Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File:                     DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier:          jsH/PuA4BT42/63Ew9cU5hfpZntypng/CJNh5CF0FoU=
Subject key identifier:   3F:9F:D5:57:67:E0:FD:91:BA:2C:D4:75:7A:6E:45:9A:E2:03:67:8B
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer:       /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial:       018F4268642922B6D5532D03BC30C02DA080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number:          0638
Signing time:             Sat 04 May 2024 07:01:28 +0000
Manifest this update:     Sat 04 May 2024 07:01:28 +0000
Manifest next update:     Sun 05 May 2024 07:01:28 +0000
Files and hashes:         1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: 2heSFW6ckUkU3ojiweFIsvNLQSRZ42rWZsHCbwtLTAI=)
                          2: ZNHupz7oPGoXXYcueoEXVqCBIJg.roa (hash: zYN34GsPw4X/SrGtGuNQFVvXBRSgUOak0TP/msmtvbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:64:29:22:b6:d5:53:2d:03:bc:30:c0:2d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
        Validity
            Not Before: May  4 07:01:28 2024 GMT
            Not After : May  5 07:01:28 2024 GMT
        Subject: CN=3f9fd55767e0fd91ba2cd4757a6e459ae203678b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:11:35:99:e1:da:6c:af:64:21:7c:9f:1b:
                    68:46:32:75:a0:8f:19:da:61:65:eb:bc:b3:a5:02:
                    7d:6f:4d:17:4c:0b:12:c7:66:5a:96:29:bd:4f:81:
                    70:88:49:4c:fc:8d:f8:57:8a:43:74:8e:ce:68:a3:
                    3d:e0:c0:85:a8:41:94:11:10:6d:e9:9a:8c:72:ad:
                    81:c8:b0:55:12:90:50:7f:45:c2:e2:00:c9:32:24:
                    ce:82:56:49:34:12:6b:cc:09:a5:94:21:3f:7a:34:
                    41:95:b8:ed:53:c7:e6:8e:f0:39:cd:d8:bd:63:8b:
                    83:e2:66:1c:2f:dc:cc:17:26:89:a0:a4:b2:9a:ab:
                    5d:fc:fd:65:8b:aa:92:4d:f2:2b:38:55:e7:9b:c3:
                    f4:56:bf:41:86:e7:e9:a8:b4:3e:ea:2e:a3:3e:40:
                    a8:11:ca:f6:2f:6d:aa:99:3b:e0:58:4d:5c:20:b0:
                    3f:20:ea:93:11:3e:89:19:17:c9:9c:17:1c:7c:35:
                    7f:9e:1a:3f:86:58:b5:65:97:35:de:66:28:27:ea:
                    f0:19:61:fe:5a:a6:63:38:3b:fa:72:a7:b2:57:ae:
                    ef:0f:51:7f:f2:2c:78:75:d2:47:bb:e3:74:58:05:
                    52:7e:36:19:ec:37:ab:98:4f:32:d3:43:5a:d8:26:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9F:D5:57:67:E0:FD:91:BA:2C:D4:75:7A:6E:45:9A:E2:03:67:8B
            X509v3 Authority Key Identifier:
                keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:85:a5:a1:92:2a:65:3f:53:72:47:e4:ec:a1:91:b9:c2:
         87:03:6e:5d:58:74:d6:ee:9f:cd:0c:e0:65:5d:32:95:5f:33:
         c0:bd:7c:09:d8:67:15:79:a9:76:a3:b6:f2:25:2c:09:f1:7c:
         f5:3b:b3:3d:39:97:35:b6:fe:d3:ed:c5:e4:b3:2f:65:7b:5d:
         39:7f:4e:41:40:96:61:b8:59:e5:b8:83:f7:c2:bf:02:98:4c:
         a4:11:e1:d3:11:cf:a1:28:b0:0c:26:a6:cc:91:14:2c:13:8d:
         04:46:b9:bd:5a:2f:39:fb:57:b8:d5:be:91:95:ec:a0:eb:2e:
         d8:e3:ca:66:e3:97:c8:49:f9:43:53:6d:75:8d:90:6c:44:69:
         4d:b8:cc:ab:2e:c9:51:c2:74:b4:0a:03:ab:35:e3:1a:71:16:
         50:77:dc:b0:59:2c:16:b1:2f:ac:02:1d:f3:2e:db:cb:bf:3b:
         71:b5:e1:9c:40:02:89:8f:69:2f:83:ef:95:1c:3e:e8:f1:6e:
         95:2a:b3:60:49:bf:08:c9:13:01:56:04:b9:be:d5:77:d0:b8:
         f6:44:dd:23:be:c4:07:9e:12:cc:49:6f:58:a1:cc:7f:3c:5a:
         13:ee:f3:66:1a:7e:3f:33:22:db:ac:b1:18:11:93:98:64:8f:
         d2:f7:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:49:19 2024 by rpki-client on console-fra.rpki-client.org