Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File:                     Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier:          t6nz8tnL0PTYCPDBQstwWBjaF/wjFlrkTqcoKgM6V20=
Subject key identifier:   2A:AD:4F:F5:B9:7C:27:00:49:2E:70:53:07:B4:CD:DD:46:EB:42:AF
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer:       /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial:       019052B46ABA7BBB5DD88993DDC93552F3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number:          08D6
Signing time:             Wed 26 Jun 2024 04:01:13 +0000
Manifest this update:     Wed 26 Jun 2024 04:01:13 +0000
Manifest next update:     Thu 27 Jun 2024 04:01:13 +0000
Files and hashes:         1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: +P9iCidGzhSQFvOwFt/8OTjR4wQjqhj86B+eTRjPAGE=)
                          2: qtzfUcU9zZQvUopBXs_nfJheUdg.roa (hash: KGyr6wR4cPv4hRL93joMdBsqWA9qY8iEi7X6oueFuQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:b4:6a:ba:7b:bb:5d:d8:89:93:dd:c9:35:52:f3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
        Validity
            Not Before: Jun 26 04:01:13 2024 GMT
            Not After : Jun 27 04:01:13 2024 GMT
        Subject: CN=2aad4ff5b97c2700492e705307b4cddd46eb42af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:bf:0a:2a:ac:32:f1:77:db:42:68:b2:7c:
                    38:e4:58:71:97:90:45:5e:64:4b:d0:05:79:0c:e6:
                    93:27:f8:1b:46:f9:f0:76:e0:83:3b:75:ce:60:55:
                    a3:a8:36:f7:da:7a:33:d9:93:af:2f:ee:e6:2d:dc:
                    70:f6:53:92:7b:be:3f:27:a6:f9:1d:38:a0:bc:23:
                    58:71:d9:95:28:01:3c:b8:60:61:7e:dd:18:c5:81:
                    06:0d:b8:d6:e6:f6:d5:ed:29:46:c2:61:95:4e:4b:
                    94:68:50:26:65:e9:6c:63:c6:1e:85:70:d1:66:26:
                    7e:ae:ed:e1:96:b7:b0:a1:e3:28:3d:04:37:f7:72:
                    85:12:63:f4:51:98:91:c5:a0:5e:4c:0b:75:66:0f:
                    4c:04:03:bc:69:b2:16:74:d9:b8:40:21:5f:88:c7:
                    93:6e:1d:4b:a2:95:89:3f:71:3c:ff:ae:1e:38:3b:
                    22:46:c5:ff:e1:01:ac:83:51:0b:47:3b:6f:14:89:
                    d6:99:1c:74:d3:78:90:89:4c:7e:fb:30:33:79:e6:
                    82:75:57:3f:db:5d:9e:ab:8c:5f:ff:c2:b3:05:54:
                    b6:4c:80:f7:1e:7a:32:05:9e:4b:53:2f:0a:2d:7c:
                    24:f3:81:92:4f:34:dd:93:49:4d:2c:7d:d1:b4:6f:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:4F:F5:B9:7C:27:00:49:2E:70:53:07:B4:CD:DD:46:EB:42:AF
            X509v3 Authority Key Identifier:
                keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:3c:f8:16:fb:1d:f3:b4:b0:f8:f9:26:1f:cc:b2:78:ec:
         cb:ca:c4:3c:1e:a0:94:62:99:17:82:84:a5:c9:9e:0d:52:fd:
         98:b9:1b:4a:99:72:15:c3:a9:54:d3:f0:15:df:1b:21:f4:a6:
         87:fd:1d:7a:ea:52:f5:e1:65:9c:f2:fd:c5:55:40:88:85:26:
         fc:30:1a:90:8d:51:35:13:fc:2f:f8:e3:7e:19:3a:79:57:fa:
         be:01:ed:44:7c:0d:08:97:57:d5:28:53:9e:c5:b7:e5:e4:a0:
         31:4f:c5:92:8f:6f:3b:36:8a:36:6e:33:04:cb:1d:32:34:bf:
         f9:23:b7:4b:3d:24:07:92:ed:3d:6b:01:1e:b9:61:97:d1:df:
         ab:e6:70:7c:46:f2:0a:31:4f:ed:3e:0a:85:66:04:45:be:d5:
         cd:d9:8f:5b:35:c3:f0:03:34:c3:98:5a:08:01:81:30:d6:3b:
         46:2f:ac:45:76:3b:0e:32:4d:00:01:7e:e4:b3:11:21:c0:b7:
         eb:c5:c5:2d:45:be:22:4f:d3:c2:ad:10:ca:7c:a0:88:cf:b9:
         a7:46:e4:96:e2:50:c4:b7:55:89:d7:e8:56:93:ba:04:28:c4:
         28:d3:0f:89:35:ca:f1:fb:0b:ff:c2:d7:b6:70:7c:2e:f7:68:
         01:83:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:09:59 2024 by rpki-client on console-ams.rpki-client.org