Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File:                     DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier:          cD7L9dEWEy0Ndp0vPrSrn7FZTQx5Vc477wvncXEsHJg=
Subject key identifier:   0B:AA:94:D0:96:39:02:98:D7:3D:D1:1E:38:D5:A2:BC:B1:48:21:09
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer:       /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial:       01906B2B3D5FF80E64C994F9691E9B87159F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number:          11F6
Signing time:             Sun 30 Jun 2024 22:01:54 +0000
Manifest this update:     Sun 30 Jun 2024 22:01:54 +0000
Manifest next update:     Mon 01 Jul 2024 22:01:54 +0000
Files and hashes:         1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: KN9VcIWal1Oq/x1gxb5OPvHbdJrCuDgQvbRvxD+yH7c=)
                          2: Pk7wbfXp-SfdAf1xH00mTfRkN7k.roa (hash: OvkL8wy7+0lv3XrBY/BhjFdvdVo6UMqXmZrYyko2mhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2b:3d:5f:f8:0e:64:c9:94:f9:69:1e:9b:87:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
        Validity
            Not Before: Jun 30 22:01:54 2024 GMT
            Not After : Jul  1 22:01:54 2024 GMT
        Subject: CN=0baa94d096390298d73dd11e38d5a2bcb1482109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:5d:b3:33:7d:2a:82:cb:fa:19:f2:dc:98:
                    f3:6d:59:0f:1e:4a:a8:45:de:b6:f8:4b:58:59:6c:
                    66:c4:7b:8b:51:03:eb:8b:31:ae:e5:9f:cd:b1:25:
                    35:39:41:7c:fc:aa:79:75:df:bb:97:28:5c:d1:e5:
                    38:91:d3:64:92:08:7e:c7:85:49:bc:c3:c8:71:1f:
                    97:e5:eb:97:61:e1:63:21:e3:83:45:30:37:fc:12:
                    2f:db:95:20:27:1c:87:c2:6b:c7:91:4b:dd:f8:7b:
                    c4:2f:7c:97:e3:66:8a:11:fe:cc:81:04:3d:f7:60:
                    4a:a7:7c:b4:54:c6:c1:98:dd:14:c2:a3:83:4a:97:
                    8e:78:2a:3d:3c:4e:4a:f7:34:85:30:35:1a:e5:e0:
                    eb:a3:3b:e4:fd:cc:80:98:c3:74:53:0a:90:ce:d4:
                    31:55:8e:49:44:f7:03:e8:da:89:29:0f:9e:ff:8a:
                    75:4a:e5:29:f2:5e:0d:b6:af:0d:32:a2:74:5d:d0:
                    c4:68:c0:0e:a7:7e:c1:85:16:12:f6:ac:c9:0d:16:
                    89:0c:8d:ef:e2:39:18:43:22:0e:5f:4c:8a:87:b2:
                    49:bc:b5:11:ba:2f:e9:a6:32:d5:3b:14:0d:f7:02:
                    61:e6:49:9b:84:87:46:bc:03:cf:db:5a:ac:e5:2a:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:94:D0:96:39:02:98:D7:3D:D1:1E:38:D5:A2:BC:B1:48:21:09
            X509v3 Authority Key Identifier:
                keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:03:3e:77:5d:45:9d:ca:f9:ff:3e:bb:bb:f2:a9:5a:23:3f:
         da:aa:c9:db:47:d8:4f:2b:ee:4e:4c:fe:18:6e:21:b1:4c:ad:
         e2:16:b9:26:5a:06:5e:b1:35:3d:10:7a:70:82:4d:8f:a1:4c:
         e7:e5:5c:8d:f2:49:31:b4:f5:1e:11:db:15:75:b8:d3:ab:02:
         02:59:fd:a6:e2:b1:15:d4:bd:ae:15:a5:ea:54:a0:62:87:51:
         51:4e:dc:5a:d0:76:55:d5:3c:a9:a9:cd:a6:84:25:af:4f:17:
         99:3b:e5:0c:23:fc:1b:9b:a0:bb:aa:ec:79:e7:80:c0:5b:69:
         b6:ff:88:9b:d4:00:c4:c3:6d:6f:ad:b6:d3:ae:79:79:27:8a:
         89:72:a4:3a:dc:d2:6c:f7:86:f6:2f:a0:2d:7c:79:ad:0d:a7:
         33:65:00:60:89:01:8a:5b:6d:32:1c:d8:cf:34:3b:8a:ed:e9:
         75:f2:73:b3:9c:ff:42:dc:2e:d9:f5:f3:88:ab:61:02:be:79:
         e6:34:74:96:d1:ca:25:92:7c:57:ba:c2:13:e5:53:7c:23:4a:
         73:58:4e:61:1e:1d:6e:48:65:01:db:2e:4e:b1:39:23:6e:50:
         85:ce:35:f9:fe:e6:89:e9:ae:c9:7c:ea:50:23:99:5c:a2:51:
         77:0e:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:08:03 2024 by rpki-client on console-ams.rpki-client.org