Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File:                     D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier:          Itf5aCytgr92VJoIfHT8LJ9+HzEMgfb7/FJ/1oL+tuQ=
Subject key identifier:   37:9E:C2:39:AE:0E:1C:19:38:AF:DA:DE:9B:EC:FA:47:03:A3:9F:AB
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       01901DEADE6C86C2E08307C3113966FD75CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number:          11DC
Signing time:             Sat 15 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:49 +0000
Files and hashes:         1: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: pawxaa9gI+H6Xt6W+g40YBtiTy5Q5WpOxjW8EzQrfH4=)
                          2: Toe053mBO3oImHHBgNfyTfxR1LU.roa (hash: 4Wj2HDrTHoTY5d+9oCO/ih/+GifRvhZGeMLeZeykBvg=)
                          3: YhUsbq7srD4mKALhZSZAv2AuNy0.roa (hash: tNUgA6UiwEnkHAn7jnMlMzgtBttoJrm6i6PPMlfXaHw=)
                          4: giCBWON-J44v5k3VBMPJtsYzdwI.roa (hash: /j9hYu7445Fnqvp55EfL/BXfjNLPCw6i9ja7Z48p0D0=)
                          5: tYr47OESsNA3SFhYFvGQ_T5PG_g.roa (hash: e82XMyooaQDPKRIghOS7zUe9/PFpc4Qc/VMynSEYQxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:de:6c:86:c2:e0:83:07:c3:11:39:66:fd:75:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: Jun 15 22:00:49 2024 GMT
            Not After : Jun 16 22:00:49 2024 GMT
        Subject: CN=379ec239ae0e1c1938afdade9becfa4703a39fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:a4:98:c4:ec:68:3c:a7:34:1e:2d:85:db:
                    07:6b:fc:47:19:42:ba:96:ec:32:c2:b4:81:28:73:
                    d1:2c:59:7f:d1:e2:c3:cd:de:78:ef:99:81:24:dc:
                    aa:3f:da:30:bd:fb:1f:71:c8:03:2c:dc:b9:22:5a:
                    5f:fc:c0:21:6c:c9:58:0c:9f:d3:7f:8e:a4:6b:ab:
                    b7:10:43:94:4d:e9:c9:c1:0c:02:63:7f:c9:c2:70:
                    f5:4f:72:e2:1f:11:4e:d6:41:f0:0f:ec:de:af:5a:
                    5e:16:43:38:1d:f3:78:9a:7f:76:15:f1:fa:7a:bf:
                    a3:28:51:be:9c:99:b0:64:08:a7:96:36:f1:79:e9:
                    04:ef:6e:b8:38:24:16:ab:1d:b9:a5:53:7e:d3:35:
                    5a:c3:8f:a9:1c:36:7b:8f:4d:f6:5f:84:1b:16:96:
                    d5:20:5f:e7:6b:ad:ca:53:8d:0a:2f:80:cc:83:14:
                    93:77:3f:9e:a6:a2:33:4b:24:b4:4b:26:31:95:4e:
                    d5:21:69:dd:83:8e:e7:a4:63:4c:30:a8:a8:ac:6e:
                    9a:bb:a5:da:17:34:3c:ad:18:16:5f:1f:26:14:5e:
                    31:2e:8b:42:16:da:c4:fd:f6:bc:42:1d:9f:5a:80:
                    12:b5:e7:5b:7e:a8:c8:0c:c0:64:0a:e9:d2:07:2d:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:C2:39:AE:0E:1C:19:38:AF:DA:DE:9B:EC:FA:47:03:A3:9F:AB
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:6f:e1:2b:84:5d:17:6c:7c:b7:e1:50:8d:d2:f1:b4:54:
         9c:87:58:12:aa:75:59:d1:7f:87:1b:4f:db:ac:a4:9c:3f:fb:
         af:69:80:c3:6a:40:96:ed:ab:67:01:23:e9:6d:d6:0d:2f:f3:
         66:f4:0b:3c:92:2d:ee:6f:8b:90:77:e3:55:6a:f7:d1:d9:e6:
         74:2d:11:a6:c5:5c:ed:24:fa:0f:ea:6c:7e:ac:c5:b1:41:c8:
         9f:17:5d:70:95:cb:80:3b:05:2c:e5:94:81:8a:ad:cb:58:8c:
         b7:ec:67:e3:1b:c4:0e:9e:48:5e:2c:67:be:32:29:1d:27:1a:
         d6:cf:82:8e:b7:67:38:86:9e:d8:12:ec:0b:16:6d:17:54:2d:
         c3:b0:34:99:bf:bb:96:c0:a2:0a:1c:5f:2d:26:61:48:91:cd:
         ad:94:c3:93:51:e7:35:2c:1d:f7:3e:5a:82:ac:57:9e:16:4b:
         c8:1f:18:63:b8:f1:2a:6b:45:25:6a:d5:12:f6:dd:bf:18:58:
         da:63:9e:c3:52:c8:29:71:34:77:a3:9b:a1:3c:26:35:f8:23:
         eb:ae:9b:83:73:72:fc:2d:3d:15:44:ce:76:75:32:f0:60:9d:
         33:9c:6d:5b:eb:6f:83:e5:33:43:d1:df:f3:78:ce:34:ac:de:
         05:74:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:01:08 2024 by rpki-client on console-ams.rpki-client.org