Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File:                     DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier:          428Eo1ylMtRDFKXECi4TefycBFi2eC58EBacXb1uSPQ=
Subject key identifier:   84:22:2B:00:01:0E:0A:6C:52:86:97:CB:68:32:C3:99:76:74:36:BC
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer:       /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial:       018F847E68516C5263417ABBCA0E748B318B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number:          033A
Signing time:             Fri 17 May 2024 03:00:27 +0000
Manifest this update:     Fri 17 May 2024 03:00:27 +0000
Manifest next update:     Sat 18 May 2024 03:00:27 +0000
Files and hashes:         1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: YNWIli7JlpzIkFYGUdEGfQ77O8RHaqdi6zZweJ0B12o=)
                          2: jGoCypdtrUQTHoLeem41J8b40ks.roa (hash: NQHoKbQ7gab0NijnpXb8utgyHwWqPRKfgpBELuFHOfA=)
                          3: uXSKsKR2Y7rbUkP8jYZkGfymgSE.roa (hash: 2631rAU2LYELX6HlpWNkmlWCQcvIcnMMPZYpLeMqKXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:68:51:6c:52:63:41:7a:bb:ca:0e:74:8b:31:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
        Validity
            Not Before: May 17 03:00:27 2024 GMT
            Not After : May 18 03:00:27 2024 GMT
        Subject: CN=84222b00010e0a6c528697cb6832c399767436bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:c6:c0:98:5e:40:cd:90:23:41:ae:a7:eb:
                    14:39:2f:f6:ad:a1:1d:2b:fe:60:49:0a:a7:2c:65:
                    10:a4:6c:47:de:22:fd:10:53:b8:ad:60:9e:c2:f8:
                    c7:3a:0b:39:28:2f:7a:94:31:a4:14:8f:b3:07:d6:
                    dc:93:e9:34:bd:78:df:6c:fa:cf:96:21:8e:a7:85:
                    a1:3b:bf:39:a2:f4:ed:1e:b8:7d:83:65:e1:d9:8d:
                    27:a0:eb:61:91:c3:7f:76:ff:bc:fe:33:31:5a:72:
                    6a:6b:27:51:da:42:80:2c:ee:fa:db:f2:41:fe:20:
                    7a:59:a3:e3:92:69:ce:a7:ae:6e:f7:6c:53:ff:4b:
                    13:56:9c:a6:fb:88:c5:13:f1:ce:20:bd:5f:68:34:
                    e0:8f:90:49:af:c2:36:5c:5d:20:db:75:ce:a1:3a:
                    16:7f:a0:c3:9d:ac:1b:ae:4e:c2:74:fa:91:11:d3:
                    76:3b:2e:6b:45:dd:f1:28:6e:5f:64:1b:8e:27:5d:
                    b7:7b:6f:b2:07:0c:de:70:82:85:a7:25:c0:90:d8:
                    50:c1:ab:44:0c:98:e4:cd:a7:20:cd:40:c1:a8:76:
                    05:79:26:3c:93:65:b0:9a:fb:21:fa:dc:8f:9e:f3:
                    bf:23:21:49:a5:b2:db:27:3e:04:d0:b1:9f:e1:59:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:22:2B:00:01:0E:0A:6C:52:86:97:CB:68:32:C3:99:76:74:36:BC
            X509v3 Authority Key Identifier:
                keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:64:c2:0c:ea:22:ac:43:65:29:5d:a7:49:b7:fc:82:7f:66:
         d6:d8:92:1a:a3:ce:a3:ba:79:fd:df:ea:04:fb:b5:4c:b4:bf:
         1d:d6:d6:8b:df:86:d1:9b:98:6e:55:a1:3b:d5:66:c2:02:7e:
         7d:df:77:2a:1b:82:9a:4f:f8:d9:4b:75:b0:ff:42:bb:4a:a5:
         9c:24:81:fa:0c:13:c4:2a:48:84:78:02:af:c0:9d:06:94:5a:
         d5:28:b1:0d:2b:88:8b:11:5f:a9:c3:39:51:fb:04:6d:31:47:
         93:a8:1a:7d:8f:3a:d1:e8:cf:59:09:92:a9:8d:4d:0f:50:c5:
         bc:2a:b9:98:04:1a:02:4b:b0:df:52:3f:b1:cb:e1:4f:78:07:
         c6:b5:aa:8d:1e:76:0b:27:56:08:c7:da:a1:a9:55:63:9a:00:
         b0:37:72:88:7d:9c:6e:e7:20:0e:8c:29:c9:59:96:74:41:25:
         90:5a:db:c8:32:50:08:12:a2:c2:6b:76:c1:90:78:9b:61:82:
         df:27:22:25:d7:f9:a1:9c:85:07:54:2f:ba:4d:76:fe:ad:b0:
         ac:7b:84:19:95:b3:70:b5:aa:54:9b:5f:78:fe:b0:12:8a:23:
         86:97:53:f7:7d:cb:a2:d4:4f:e5:46:a7:e6:ff:81:d1:89:89:
         b7:fb:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:31:44 2024 by rpki-client on console-fra.rpki-client.org