Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File:                     DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier:          NAeyPIHHqWxjo/XONLj78SXtYLtu3A5+qFXgawZpAZw=
Subject key identifier:   41:58:6E:3F:EF:99:14:A4:2A:68:51:55:BC:22:E2:95:E3:68:D4:BE
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer:       /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial:       018F3709060C4467697A670DC4FC15D8C1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 02:01:29 +0000
Manifest this update:     Thu 02 May 2024 02:01:29 +0000
Manifest next update:     Fri 03 May 2024 02:01:29 +0000
Files and hashes:         1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: WwhKV/5l+YuvR6K7GwwFgcVOWn4qIo0B2I/TfVemKCI=)
                          2: GAMgQuAtuYAbpdyZekqKPo20Gxk.roa (hash: uVQS5EW//MlePbtymr3zQUwMY2DVdxN0+JJhFZJsiAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 02:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:09:06:0c:44:67:69:7a:67:0d:c4:fc:15:d8:c1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
        Validity
            Not Before: May  2 02:01:29 2024 GMT
            Not After : May  3 02:01:29 2024 GMT
        Subject: CN=41586e3fef9914a42a685155bc22e295e368d4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:98:bf:27:00:2b:d4:e1:03:c7:d8:f0:12:
                    87:8a:0c:fe:ca:b3:c1:c9:00:b4:9a:74:03:b2:78:
                    eb:fa:41:a4:fd:63:8e:58:cc:1e:a6:60:37:ce:75:
                    e5:f2:de:63:6e:8d:be:33:19:99:e9:98:8d:fb:09:
                    94:27:73:b1:5f:8f:ce:52:ea:1e:a2:3d:ff:99:7f:
                    a1:79:3a:7a:d2:ce:08:0d:83:86:b2:d6:d6:d4:16:
                    82:9c:27:83:19:9f:9d:1a:10:ae:80:9a:c0:bc:4c:
                    88:48:72:f1:85:d0:39:c9:81:93:09:ca:8a:0e:85:
                    85:c0:e9:f4:17:5b:07:34:6c:e1:87:cd:df:3c:56:
                    89:be:4f:79:ad:6f:3a:4b:e7:de:3a:13:3f:95:f5:
                    5e:66:88:b4:51:d3:29:5a:ab:ce:02:90:99:aa:b6:
                    9e:8c:5e:60:07:d6:1f:9d:2e:3d:60:1d:9f:75:84:
                    15:08:93:e2:38:22:36:6e:86:bf:4f:4a:88:70:ab:
                    a3:43:1d:eb:80:8c:19:88:81:15:f3:52:bb:16:a0:
                    b4:bd:a1:9e:94:4f:5e:fa:5a:f1:cb:82:ea:b0:3e:
                    f2:41:6d:69:1d:a0:b7:73:12:79:e6:7d:f5:18:e3:
                    aa:7d:0d:ed:d7:6f:51:72:43:31:18:dc:0d:dd:30:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:58:6E:3F:EF:99:14:A4:2A:68:51:55:BC:22:E2:95:E3:68:D4:BE
            X509v3 Authority Key Identifier:
                keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:5c:8b:10:c3:c2:ad:80:15:96:f6:f9:e0:99:ba:9a:6c:
         7c:26:f0:c9:79:a9:5c:87:9d:c4:31:32:73:6a:50:35:7b:7d:
         c7:f1:6b:ff:8d:a6:0a:a5:d5:14:b4:4e:91:54:b9:c3:c5:ce:
         f3:ee:52:b0:08:2a:b6:7b:27:65:7f:6e:57:a4:8b:e7:00:7e:
         1f:ae:f1:c7:82:61:97:1d:9d:cd:f1:3f:36:6f:5e:c6:4c:8e:
         56:f3:84:e5:29:3b:73:b9:6c:19:56:c0:44:83:13:f0:35:e5:
         0e:d4:1a:9f:24:3a:2d:0c:b5:07:52:f4:a3:22:c1:fa:9f:1e:
         d9:0b:c5:47:2e:b0:95:5a:25:7d:aa:83:aa:51:1b:fd:d2:34:
         b9:a7:a5:e8:2b:56:53:8a:44:fb:0a:81:38:f9:3a:4a:d0:a9:
         66:e6:db:33:2d:a9:b5:a9:d0:cb:87:b4:40:5b:b1:47:a7:f2:
         e4:cc:9c:4c:94:2d:62:40:25:db:f9:de:ee:ff:5d:81:90:cb:
         54:90:91:e8:b7:41:e4:5c:3e:91:a1:e4:49:20:58:7e:04:2d:
         c5:74:b0:ba:d6:df:f4:7a:f1:a7:b0:a3:e0:72:41:fd:b8:e3:
         e2:0f:18:2a:56:87:13:cd:59:7a:72:74:9c:13:e8:19:63:f6:
         c3:b8:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:25:50 2024 by rpki-client on console-fra.rpki-client.org