Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File:                     0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier:          +yYNWmsn7B77YRSpW3SFXe/eWofZ53Tc5kBOloXewmY=
Subject key identifier:   04:85:3D:79:0E:25:70:BD:9C:3F:1F:9C:55:AE:CB:74:7C:B2:F7:75
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer:       /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial:       018F885B0EA51C16D6C8F0C17A394DE5249E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number:          DA
Signing time:             Fri 17 May 2024 21:00:19 +0000
Manifest this update:     Fri 17 May 2024 21:00:19 +0000
Manifest next update:     Sat 18 May 2024 21:00:19 +0000
Files and hashes:         1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: UKtv2+6k1AaYeviHFAdHkxLolPucWEIdnBT506tIsro=)
                          2: iPahhazYD4dGwrJ5KN_cY_pJkQo.roa (hash: Rpb/ejrMWn0fLOTAz3hfv4/E0JbXCCK1Upfb0C21IxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:0e:a5:1c:16:d6:c8:f0:c1:7a:39:4d:e5:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
        Validity
            Not Before: May 17 21:00:19 2024 GMT
            Not After : May 18 21:00:19 2024 GMT
        Subject: CN=04853d790e2570bd9c3f1f9c55aecb747cb2f775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:d6:35:60:5d:0f:1d:5e:36:53:bd:d8:bc:
                    47:be:95:03:ca:74:71:7a:7d:5f:a6:e4:88:04:58:
                    c7:e2:55:e7:d7:68:f3:77:f5:a5:97:0b:c5:d9:02:
                    61:36:9b:df:ca:7e:03:61:ea:2e:24:9f:95:3c:2c:
                    9a:44:c7:dc:62:92:c3:2f:57:71:ee:08:75:c7:44:
                    b3:39:1b:86:b0:0a:9b:44:d1:79:75:46:2e:50:5f:
                    e3:12:5f:93:70:e2:f6:5c:35:11:18:36:06:f5:ac:
                    d1:92:d4:15:54:1c:c2:5d:dc:69:d4:c2:1a:b6:52:
                    37:65:37:22:3d:9e:85:53:27:01:dc:10:c9:fa:e4:
                    c3:19:75:1f:1c:35:54:4a:71:71:f4:4e:b9:7a:55:
                    e6:74:e1:12:05:3b:58:11:58:f0:8d:7e:11:ee:e6:
                    75:a9:d1:88:01:8e:9f:6f:5f:d3:a0:b0:36:00:8e:
                    dd:62:ab:ad:9d:2d:6f:0b:5e:22:7e:69:15:6c:e9:
                    9a:15:ba:4f:17:e3:cb:7e:98:e3:a7:a6:49:de:92:
                    44:3c:a6:94:fd:3a:69:c9:4b:67:db:71:20:96:dc:
                    8a:b7:42:aa:5d:6e:ff:5f:1e:b5:94:41:4a:e3:fc:
                    62:d7:98:b9:18:67:b0:d6:23:51:99:59:59:fb:c4:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:85:3D:79:0E:25:70:BD:9C:3F:1F:9C:55:AE:CB:74:7C:B2:F7:75
            X509v3 Authority Key Identifier:
                keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:62:a6:ac:1a:16:f2:9f:47:29:0f:42:2d:93:51:a3:51:9e:
         1e:9f:da:18:da:e7:63:ed:14:80:24:84:e9:c7:a3:88:82:71:
         fc:36:b1:70:0e:95:61:e0:81:e2:88:28:ab:b9:93:ce:5b:67:
         99:7c:4f:5c:13:ce:dc:dc:d5:0f:73:5c:26:b8:67:de:86:55:
         77:c4:08:32:58:f2:25:e3:9d:cd:d3:e6:5f:ea:a2:e5:2f:00:
         b0:59:85:d3:73:36:ac:b9:69:21:bf:d1:a0:9f:ef:4e:71:e9:
         14:59:01:be:05:7c:70:d9:ea:29:11:6e:54:0c:07:6d:13:c4:
         96:b4:d2:f7:2b:6e:50:54:d3:c9:ee:8f:0e:a1:84:93:cc:c5:
         dc:c2:53:de:a4:d7:e5:a9:8e:af:bd:8e:2d:6b:69:05:59:12:
         84:d5:3c:79:f2:33:0b:bb:ad:85:ef:41:c8:71:04:f3:a7:65:
         8f:a7:9c:54:7f:60:1b:15:77:f8:5c:5d:58:ef:76:1c:4d:f4:
         32:be:e5:d5:0c:58:6d:29:c4:63:7e:cb:ee:ad:27:51:6f:14:
         9c:30:49:0b:08:91:f2:fb:59:e6:68:17:e5:3c:f6:54:1e:d1:
         59:c8:5c:0d:72:7a:70:69:27:6f:5f:9c:84:f5:79:e0:f0:d7:
         f3:22:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:49 2024 by rpki-client on console-fra.rpki-client.org