Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File:                     DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier:          So1lnqivtg7SQZvZcmwpizHqH4gbEZfn6CWFhRmb9/E=
Subject key identifier:   79:89:E5:14:C0:30:81:9D:51:EA:10:FD:12:15:6B:EB:78:E8:63:9C
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer:       /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial:       01901DEC27EE25C3F3A0BA4402C136ED0E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:14 +0000
Files and hashes:         1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: DqNzVSiAWURqsoYULKp690gtCN//XUr0nNy42Ifriho=)
                          2: gJH9Lu0NUUtR30-7uoxNyJwQJqE.roa (hash: 5HVyNMIIaLgvDm/43toxKaZivuouE/88dwpSMU2OhMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:27:ee:25:c3:f3:a0:ba:44:02:c1:36:ed:0e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
        Validity
            Not Before: Jun 15 22:02:14 2024 GMT
            Not After : Jun 16 22:02:14 2024 GMT
        Subject: CN=7989e514c030819d51ea10fd12156beb78e8639c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:11:2a:2c:9c:1b:71:c1:bf:23:41:43:b2:
                    d1:c7:a9:06:cf:37:54:35:65:d1:6b:76:2d:45:f5:
                    ac:34:11:26:68:98:25:2c:68:46:db:81:23:c1:19:
                    7e:80:2a:68:0c:89:aa:78:8e:a8:0b:29:05:5c:d8:
                    e5:7e:a5:52:4f:84:17:57:5a:1b:86:2d:cd:98:9a:
                    42:29:d9:5b:30:d1:94:35:81:70:85:3d:63:6b:1b:
                    2d:c0:db:e6:bf:db:92:7b:a6:67:72:96:48:6a:20:
                    d4:be:04:b0:2e:3d:1d:41:ff:61:6c:6b:46:14:8a:
                    5c:e9:cf:b4:1d:4a:b1:14:91:76:e1:ab:c4:76:e3:
                    cf:4d:d8:23:d5:e6:1f:39:dc:ed:c4:18:e1:82:90:
                    84:3e:1d:a8:70:c5:d5:3d:6e:5a:93:06:b1:2c:09:
                    26:56:44:0c:79:f9:b2:60:4b:1f:6e:f0:13:66:77:
                    50:a4:df:8e:fa:e1:4d:bf:e9:cf:9f:53:0d:91:66:
                    b8:27:5f:5f:f8:f3:b4:f1:83:34:42:57:c2:bd:29:
                    3d:a2:cd:43:91:7b:c5:6c:fb:da:3c:d7:ee:c7:c8:
                    ac:c8:ff:38:50:6d:02:e9:d7:78:90:b5:e7:5d:30:
                    00:94:aa:ea:a0:b1:16:ce:7b:0e:13:16:f1:ea:f2:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:E5:14:C0:30:81:9D:51:EA:10:FD:12:15:6B:EB:78:E8:63:9C
            X509v3 Authority Key Identifier:
                keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:26:f2:27:2a:ea:20:b9:ca:a8:91:65:eb:42:91:cd:cc:
         c5:bb:e9:bd:e8:f0:15:ef:4d:3a:fa:ce:39:dd:4d:6c:3b:d3:
         a1:c1:b8:9f:a4:8a:4c:0c:10:69:95:3f:70:2a:64:7d:e8:55:
         52:6f:b1:43:dd:a1:bf:93:f4:de:ca:6c:53:ae:5c:78:7c:2a:
         b3:45:a5:a5:13:e6:dd:20:6b:67:ae:e0:03:e7:f3:af:e1:0a:
         a6:47:fa:95:57:b0:86:30:d0:2d:51:79:1d:f9:fd:e8:e8:0e:
         67:63:b9:c9:73:d5:13:87:17:24:6e:36:fe:ca:07:61:9b:e2:
         e8:b1:ea:a5:20:7d:81:08:bb:52:1c:3b:39:f2:f7:a2:a8:41:
         52:1b:51:46:e8:8a:9b:1e:e3:79:68:04:09:ea:c5:07:c5:a3:
         1f:71:72:dc:72:1c:b9:11:e2:f9:fc:03:7e:a0:5f:99:8c:30:
         45:86:f6:5b:7d:4d:65:5f:f2:41:86:6d:28:bc:a5:ce:12:61:
         ca:0b:28:17:bf:85:25:c0:a9:50:94:7a:99:e8:77:78:10:8d:
         9c:43:c8:63:40:8c:9e:9d:69:d0:74:7d:b7:10:56:07:c5:7b:
         da:18:d9:e6:8e:b5:82:ff:44:3e:54:15:3d:37:bc:7c:b8:25:
         a8:19:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:34 2024 by rpki-client on console-ams.rpki-client.org