Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File:                     DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier:          K77BxYj1tr0VlVu/S6GpH+meumU58QYFvmndmCyJjAE=
Subject key identifier:   A2:61:67:C8:7A:AF:0D:84:D7:87:44:CC:AD:D1:CC:BD:B6:06:05:55
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer:       /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial:       018F3A0B391E1CC7CFA185DE2A90578B7559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number:          0881
Signing time:             Thu 02 May 2024 16:02:44 +0000
Manifest this update:     Thu 02 May 2024 16:02:44 +0000
Manifest next update:     Fri 03 May 2024 16:02:44 +0000
Files and hashes:         1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: eSNlBhqdoZnXnK0SVPGkJtePIXxnHrgi9n0rGGPjm24=)
                          2: pYTkyE9LtRx6-QdESsl6uTtsWZI.roa (hash: fJi6zmiArkFHhvINFYdf68PpLfoPQkut0YIFsQGI4Fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:39:1e:1c:c7:cf:a1:85:de:2a:90:57:8b:75:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
        Validity
            Not Before: May  2 16:02:44 2024 GMT
            Not After : May  3 16:02:44 2024 GMT
        Subject: CN=a26167c87aaf0d84d78744ccadd1ccbdb6060555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:9a:80:24:93:fb:9c:a2:99:1e:60:5e:45:
                    6c:4d:4b:f5:dd:07:4a:d5:13:48:bb:64:65:86:8c:
                    85:a6:f7:19:90:42:ff:94:dd:d4:74:cd:ea:be:6b:
                    c8:07:1e:c4:1a:86:a7:1e:ef:0f:e7:b5:b8:a5:50:
                    1b:8e:41:31:4a:cb:3f:fa:e3:2f:15:ce:3b:c2:4f:
                    ed:0d:5f:58:41:e8:8a:5b:66:f7:4a:f6:43:fe:7c:
                    63:c3:6a:9e:01:84:cb:a3:b8:36:cd:77:2a:de:ed:
                    73:b2:61:d0:4f:1a:1c:15:f7:3d:a6:f4:23:0d:9d:
                    27:d2:b0:27:b6:ad:6c:ec:3c:55:bb:af:ff:8c:3b:
                    03:e7:49:f7:4d:d9:fb:15:93:be:d4:a0:11:2b:af:
                    0d:76:59:6f:16:80:8b:b1:df:e6:c0:5f:58:07:8d:
                    20:43:0c:c3:46:f2:5f:e1:36:4b:20:00:c2:95:97:
                    d1:d8:35:a2:aa:4c:17:0a:8d:09:89:f4:3b:46:11:
                    49:6b:e1:48:73:c0:a7:5c:98:c6:b3:5b:96:da:55:
                    2e:6f:0a:1d:08:86:dc:52:cb:c8:1d:57:f7:4b:3a:
                    02:94:aa:e2:d2:ab:f0:f9:6c:86:81:11:d3:8a:32:
                    91:d1:bf:e9:a7:98:39:dc:8a:ee:8c:74:46:d2:32:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:67:C8:7A:AF:0D:84:D7:87:44:CC:AD:D1:CC:BD:B6:06:05:55
            X509v3 Authority Key Identifier:
                keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:0d:d0:7a:a1:82:cb:2b:ec:c0:3b:d0:c1:ec:cc:7b:02:
         ee:2c:c5:77:41:17:51:05:55:26:d0:07:ac:ea:d2:97:1a:8f:
         d9:d3:73:54:3f:7a:54:9c:49:8d:42:0f:29:8b:c8:31:a6:53:
         57:d8:de:17:72:08:f7:40:6c:97:0d:71:98:cd:e0:64:d1:d4:
         c8:5a:a1:fa:6d:c3:e4:51:aa:f4:e2:4f:71:4e:e3:42:46:fe:
         9c:12:d3:2c:06:d7:9e:8b:99:79:94:d8:1c:4f:43:a3:1c:f7:
         8c:21:1a:3e:89:7c:c5:b2:12:da:23:13:d1:cd:df:87:a8:ef:
         3d:fe:33:90:28:4b:17:c2:1a:a3:bb:1a:98:d0:54:12:1c:b3:
         04:62:46:ec:f6:a5:15:c7:94:f3:6f:a6:84:2d:82:b2:65:15:
         84:ca:ee:27:65:af:20:7c:d3:14:5e:73:e9:e5:55:02:38:61:
         6c:ef:79:96:f3:b8:2a:8e:18:9c:25:77:29:a2:ec:f8:fd:f5:
         d9:2f:e5:ed:d6:7d:6b:93:44:56:4f:98:ef:4c:3a:3a:1b:74:
         33:5a:ca:fb:56:5a:7a:97:be:0a:09:b2:b3:24:0f:4b:ba:e8:
         53:e0:d4:cb:52:0f:20:62:9c:01:cb:3f:ef:03:fb:76:8e:5f:
         f3:95:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:50:07 2024 by rpki-client on console-fra.rpki-client.org