Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File:                     0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier:          R7R+36LTZOegCLnp4NSY38y3uhRMtnc36iQg9RHEkpM=
Subject key identifier:   56:D8:EB:E4:A4:23:CD:47:E8:E4:CC:C4:8A:75:8E:41:C3:77:15:42
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer:       /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial:       019020EBD4794977F0A354D6480F5B01765D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number:          0B05
Signing time:             Sun 16 Jun 2024 12:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 12:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 12:00:44 +0000
Files and hashes:         1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: 9X86rOmJzNED/20fgCMoCNUEATMfVCLqTZHCBmdnE78=)
                          2: 4y3lxQEK81LmErjX2rgCb6ojqI8.roa (hash: XGNVQNH9/qJQt4cwKvz5vu//ujRffbssMgquK4RXB0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:20:eb:d4:79:49:77:f0:a3:54:d6:48:0f:5b:01:76:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3277a239664d245becf4214dde15923042a142f
        Validity
            Not Before: Jun 16 12:00:44 2024 GMT
            Not After : Jun 17 12:00:44 2024 GMT
        Subject: CN=56d8ebe4a423cd47e8e4ccc48a758e41c3771542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:7e:92:1c:af:07:13:8c:ae:4d:1a:6c:e0:
                    bc:72:c6:ec:0a:2c:d6:57:11:4d:5b:33:99:64:3d:
                    ec:cf:8e:8d:a7:77:d7:c4:e7:ce:3e:7f:f7:58:6b:
                    5f:a1:48:ff:05:d9:0f:6c:b1:59:37:e6:ba:cd:3a:
                    50:a1:a2:42:ce:71:34:22:0c:f0:08:97:fe:68:74:
                    1b:78:84:51:71:87:84:4e:12:60:61:75:30:92:9d:
                    08:85:91:fb:ec:d1:af:ea:46:0e:ce:a7:fd:56:2b:
                    1b:4c:9f:77:1c:58:72:b9:9e:fc:b4:10:20:0a:be:
                    80:42:da:61:55:f3:5b:a8:67:f7:23:45:47:b3:70:
                    9d:61:51:c2:45:24:49:a0:59:30:3a:74:92:1c:bb:
                    0a:a5:99:b0:84:51:16:8f:df:ea:8c:7b:b1:3b:90:
                    75:f6:0f:2a:f1:e5:fc:f7:40:87:a1:d1:e4:d2:e8:
                    18:8b:99:92:f0:c5:bc:7e:d8:02:f6:5a:3f:9c:7e:
                    75:b5:41:55:73:1b:23:59:59:b0:37:d9:4f:bb:8c:
                    12:07:6d:81:94:e5:f7:8f:0e:15:bf:9b:51:25:da:
                    ae:34:fe:e4:dd:bf:fa:f7:65:d5:7c:77:81:7d:74:
                    58:94:d5:bf:64:56:de:59:45:a4:df:11:e6:fa:ab:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:EB:E4:A4:23:CD:47:E8:E4:CC:C4:8A:75:8E:41:C3:77:15:42
            X509v3 Authority Key Identifier:
                keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:76:be:59:17:55:97:d3:8a:92:5e:9d:64:2f:48:0b:b5:
         99:60:2b:2b:59:4c:25:cb:3b:70:7b:d0:42:18:fe:37:97:02:
         87:73:21:a1:4d:5e:12:0a:ec:71:c4:20:74:8f:0e:8d:60:ee:
         36:a1:ac:cf:a2:7d:ff:6a:71:be:79:f3:79:8f:c2:6b:47:c3:
         ac:e3:c2:57:7a:64:6f:70:d2:60:4a:a8:b6:50:19:e6:db:3e:
         00:fa:99:f3:af:e5:05:ca:d0:89:eb:48:4c:7e:d6:79:22:6e:
         e5:36:eb:eb:c4:c4:48:4e:3c:8a:65:c0:f6:55:07:8c:c9:d9:
         8f:e8:5e:f7:e2:ba:d7:75:63:c5:67:d9:9b:72:8b:20:12:d4:
         56:f3:cb:ae:8e:a8:29:6d:18:d7:77:c0:ec:97:19:ee:71:46:
         0e:96:92:6e:fa:f9:e0:3f:90:1d:72:af:99:1b:62:29:1b:3d:
         f1:77:e6:d7:53:74:af:8e:51:2a:61:5e:1a:db:65:68:76:31:
         ef:04:c7:2a:f2:99:85:41:64:a1:b7:67:d2:88:89:e4:e8:34:
         82:14:b7:cd:13:7d:bb:0f:e0:50:1f:1b:0f:e4:4f:77:1a:22:
         b3:7d:46:b9:5c:a0:c8:98:3f:0e:eb:42:44:c9:c5:d6:0a:ad:
         4a:bf:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:02:45 2024 by rpki-client on console-fra.rpki-client.org