Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File:                     DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier:          sHWYJDsbp/Zc20yaX3wk2RdUeCsv5Yb/wZLoYmTwYBA=
Subject key identifier:   F5:59:40:96:41:83:60:99:93:A3:6E:01:49:C6:92:5C:43:46:CB:76
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer:       /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial:       018FF55E09560C1E532CC62AF2F2894EFF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number:          0608
Signing time:             Sat 08 Jun 2024 01:02:11 +0000
Manifest this update:     Sat 08 Jun 2024 01:02:11 +0000
Manifest next update:     Sun 09 Jun 2024 01:02:11 +0000
Files and hashes:         1: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: FPXb5nsIN0OX71yoJCfFCXkL3Tn+IOz83mL+H81AsAI=)
                          2: bOo0DP4R5eyxf1YemKvR4H4t9Sc.roa (hash: ifX7tQcwdRBlZx+g8nO+U5LIrXueEFXh5/1xHkDCk4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Jun 2024 01:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f5:5e:09:56:0c:1e:53:2c:c6:2a:f2:f2:89:4e:ff:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
        Validity
            Not Before: Jun  8 01:02:11 2024 GMT
            Not After : Jun  9 01:02:11 2024 GMT
        Subject: CN=f55940964183609993a36e0149c6925c4346cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:e1:81:87:b7:83:c5:59:85:4d:21:d3:e2:
                    11:ac:ab:b3:18:fe:08:34:29:26:05:4d:76:89:2b:
                    0d:15:2b:55:88:b0:00:a6:bf:02:25:65:50:d3:92:
                    e6:19:94:55:7a:7d:0b:be:e1:89:40:90:43:8c:3f:
                    3a:80:c5:c9:28:77:1e:0d:23:77:3b:1d:e2:f5:cb:
                    4d:e4:c4:bd:38:23:80:62:ac:e9:d7:60:56:43:a8:
                    e8:c5:fa:3a:ee:8e:c2:4c:44:82:e5:9c:38:ec:35:
                    0f:be:fb:10:3a:9f:6f:76:8b:a6:5e:a8:86:6b:e2:
                    cd:75:f4:42:f3:32:da:7c:85:1f:d4:0f:66:cb:8d:
                    8d:bc:f9:24:e2:ff:ba:69:24:43:8b:9b:fc:25:ac:
                    b8:20:7c:35:77:59:f0:1f:31:5b:03:db:ff:52:c5:
                    a2:01:09:39:f2:87:08:07:84:44:2e:0d:49:9e:a7:
                    e4:a8:4e:a9:75:59:58:17:5e:81:14:a3:67:b1:53:
                    16:34:7b:b3:02:67:2e:fe:a5:c0:c4:72:ff:0f:da:
                    18:ab:30:67:0b:72:2c:09:53:9c:39:6c:8a:e5:de:
                    b6:b5:fc:70:df:09:3f:6b:1b:e3:fb:e9:02:9b:86:
                    49:ab:31:4b:cb:2c:f9:c9:f9:57:59:c2:13:d1:47:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:59:40:96:41:83:60:99:93:A3:6E:01:49:C6:92:5C:43:46:CB:76
            X509v3 Authority Key Identifier:
                keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f0:ff:05:74:6e:d7:79:44:1d:5a:78:2d:25:5f:fc:f4:c6:
         9f:a5:0a:5e:e5:4c:75:be:4a:1d:69:ef:cf:68:2a:01:38:6a:
         dd:3f:03:de:11:21:8f:56:63:f8:5b:26:aa:5b:d4:bd:11:9e:
         ab:58:6b:d8:c2:4f:50:3b:75:7f:1a:75:78:07:69:92:93:39:
         a9:cb:86:07:ac:4b:24:f7:6d:a9:1e:d9:e8:03:11:c6:ce:1c:
         fe:41:ef:75:fc:e4:36:4e:5c:c3:d2:cc:c6:c5:c5:ee:83:98:
         68:2b:c1:a2:21:d9:a9:bd:1f:5f:8b:e7:99:bc:37:b0:b1:50:
         53:1b:87:3e:c8:c5:e4:b9:ab:bd:2f:2d:2f:0b:05:5e:56:7f:
         fe:4c:1f:ed:04:1a:2d:f1:de:af:48:87:46:f8:d7:e4:29:5f:
         dd:11:90:49:65:d3:bf:21:90:b2:f2:de:5c:27:23:e7:de:92:
         06:46:75:d6:43:5b:08:d9:b5:10:d3:54:df:ec:5f:26:94:1f:
         d2:0e:8a:9a:e6:66:dc:b0:e3:8f:74:ed:39:d7:83:6c:3a:d7:
         a0:c3:d4:c9:48:cf:f0:68:cc:1b:a1:54:27:2c:e7:36:a1:21:
         9e:f3:02:2d:bb:4d:79:ee:7f:66:ed:05:6d:ba:99:da:de:37:
         c4:57:fe:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/1XglWDB5TLMYq8vKJTv8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTVjM2FjZTM2NmRiNDFiY2RjMjU2YzVkNWIzYmU0OTBh
NGY3NjEwHhcNMjQwNjA4MDEwMjExWhcNMjQwNjA5MDEwMjExWjAzMTEwLwYDVQQD
EyhmNTU5NDA5NjQxODM2MDk5OTNhMzZlMDE0OWM2OTI1YzQzNDZjYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNPhgYe3g8VZhU0h0+IRrKuzGP4I
NCkmBU12iSsNFStViLAApr8CJWVQ05LmGZRVen0LvuGJQJBDjD86gMXJKHceDSN3
Ox3i9ctN5MS9OCOAYqzp12BWQ6joxfo67o7CTESC5Zw47DUPvvsQOp9vdoumXqiG
a+LNdfRC8zLafIUf1A9my42NvPkk4v+6aSRDi5v8Jay4IHw1d1nwHzFbA9v/UsWi
AQk58ocIB4RELg1JnqfkqE6pdVlYF16BFKNnsVMWNHuzAmcu/qXAxHL/D9oYqzBn
C3IsCVOcOWyK5d62tfxw3wk/axvj++kCm4ZJqzFLyyz5yflXWcIT0UclnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVZQJZBg2CZk6NuAUnGklxDRst2MB8GA1UdIwQY
MBaAFA6Vw6zjZttBvNwlbF1bO+SQpPdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMt
ZjUzZTUxYzA5NzRmLzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMtZjUzZTUxYzA5NzRm
LzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPD/BXRu
13lEHVp4LSVf/PTGn6UKXuVMdb5KHWnvz2gqAThq3T8D3hEhj1Zj+FsmqlvUvRGe
q1hr2MJPUDt1fxp1eAdpkpM5qcuGB6xLJPdtqR7Z6AMRxs4c/kHvdfzkNk5cw9LM
xsXF7oOYaCvBoiHZqb0fX4vnmbw3sLFQUxuHPsjF5LmrvS8tLwsFXlZ//kwf7QQa
LfHer0iHRvjX5Clf3RGQSWXTvyGQsvLeXCcj596SBkZ11kNbCNm1ENNU3+xfJpQf
0g6KmuZm3LDjj3TtOdeDbDrXoMPUyUjP8GjMG6FUJyznNqEhnvMCLbtNee5/Zu0F
bbqZ2t43xFf+TQ==
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:10:06 2024 by rpki-client on console-ams.rpki-client.org