Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File:                     DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier:          7OYHwBD0Vp4/oEMfdYejipPRE446smf3bcSlz4TxCl8=
Subject key identifier:   53:59:BC:B3:01:81:6B:E0:67:BF:87:EB:3D:44:13:FD:8A:A2:1A:A8
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer:       /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial:       018F3BF894BB6201081D4E403E9FE1A446BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 01:01:37 +0000
Manifest this update:     Fri 03 May 2024 01:01:37 +0000
Manifest next update:     Sat 04 May 2024 01:01:37 +0000
Files and hashes:         1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: czj26NCXVEU5aPH2Fpbb1H4LDqtVD2rPQvd/8d8CXOs=)
                          2: fHpiHTXBH5GQqkASt67kZinvjSI.roa (hash: BpSLI0ps4YAfeQySdFOoofg1X+F26aLv+P0IwNW8J8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:94:bb:62:01:08:1d:4e:40:3e:9f:e1:a4:46:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
        Validity
            Not Before: May  3 01:01:37 2024 GMT
            Not After : May  4 01:01:37 2024 GMT
        Subject: CN=5359bcb301816be067bf87eb3d4413fd8aa21aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:27:4b:3f:fc:87:0b:c1:ac:7b:6f:16:20:
                    74:31:55:e7:99:4c:4e:54:84:da:3d:51:71:df:50:
                    c7:57:85:d1:69:83:d7:85:c4:b6:9b:df:a2:89:01:
                    ed:cf:d0:53:ad:ee:38:5b:da:4a:e9:d6:03:af:d2:
                    48:14:34:52:c8:96:c9:2a:ea:ab:85:55:7f:20:9c:
                    4a:06:c4:91:bc:8c:44:e5:b0:50:88:6d:7e:d4:15:
                    5c:32:3a:1b:ed:be:d5:96:a6:5f:2f:58:95:79:c6:
                    90:7a:2f:d3:1b:81:1f:aa:f9:a8:79:7f:30:68:db:
                    49:1c:37:dc:2e:3a:f6:a6:42:5e:52:7d:41:32:b6:
                    ad:32:0c:93:f2:87:22:20:5b:e3:79:95:83:38:f3:
                    83:58:f6:43:ca:05:f2:41:0c:2a:2a:b2:fd:fe:65:
                    6b:e6:f2:bf:09:56:67:78:97:e4:9d:95:31:29:77:
                    7c:cd:b9:8f:3b:c6:90:76:2b:0a:0e:06:88:b4:6a:
                    55:04:c2:cf:07:fc:5c:b9:6d:5d:dd:57:36:58:d5:
                    a3:33:16:38:64:69:4a:14:af:b9:fa:43:20:5f:a9:
                    9f:9c:5c:cb:08:2c:ff:27:47:5f:6c:b5:92:3f:07:
                    90:6f:17:7c:51:01:5f:a5:6f:1e:fa:5d:c4:f6:7a:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:59:BC:B3:01:81:6B:E0:67:BF:87:EB:3D:44:13:FD:8A:A2:1A:A8
            X509v3 Authority Key Identifier:
                keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:98:ec:51:90:4e:2e:e7:06:e7:25:c9:aa:1b:6d:ef:77:
         d2:0c:0f:af:d6:a6:cc:60:82:ae:82:dd:53:75:dd:9d:4d:2c:
         a6:35:33:07:53:bf:c5:4b:5e:e2:05:87:03:b3:5e:7c:50:6e:
         d7:1d:3e:bd:f6:da:08:b7:b1:b6:d9:74:77:21:3e:07:09:fa:
         b4:4c:9f:95:d3:f3:47:de:09:a0:73:e1:bd:25:44:be:56:0a:
         56:d2:27:5d:e6:7d:a5:9f:4e:10:b2:91:5b:43:ca:15:a9:5b:
         0a:d9:25:68:8d:ce:ab:68:cd:95:8e:5c:b5:2b:c2:f5:53:0d:
         b5:01:3c:69:77:f4:16:07:43:fa:de:cc:fc:fb:f2:06:ea:b3:
         3e:41:36:2e:81:24:d6:27:39:69:5c:e4:20:ac:93:f3:35:29:
         81:78:95:bf:46:19:66:9d:c6:22:a5:9b:08:54:e4:ce:88:ca:
         09:d3:ee:ca:ca:07:9b:cb:3f:b1:02:19:4e:c7:9c:3b:2e:40:
         e0:18:b8:c9:4a:89:34:ef:0a:07:dc:67:2c:9d:6e:7f:5f:89:
         a4:37:10:7d:54:2b:37:26:6b:d4:0f:90:0c:e7:67:b5:79:35:
         a6:c0:76:1c:7f:bb:8b:14:25:11:36:c7:f8:c4:61:f8:b7:fb:
         fd:00:72:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+JS7YgEIHU5APp/hpEa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDFhMzk2OGI2Mjc0MWIzNmQzNDhiZTBkMmM5MWM1ZDRi
MTMzYTIwHhcNMjQwNTAzMDEwMTM3WhcNMjQwNTA0MDEwMTM3WjAzMTEwLwYDVQQD
Eyg1MzU5YmNiMzAxODE2YmUwNjdiZjg3ZWIzZDQ0MTNmZDhhYTIxYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnknSz/8hwvBrHtvFiB0MVXnmUxO
VITaPVFx31DHV4XRaYPXhcS2m9+iiQHtz9BTre44W9pK6dYDr9JIFDRSyJbJKuqr
hVV/IJxKBsSRvIxE5bBQiG1+1BVcMjob7b7VlqZfL1iVecaQei/TG4EfqvmoeX8w
aNtJHDfcLjr2pkJeUn1BMratMgyT8ociIFvjeZWDOPODWPZDygXyQQwqKrL9/mVr
5vK/CVZneJfknZUxKXd8zbmPO8aQdisKDgaItGpVBMLPB/xcuW1d3Vc2WNWjMxY4
ZGlKFK+5+kMgX6mfnFzLCCz/J0dfbLWSPweQbxd8UQFfpW8e+l3E9nqwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNZvLMBgWvgZ7+H6z1EE/2KohqoMB8GA1UdIwQY
MBaAFA5Bo5aLYnQbNtNIvg0skcXUsTOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQt
NzQ3NTIzMTkyMzYzLzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQtNzQ3NTIzMTkyMzYz
LzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPaY7FGQ
Ti7nBuclyaobbe930gwPr9amzGCCroLdU3XdnU0spjUzB1O/xUte4gWHA7NefFBu
1x0+vfbaCLexttl0dyE+Bwn6tEyfldPzR94JoHPhvSVEvlYKVtInXeZ9pZ9OELKR
W0PKFalbCtklaI3Oq2jNlY5ctSvC9VMNtQE8aXf0FgdD+t7M/PvyBuqzPkE2LoEk
1ic5aVzkIKyT8zUpgXiVv0YZZp3GIqWbCFTkzojKCdPuysoHm8s/sQIZTsecOy5A
4Bi4yUqJNO8KB9xnLJ1uf1+JpDcQfVQrNyZr1A+QDOdntXk1psB2HH+7ixQlETbH
+MRh+Lf7/QByCg==
-----END CERTIFICATE-----
Generated at Fri May 3 06:23:26 2024 by rpki-client on console-ams.rpki-client.org