Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File:                     DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier:          SMXRG25KCh9pHOJf3d9f12RuQIyMEeu7XlAkj4FAqes=
Subject key identifier:   44:5A:C4:2F:3B:74:80:03:5E:23:76:24:5E:52:A0:58:E8:6B:F9:94
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer:       /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial:       018F42688B53BEFD66943701F769E0CB2246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number:          0D62
Signing time:             Sat 04 May 2024 07:01:38 +0000
Manifest this update:     Sat 04 May 2024 07:01:38 +0000
Manifest next update:     Sun 05 May 2024 07:01:38 +0000
Files and hashes:         1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: pBAnrzkxDIne0W58pq/Ig13LcuWxITtoV1mjp6nP/qI=)
                          2: kZ06kIsAJai0c1J_xh0xwSZlYdk.roa (hash: OwnM9Qo4M7A+tqX0HJsesXYJdmxLYDZvDE4eNyQGkm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:8b:53:be:fd:66:94:37:01:f7:69:e0:cb:22:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
        Validity
            Not Before: May  4 07:01:38 2024 GMT
            Not After : May  5 07:01:38 2024 GMT
        Subject: CN=445ac42f3b7480035e2376245e52a058e86bf994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:9d:19:81:00:d2:a7:be:75:84:1d:2b:25:
                    2c:78:56:93:b5:d8:8f:7d:23:90:9f:d5:79:79:27:
                    47:0d:ad:f7:01:00:4e:ea:f2:05:f6:9c:29:89:5e:
                    0c:63:cc:2f:f5:d8:73:4f:0a:cc:be:07:a7:3c:02:
                    5d:8c:5c:52:23:bb:cd:bc:c1:2d:e9:9b:6f:77:fe:
                    c6:66:82:dc:64:ad:4d:ac:61:36:29:0a:88:6d:1b:
                    53:64:4f:1d:ff:a7:38:bb:04:54:cf:53:08:54:86:
                    62:c4:0d:fb:03:77:7f:0e:26:3e:74:b0:0a:23:ef:
                    dc:79:23:55:57:da:7b:39:a8:ab:6f:e8:ea:15:ee:
                    fe:f2:cc:c3:59:20:31:e7:15:c7:58:40:8e:f1:7e:
                    94:5a:92:e5:9f:74:ee:f9:68:f4:a3:c1:13:0e:3b:
                    76:02:50:4b:e8:83:05:49:2a:14:3d:b0:5f:55:2c:
                    74:eb:21:0e:83:71:42:87:18:29:d4:00:05:2c:b5:
                    7d:88:3b:d0:e4:38:2a:00:60:90:10:bf:ba:a9:0d:
                    72:cd:2f:d6:e7:9a:c0:ee:6d:f6:b8:61:9b:cf:50:
                    7b:43:59:8c:df:55:19:f8:cb:50:3c:30:33:b5:f8:
                    ea:48:23:85:95:49:a7:d1:26:3d:e6:db:89:0b:f2:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:C4:2F:3B:74:80:03:5E:23:76:24:5E:52:A0:58:E8:6B:F9:94
            X509v3 Authority Key Identifier:
                keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:57:bf:98:03:3e:a9:be:f0:58:6b:19:a3:31:1d:46:f9:
         c6:57:69:87:79:76:5b:1e:70:ea:53:c3:ab:7d:3d:08:83:73:
         02:f2:7e:44:13:a5:9d:67:e8:80:36:a6:8c:85:2e:2b:5a:69:
         61:a6:95:dc:33:25:e7:10:d7:66:c9:0c:7a:9e:c1:dc:5c:43:
         d5:a4:82:4a:3a:58:15:b7:91:6f:fc:d8:b2:2e:e9:7e:39:08:
         ab:83:4a:db:d2:ed:ef:d4:75:67:80:3f:20:02:a9:28:99:99:
         40:35:88:21:43:0c:1e:8e:26:ca:02:f1:93:46:dd:27:ce:40:
         f4:4c:ce:84:db:bb:9a:68:1e:80:94:6d:17:42:78:e6:47:6b:
         99:29:56:e2:01:1a:68:09:31:af:c6:37:38:1a:41:42:78:b9:
         a1:56:a9:12:ef:ee:b2:69:12:34:e1:53:9f:ca:6d:ae:21:c2:
         12:ac:7d:3f:19:3c:af:06:a7:d2:ab:ff:76:1c:d3:1d:35:19:
         32:77:9e:99:ce:cc:3b:67:73:29:25:64:d0:0f:21:c8:5a:7d:
         89:d4:ba:5a:5a:82:f6:41:6e:00:b1:ad:84:d1:ab:27:1d:c6:
         0a:13:1e:91:a7:3b:ae:75:a1:f4:09:91:c2:3b:3d:29:84:0b:
         aa:ff:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:12:51 2024 by rpki-client on console-fra.rpki-client.org