Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File:                     g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier:          ZjhtiD3lILgnMr90bOlS9Ace5VMPNU9U9w96YOdDCx4=
Subject key identifier:   03:F7:15:04:62:39:3E:73:1A:47:32:74:83:E4:C8:EB:25:B7:70:47
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer:       /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial:       019062CBD474C1C7FD3D1EDED2247233AA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number:          0B02
Signing time:             Sat 29 Jun 2024 07:00:43 +0000
Manifest this update:     Sat 29 Jun 2024 07:00:43 +0000
Manifest next update:     Sun 30 Jun 2024 07:00:43 +0000
Files and hashes:         1: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: QvR5V+vmN2BSEqm+mtim4McHyRioqgyXeQbo3aSe2S0=)
                          2: gKELP5nWFdJG9xDBK51YRWQMfDM.roa (hash: KA478Ilxc4jQRyJnYDWCiB7N7XLSH2F9d0oU8h9m6Rw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:cb:d4:74:c1:c7:fd:3d:1e:de:d2:24:72:33:aa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
        Validity
            Not Before: Jun 29 07:00:43 2024 GMT
            Not After : Jun 30 07:00:43 2024 GMT
        Subject: CN=03f7150462393e731a47327483e4c8eb25b77047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:7b:8a:1a:f1:51:f3:60:7a:88:b4:15:05:
                    77:24:d7:c4:1c:9d:27:57:76:21:54:ce:f0:fc:40:
                    02:63:0f:98:a1:af:7e:f9:ba:c8:86:da:ef:f7:05:
                    34:03:69:84:54:0f:aa:d5:29:96:c2:e3:77:fc:e4:
                    fa:e2:12:87:6b:fa:01:04:b9:d4:db:ea:4e:74:fd:
                    9a:3e:e7:2f:29:85:96:96:85:84:ca:89:f5:63:6c:
                    e0:27:f5:bc:5b:2f:0e:82:70:28:09:3b:46:7a:be:
                    62:c5:9f:37:41:68:0e:eb:eb:5c:b8:e8:cb:08:4e:
                    cd:26:ae:41:1e:be:30:de:e3:e1:55:35:a6:d9:6a:
                    42:c1:73:12:e8:a4:ee:dd:7a:78:6f:0b:05:b0:08:
                    1a:bb:a2:2b:b5:90:72:dd:1b:ab:1b:96:1d:38:f0:
                    26:fc:ad:7b:bf:7a:5f:57:94:b3:30:d8:8e:93:19:
                    a1:39:76:1f:9d:6e:ef:e8:b7:a5:83:4c:e6:3c:68:
                    32:15:91:80:09:2f:89:52:58:2b:25:3c:6d:54:b7:
                    4c:9e:2a:71:f7:a3:a2:09:51:e1:23:6c:1f:b4:b2:
                    1c:bb:e7:3f:7f:b0:d6:30:5c:87:24:b9:37:0d:69:
                    e6:af:a7:f5:5d:f0:5d:34:6d:9d:6f:be:ae:67:64:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:15:04:62:39:3E:73:1A:47:32:74:83:E4:C8:EB:25:B7:70:47
            X509v3 Authority Key Identifier:
                keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:dc:dd:73:94:ea:c7:4f:8d:a8:fd:4f:d0:77:90:0b:aa:
         e1:ef:ba:97:0e:b2:ad:18:7c:81:06:c4:fc:50:0a:53:77:d6:
         e9:d6:c6:aa:a6:64:02:eb:49:28:86:b7:27:ae:64:93:a4:f7:
         66:3b:cb:5f:18:9d:79:80:f0:33:ae:f9:00:5f:98:90:49:42:
         1f:06:1d:93:36:cc:4c:79:38:ee:b5:60:df:05:cd:58:0d:6d:
         b7:c8:eb:1d:57:df:f9:07:e0:bb:0c:97:9c:53:21:8d:dc:3d:
         41:bc:e6:72:26:07:46:c4:f6:57:54:61:48:05:fd:6d:53:83:
         84:89:18:c5:4c:96:a2:d9:13:8e:13:e2:e4:fb:c2:e3:87:5d:
         cd:39:ae:9c:c3:e8:a8:70:e3:dc:ce:5b:df:17:cf:a6:e8:fe:
         78:c6:fd:67:06:ab:09:3a:f4:19:ca:37:e8:c6:df:69:0d:f1:
         cf:8e:79:04:ba:9c:59:74:f0:1b:9a:1d:cf:75:be:41:2d:01:
         2b:8b:9f:ce:dc:ab:6f:83:ca:0e:40:24:77:46:3f:ce:7c:2c:
         39:4a:52:f3:35:27:74:da:82:bb:54:f8:0a:9c:a7:99:b8:4b:
         7d:19:cb:1c:26:78:29:2d:3b:ea:c6:88:55:b2:56:c6:82:4c:
         13:39:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:54:06 2024 by rpki-client on console-fra.rpki-client.org