:
         8e:f5:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:13 2024 by rpki-client on console-ams.rpki-client.org