Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File:                     DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier:          DN+NkhVtrm0Pdps852/PS/dplR+LrqSEy+MjBA0oypU=
Subject key identifier:   D2:9F:37:6F:E9:19:A5:98:F1:EC:6F:C1:80:DD:D1:71:05:95:C4:F4
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer:       /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial:       0190411BD5EB4A25CBEBA0AD850BE4834AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number:          0BD1
Signing time:             Sat 22 Jun 2024 18:01:01 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:01 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:01 +0000
Files and hashes:         1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: D2jjLQWasrVJN8tRIdFtxXC/Rg7kTd5oBDvpUvt2WAw=)
                          2: _thevjZUVsO_XMk4gENhWRqOHd8.roa (hash: aaZCjaBehVHSIUd4pApJtnpWI44fJ4vdcSHhddXrOgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:d5:eb:4a:25:cb:eb:a0:ad:85:0b:e4:83:4a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
        Validity
            Not Before: Jun 22 18:01:01 2024 GMT
            Not After : Jun 23 18:01:01 2024 GMT
        Subject: CN=d29f376fe919a598f1ec6fc180ddd1710595c4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:0c:b5:24:73:e6:f7:89:20:b7:77:27:93:
                    60:0a:0f:47:66:6e:29:f4:bc:67:32:dc:8c:b4:8d:
                    5b:18:e8:6e:4f:36:21:ee:1f:6b:8c:36:b4:4f:a1:
                    5c:55:3c:95:1d:1f:dc:17:8c:eb:e2:74:9e:11:d1:
                    aa:68:1a:ad:d8:59:86:9a:f9:42:6b:4a:0d:ce:19:
                    25:c2:8b:a6:1d:76:e8:9f:2d:4f:85:b2:0d:9e:2c:
                    ca:c0:35:0b:8c:15:ca:b0:36:00:91:38:39:d1:7d:
                    51:ea:e7:f1:d0:5e:09:91:33:c9:c8:68:3d:ff:c3:
                    f4:60:4d:a2:c4:5b:cc:80:03:7d:53:76:0e:d7:85:
                    7f:40:e3:64:13:33:ea:cc:e1:e1:f7:56:84:7a:86:
                    12:f2:cb:11:d8:2f:37:28:8d:39:25:15:e4:44:45:
                    6f:88:34:f7:24:cb:a6:53:83:66:8c:31:e4:3a:c4:
                    1c:31:b4:0b:fd:be:c3:a8:25:45:b7:3d:2f:c1:89:
                    09:df:7d:45:94:29:5e:d3:41:f9:ce:c0:91:ad:a1:
                    d3:85:a3:12:11:9f:f0:6c:fb:20:a9:77:e4:0f:89:
                    d4:ec:29:22:14:28:f8:9b:0a:25:8f:ca:80:e8:f7:
                    16:de:bd:3f:52:23:33:72:62:e0:3f:4c:e5:cc:e4:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:37:6F:E9:19:A5:98:F1:EC:6F:C1:80:DD:D1:71:05:95:C4:F4
            X509v3 Authority Key Identifier:
                keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:71:01:cc:26:02:9c:9d:c2:58:3b:13:c7:25:1d:1f:f8:
         3c:16:09:86:a4:08:43:c2:b3:ec:7c:c2:dd:2c:41:81:23:7d:
         ad:38:01:a2:3c:92:43:8a:c7:3e:c1:45:00:05:78:49:df:fa:
         fd:51:54:d6:27:ae:00:5c:b8:70:6a:8e:1f:7b:7f:f4:67:58:
         2a:c7:40:3e:b7:aa:ba:35:8e:64:47:10:51:f6:30:ed:42:3f:
         11:c4:9b:70:b1:52:33:80:1b:b5:e2:f1:67:7a:48:5d:b1:8f:
         f7:8e:84:29:18:98:2b:61:d1:8b:f1:f2:a9:e8:6b:d5:6f:07:
         80:fb:f5:cd:f6:28:2c:bb:6f:6c:b5:09:31:d0:35:3b:51:33:
         3c:3d:36:2e:87:49:7a:d3:1b:30:68:14:a1:71:da:25:51:a9:
         77:c8:c7:ae:02:91:10:d5:39:38:80:7d:41:49:e3:c5:1b:d5:
         bf:15:36:80:88:88:9f:de:30:51:6c:cb:f6:44:c5:17:a3:96:
         28:95:89:23:57:c4:a4:d4:33:fb:ef:9b:a3:97:d8:2a:a3:94:
         5d:a9:2e:86:9c:53:1a:d5:b4:47:c8:4f:23:0e:a8:07:ed:bf:
         68:6f:bc:65:80:e6:b5:03:65:a3:13:4c:f4:12:dd:85:9f:dc:
         2c:15:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:00:13 2024 by rpki-client on console-ams.rpki-client.org