Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File:                     DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier:          NViN7J1iPXE4AlZ+O/romqwN3C+05zjJmq4wq3bM2NI=
Subject key identifier:   B8:54:A3:3B:34:63:79:69:D6:E6:53:63:A0:B3:79:1E:7D:4D:AA:68
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       018F4B6C9D6E8FD2A1E5F2228458908693D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number:          072C
Signing time:             Mon 06 May 2024 01:02:40 +0000
Manifest this update:     Mon 06 May 2024 01:02:40 +0000
Manifest next update:     Tue 07 May 2024 01:02:40 +0000
Files and hashes:         1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: SXLMBRfAOjviSK7sWEF9oasWfPYnp45XYAOyzCdkjsk=)
                          2: Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa (hash: Wllycfypi6aGm5kcvc2vgto5ykCI7k2yPdRK/s6GWME=)
                          3: GEXGTv6ubD69pjTSwWqYH2OpF6s.roa (hash: ImztnbeF4TyDYd/30OC1KWC7onee4YU8z+39SDw1xko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:9d:6e:8f:d2:a1:e5:f2:22:84:58:90:86:93:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: May  6 01:02:40 2024 GMT
            Not After : May  7 01:02:40 2024 GMT
        Subject: CN=b854a33b34637969d6e65363a0b3791e7d4daa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:77:fc:e2:49:28:75:43:98:1b:89:47:11:
                    4f:f9:19:5f:35:ef:cb:46:75:e2:dd:00:fc:9d:c6:
                    6f:39:c3:5a:c2:fd:c2:83:b5:8e:8c:cc:09:0c:42:
                    18:15:b9:86:95:e1:d7:65:a5:37:3f:f8:d0:8b:ca:
                    1f:c2:de:ec:a1:0d:c8:20:07:fd:52:99:e9:68:75:
                    53:65:00:b4:d5:60:c0:6b:3c:c7:7c:b8:18:f7:67:
                    f3:16:80:ef:f0:4b:cb:0f:9b:b5:e1:d8:be:6e:ee:
                    1e:ae:b6:6f:7f:66:45:28:26:c2:d7:80:e9:ae:30:
                    06:ed:99:e5:cc:92:3c:6b:23:39:36:29:90:aa:70:
                    ea:f5:66:4f:3e:f1:c6:42:03:d1:60:5f:09:80:c4:
                    db:57:ba:78:2e:92:3b:93:1b:da:1d:ec:9e:05:20:
                    8d:f9:ca:50:56:49:9e:fa:af:63:ff:9a:78:78:8c:
                    21:02:af:d4:87:73:0d:f5:79:e0:65:29:44:6e:39:
                    b3:c3:2c:3e:9a:20:5e:3c:a4:70:93:d5:fd:d7:9e:
                    9c:e7:14:14:1e:67:a4:d7:ff:7d:b8:2b:12:00:d0:
                    fc:a3:9f:b9:de:bd:64:5b:14:9b:67:5f:f0:c0:e5:
                    cd:f2:2d:5f:f9:15:54:13:1b:9f:ae:b1:3a:83:9c:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:A3:3B:34:63:79:69:D6:E6:53:63:A0:B3:79:1E:7D:4D:AA:68
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:49:70:e8:ed:8a:bb:1a:92:ae:af:5a:9a:fe:6d:1d:c1:7b:
         30:92:c5:db:1b:3c:34:6e:5d:e8:eb:06:53:73:d7:59:ad:2b:
         25:6f:53:21:32:a4:2b:f2:83:ef:5c:13:d7:0e:67:b7:86:3d:
         e5:5b:3e:c1:95:5f:06:c3:77:50:10:30:f5:6e:c3:12:f6:2e:
         0e:be:98:71:a9:1a:0e:4c:be:bb:ec:8a:62:6a:79:88:22:08:
         6c:68:a0:e5:76:0a:98:fb:8d:6e:84:22:d0:9d:dc:33:7e:dc:
         0d:42:66:8d:98:7c:f1:fc:7e:fb:5e:ae:8b:6a:ab:f8:ac:1d:
         3a:43:b1:fd:44:84:78:fd:ac:60:8c:f7:f9:02:28:bf:51:6f:
         93:0c:f5:88:06:c2:4b:0e:2b:aa:45:bc:ea:2c:f5:b0:fe:da:
         82:4a:4e:aa:6f:fa:fd:5a:51:71:9e:71:0e:0d:44:44:97:c4:
         9d:ca:30:7e:cf:4b:b8:d2:fd:bf:51:61:45:7d:27:12:b5:33:
         cd:36:4b:88:59:76:ae:dd:90:45:33:81:bc:59:a5:3c:48:8f:
         7f:9b:9f:63:c8:7f:3f:6e:30:0e:f8:5d:ac:64:74:cc:62:c8:
         f2:37:5d:d7:28:e3:ef:2a:d4:e5:78:cb:c3:73:fc:17:85:96:
         52:ed:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:13:02 2024 by rpki-client on console-fra.rpki-client.org