Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File:                     rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier:          3vDol4uHosYQC1DXZi/BWDuxmfHe4GQM1S00pWCoGUw=
Subject key identifier:   0A:10:8C:81:EE:D9:E3:73:7A:3C:68:5C:D4:9D:5F:CD:C5:14:86:32
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer:       /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial:       018F8938E55018FC936F4583EC5223C8B05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number:          0DC3
Signing time:             Sat 18 May 2024 01:02:38 +0000
Manifest this update:     Sat 18 May 2024 01:02:38 +0000
Manifest next update:     Sun 19 May 2024 01:02:38 +0000
Files and hashes:         1: 47J98OVgrhjlqvz7m1EJzmRPUI8.roa (hash: vYjCFJ4A78mF1lp17aMjPC5TnvoagTp4rjgTtRHZn0w=)
                          2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: y6QU1ipAZ36yqL39ib8ReDL6fTgwGszsOKibHtT4aJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:e5:50:18:fc:93:6f:45:83:ec:52:23:c8:b0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
        Validity
            Not Before: May 18 01:02:38 2024 GMT
            Not After : May 19 01:02:38 2024 GMT
        Subject: CN=0a108c81eed9e3737a3c685cd49d5fcdc5148632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:f4:ae:63:04:1c:7c:89:d2:ea:6f:3d:e6:
                    b8:86:b6:d2:52:de:81:95:86:b6:e8:79:fa:9f:50:
                    19:4e:f2:82:d4:c8:4e:e3:5a:dd:cf:a0:81:a1:8f:
                    1c:6d:25:ad:36:a6:98:30:96:27:2a:8d:f6:cc:e5:
                    d5:aa:a4:bb:e7:37:77:a4:0b:52:5a:77:2e:81:5f:
                    17:df:33:f1:72:b5:c6:e8:8e:be:3b:56:a7:60:49:
                    57:5c:e0:87:cc:ff:1e:75:2d:53:53:de:c4:65:d0:
                    f5:21:7f:9a:2f:80:6a:fa:1e:cd:46:54:ed:10:9b:
                    62:41:ab:d3:19:96:8f:db:fe:9e:4f:a9:9c:e3:48:
                    14:4e:68:1d:6c:42:27:4c:fc:39:d2:45:55:fd:62:
                    c3:be:89:a4:81:4c:d8:03:ea:6e:6c:48:f6:8a:bf:
                    c2:8e:b3:f9:70:6b:39:18:c0:3d:c4:1d:30:a0:dd:
                    bc:7c:03:6e:a1:91:5a:1f:0c:bf:04:14:b7:f9:01:
                    49:20:e9:61:80:dd:68:96:e4:a8:48:a9:9c:99:e1:
                    5f:47:36:ea:94:bc:f5:da:37:6f:a1:6e:45:f6:8b:
                    dd:c7:f7:cd:b6:3a:3d:d1:b7:d5:9b:29:b7:53:dd:
                    8e:f0:d5:d7:08:21:3a:56:dd:55:bc:18:58:48:e1:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:10:8C:81:EE:D9:E3:73:7A:3C:68:5C:D4:9D:5F:CD:C5:14:86:32
            X509v3 Authority Key Identifier:
                keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:a8:62:36:44:48:17:a8:bb:5c:63:0d:fc:d0:23:f4:a4:
         25:3f:d9:43:72:21:12:b9:70:83:72:33:9e:b3:06:17:07:0b:
         83:cb:7e:12:98:80:d2:42:d8:7d:63:eb:13:ed:0e:bd:64:a2:
         d7:0a:6d:47:6c:8f:4f:48:f8:11:f4:ac:6b:18:f1:75:eb:20:
         2b:e6:cc:61:fc:bf:3d:fa:8e:8b:c7:db:31:7a:8f:36:95:b2:
         0f:ed:f2:10:bb:5f:b0:77:c7:48:42:e6:4b:95:6b:a3:3a:e3:
         ab:c4:d6:12:3f:ee:a7:83:4e:c1:36:85:28:61:04:1c:cd:3b:
         3c:58:45:76:d9:61:61:27:2d:0d:fe:fd:23:6a:4e:6c:a4:1e:
         3b:d9:65:87:70:cf:da:2b:14:a5:3d:5d:ed:26:62:ef:53:e0:
         c2:23:b8:63:62:4f:bf:af:e1:c9:59:d4:4a:3b:af:c9:aa:8e:
         bf:cf:02:00:11:73:7c:f4:f7:50:0b:75:d9:e6:82:dc:39:9a:
         73:85:23:ca:63:d8:f9:e3:c7:57:2c:87:f9:b2:a1:0a:52:34:
         19:2a:8f:a2:44:f8:93:05:c0:e8:b7:02:80:aa:e0:78:56:3d:
         b6:51:66:9c:18:53:e9:f1:57:45:9a:36:ee:0d:48:5f:6c:66:
         80:ec:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:13 2024 by rpki-client on console-ams.rpki-client.org