Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
File:                     DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json)
Hash identifier:          clURCVIvbKFNqzF1brAFxccUkM9eeWZSMRxoWKaNTR8=
Subject key identifier:   54:ED:62:02:08:F9:DA:BC:13:4E:9F:2A:42:CA:7E:F8:40:31:0C:FC
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Certificate issuer:       /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial:       018F565D35624F405C3B17283E59232AC276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
Manifest number:          09C6
Signing time:             Wed 08 May 2024 04:01:40 +0000
Manifest this update:     Wed 08 May 2024 04:01:40 +0000
Manifest next update:     Thu 09 May 2024 04:01:40 +0000
Files and hashes:         1: 6GGhCdAIPy1ElJ_u_jrozzVY1eo.roa (hash: PLFgA9klUSF9wFWJax3lAmyqQ38hfRKp9TyQ/RsalyQ=)
                          2: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: +45A61z1/bWtGjXx63+hyIPH6/0yM998UiSpVLGCcIY=)
                          3: EdPKKUTBikSrw6zOoLik5Q-6iyc.roa (hash: JeAo+ctlIJVM7kqvWcKz+qt43Un9DRJFAgW5wi8BYe0=)
                          4: NUxLM5UMnMrHfQDXkf-daMPgGNU.roa (hash: uqWG0dLnS2Y2z9n0D7h3PW7HM+aTp5cnjB6dbmKYWzs=)
                          5: _zN_4uH4GtgbRLivLtXCWeZoK6Y.roa (hash: Kb/XNyAPEGQCJM58/ma9C6UQDIiJF9hzvSZrs8z4BTI=)
                          6: cEDv8IlP4XwbKw-0sGwyab64-R8.roa (hash: qkXQYkRGpJsGBP6RsvBqVltLaVJammPJNrZGpe+VfNY=)
                          7: iD2r0Tn8yso8JHfwOOwwFjr6vFo.roa (hash: 6acXAbktnxfq5LoZI3zpZ73zrQ9SV/NsW067yh/csgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:5d:35:62:4f:40:5c:3b:17:28:3e:59:23:2a:c2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
        Validity
            Not Before: May  8 04:01:40 2024 GMT
            Not After : May  9 04:01:40 2024 GMT
        Subject: CN=54ed620208f9dabc134e9f2a42ca7ef840310cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:f9:8f:6b:c0:43:cc:eb:28:ad:5b:8f:b1:
                    11:21:52:ca:3f:49:41:2b:e4:ea:de:2c:bc:7e:6c:
                    9c:6d:12:a3:e8:2a:7e:93:ff:67:16:e1:5c:87:09:
                    60:bc:d4:a3:d8:a0:ac:47:8f:66:85:45:11:d3:c7:
                    22:94:14:ea:1c:2c:21:dc:83:d5:18:67:3c:ce:72:
                    55:66:8a:80:87:f1:77:77:07:5a:60:2d:66:96:73:
                    13:4d:4e:ed:eb:eb:25:4c:ac:83:c6:da:b0:90:fb:
                    e3:58:e6:6b:44:1b:38:e4:0a:a6:d7:ac:02:bc:d1:
                    23:07:f3:66:ee:27:eb:9a:3c:9c:4c:12:41:31:e0:
                    78:07:a4:85:9f:6d:51:70:83:19:96:bb:01:23:07:
                    5d:e2:ca:ca:8b:3e:92:1c:a9:6b:46:ae:4b:c4:65:
                    c3:64:62:47:6e:11:54:8b:d7:ae:d7:7e:f6:0f:6d:
                    c1:ff:ac:31:26:bb:15:3d:a9:4e:b6:f0:25:66:fa:
                    7e:13:9e:33:67:57:72:e1:72:cd:af:30:89:ff:59:
                    4e:55:56:cd:26:69:c9:e3:89:42:63:ff:d5:38:62:
                    14:d6:ec:be:87:78:10:dd:61:b6:30:9a:06:64:f8:
                    28:35:36:45:e6:0f:fc:54:a3:c8:c9:0a:d7:47:ea:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:62:02:08:F9:DA:BC:13:4E:9F:2A:42:CA:7E:F8:40:31:0C:FC
            X509v3 Authority Key Identifier:
                keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:02:1d:bb:8a:f4:43:84:9b:25:c9:72:6e:b1:05:88:11:dc:
         c6:5c:3e:f4:7e:c6:3f:52:e1:66:e8:11:30:4a:a8:2a:93:ef:
         8a:65:ce:d6:5a:57:8f:4f:f6:ee:0b:bb:8b:c6:f8:48:ad:fa:
         3f:24:59:2d:18:6c:4e:a6:5d:c8:7e:88:fa:26:c6:f5:73:7a:
         df:7b:a7:ed:33:dc:5b:2a:5a:d4:82:38:b3:f9:ce:71:6b:40:
         ad:34:5e:2c:68:a2:74:18:0e:b2:5d:20:d8:da:36:dc:51:8d:
         4f:34:28:09:ab:3a:58:6c:f7:f4:77:d4:2b:7c:2e:ec:6c:b7:
         95:60:b0:f5:8c:2f:9c:a2:93:a4:c1:86:db:0a:9b:66:b2:8b:
         b1:c5:fd:45:cd:ca:b3:fc:61:84:03:e7:70:c2:b7:d3:57:9e:
         26:3e:91:c9:64:0b:f4:e1:08:2c:cd:03:c1:0a:15:a7:e1:0b:
         34:75:bd:b1:3e:ef:b0:12:f4:0d:dc:5c:5e:d1:d0:fa:68:d1:
         a8:93:0e:34:eb:9e:d8:13:88:a6:02:aa:6f:2a:b7:85:c4:86:
         34:5a:00:73:36:b3:56:e5:57:fd:9f:b5:9c:c8:cd:65:06:83:
         75:5f:78:14:8c:56:3f:fa:a5:2b:62:2f:d7:9a:81:ee:43:2d:
         88:98:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:57:41 2024 by rpki-client on console-fra.rpki-client.org