Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          743nOdvMDAY+S3ITHmHg5pJEhijOVZhMwABKmeIZ4Zs=
Subject key identifier:   9A:07:98:7E:B4:95:C3:DD:0A:8E:9B:84:72:3B:8C:5F:E0:C3:68:D1
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       018F41C53C3880E0769C3748ACDC25075494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          041A
Signing time:             Sat 04 May 2024 04:03:16 +0000
Manifest this update:     Sat 04 May 2024 04:03:16 +0000
Manifest next update:     Sun 05 May 2024 04:03:16 +0000
Files and hashes:         1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: P/cNMzjyw5Scu/k86Ysdgvd8W1163t5tjVPjQp/ohaA=)
                          2: Tb3E7F_udpjaWMAsJI3Tr6kxr2U.roa (hash: wal7aqbf/Gfzt6Un2JdiIUejn8SsuvPwvYBSsBssxhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:3c:38:80:e0:76:9c:37:48:ac:dc:25:07:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: May  4 04:03:16 2024 GMT
            Not After : May  5 04:03:16 2024 GMT
        Subject: CN=9a07987eb495c3dd0a8e9b84723b8c5fe0c368d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:02:89:2b:e4:b8:e1:0a:36:d7:cf:c0:2b:
                    e1:94:e5:5b:6a:8d:b6:e3:00:c0:66:a4:28:79:4d:
                    ba:1a:21:53:07:40:fd:bf:d2:0d:ee:31:7c:ab:ab:
                    74:0e:96:7c:b1:31:7e:6b:d6:b9:56:68:25:50:a7:
                    4f:0e:5c:c0:45:9e:b0:da:7f:ac:e5:04:0b:35:ec:
                    a3:5c:bf:cc:7f:87:03:48:c3:35:a3:09:e4:f6:45:
                    56:36:b8:73:de:12:6b:ab:75:e4:3e:95:0c:0e:2a:
                    ff:04:29:2a:98:87:68:bb:fa:d9:e4:3e:03:74:52:
                    10:3c:4a:f4:82:eb:21:0f:74:a5:39:08:05:b8:c0:
                    f6:31:1c:75:0d:d9:aa:13:72:94:8b:ff:11:73:14:
                    a7:a6:15:5d:67:51:55:88:16:e6:a3:bd:9c:c8:89:
                    2d:cb:26:4e:f7:af:94:dd:38:04:70:58:76:91:9a:
                    48:07:83:38:d4:3b:e5:59:cf:dc:53:e2:27:0b:0d:
                    e4:5a:14:33:b2:bc:75:61:6d:bb:89:6d:1e:ec:38:
                    db:76:1f:f2:b9:4f:33:50:69:8d:35:b5:bd:0c:86:
                    4b:50:b8:2a:c1:42:20:f0:f2:36:02:3a:93:70:65:
                    07:63:20:1c:d5:70:65:f5:8e:3d:1e:1c:89:7c:8f:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:98:7E:B4:95:C3:DD:0A:8E:9B:84:72:3B:8C:5F:E0:C3:68:D1
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:47:2b:f9:60:db:4b:89:f9:5d:23:3a:8a:85:be:c7:1b:ee:
         0a:71:a3:db:fe:9f:ce:0b:fe:2d:fd:57:e0:87:c8:39:21:3e:
         28:81:68:33:b3:f0:37:20:d1:47:c9:42:97:17:ad:bc:37:45:
         dd:49:ff:d5:4f:aa:92:19:62:c8:e6:8e:aa:48:2a:cc:bd:df:
         4b:98:0c:f2:33:32:46:b9:35:67:20:e7:6b:78:af:f0:b9:0f:
         c3:97:3b:45:d0:a1:90:20:21:7c:04:00:39:13:39:c7:c3:42:
         ac:ce:f4:ff:3d:c4:2b:75:d6:02:da:e7:ac:94:2a:a9:a7:fd:
         13:50:eb:91:32:02:66:c4:99:87:b8:65:61:5b:9b:57:b0:5e:
         a3:b3:b2:43:60:a6:5c:bd:8e:1f:23:6e:ea:c9:12:c1:6a:9e:
         09:3f:cc:1b:1c:9c:07:b6:13:8c:95:73:03:98:b5:24:89:b0:
         40:51:ba:4a:50:70:56:5f:a1:87:35:b9:23:d3:6a:49:c4:c8:
         3f:94:51:58:59:f2:24:0d:99:08:f8:c2:b6:49:7f:b4:f2:7c:
         5c:07:46:b0:60:75:2f:5b:ef:4a:58:6f:61:fc:86:9c:26:3b:
         f3:de:f9:e6:1f:c7:dd:f2:7f:be:0f:82:30:69:b6:61:0a:df:
         dc:a9:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:15:07 2024 by rpki-client on console-ams.rpki-client.org