Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File:                     DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier:          xnDQOaQ9hw+fUbURQywYt5k697BHLmrqw5XKfrB4ncA=
Subject key identifier:   69:7E:06:D8:70:EE:8F:0A:80:F1:8B:10:5B:77:5F:0C:4C:A9:A4:19
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer:       /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial:       018F4644F36EA82722E1575DA0642E09CF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number:          0E6D
Signing time:             Sun 05 May 2024 01:01:14 +0000
Manifest this update:     Sun 05 May 2024 01:01:14 +0000
Manifest next update:     Mon 06 May 2024 01:01:14 +0000
Files and hashes:         1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: qhqHImDZdanX+EBIssCQtjKlEgIwWJ6HkHbyXORJL9A=)
                          2: JYYEhwESiYOujsnZhNvoW2ejP0A.roa (hash: 4wvssMi5Tv+ec6ln103qa1/bjSyN8ShwoSIJgpuphT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:44:f3:6e:a8:27:22:e1:57:5d:a0:64:2e:09:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
        Validity
            Not Before: May  5 01:01:14 2024 GMT
            Not After : May  6 01:01:14 2024 GMT
        Subject: CN=697e06d870ee8f0a80f18b105b775f0c4ca9a419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:df:44:29:30:f5:90:56:80:03:54:c5:db:
                    c2:c0:6e:9e:3a:90:02:35:62:3f:65:4d:5f:70:6b:
                    74:b3:a3:c7:4e:3b:26:82:3b:55:d6:18:d2:7d:1a:
                    45:ac:a4:e7:fe:59:23:fd:0e:5d:55:8f:78:72:62:
                    af:7d:97:08:c8:24:05:cc:1b:ee:ac:66:30:f9:0e:
                    c8:16:35:14:46:f3:b6:d2:61:60:2b:69:d4:91:6a:
                    dd:79:7b:f9:e2:e1:4c:32:d6:03:b7:01:30:47:60:
                    13:f8:5c:54:37:6f:19:c0:57:c6:d9:18:82:1c:f5:
                    90:2f:99:24:60:0f:63:6f:31:b6:9a:08:3e:e9:44:
                    2e:7d:cd:d8:fc:df:48:b9:31:96:9b:c3:04:a1:cf:
                    56:83:e6:7a:0e:94:0b:a7:13:3b:50:e5:fb:3c:2c:
                    9e:a5:a5:ee:48:7e:6f:90:b6:ac:20:9d:74:50:1c:
                    74:f3:07:23:9d:6a:a7:cd:49:71:cb:1f:46:2d:9c:
                    5f:6a:ae:86:f0:fb:77:59:65:ad:16:f8:23:6d:ca:
                    d6:92:d9:d5:dd:1b:62:93:68:7a:05:b9:63:2c:f2:
                    2f:83:ca:71:b6:ef:5d:4f:01:42:ca:3d:14:73:40:
                    fb:7a:31:50:8d:12:dd:f3:bf:94:dd:af:3a:8b:62:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7E:06:D8:70:EE:8F:0A:80:F1:8B:10:5B:77:5F:0C:4C:A9:A4:19
            X509v3 Authority Key Identifier:
                keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:ad:61:2a:37:b6:a1:44:76:31:0a:b6:ab:fa:b1:17:41:
         d7:26:77:5b:97:7b:fa:0e:4f:4f:1a:5c:5f:85:48:c0:ac:3b:
         19:a3:b1:79:fe:9b:f5:42:0c:79:b0:c7:d5:ed:75:20:30:8d:
         3d:db:42:6b:87:5a:18:83:e3:4c:8d:2a:7d:68:10:e6:8a:11:
         6a:b9:00:86:d3:50:01:71:06:e9:54:f5:09:65:b1:64:d6:e7:
         55:ce:7a:71:65:4c:a2:6b:f3:ce:2b:9e:fd:c8:af:15:76:48:
         28:dd:d6:d4:a2:7e:08:24:d9:e5:e1:6e:c8:4c:f3:25:eb:77:
         82:de:c3:88:08:dc:68:0f:da:54:d2:05:a5:db:29:89:cb:a5:
         ac:bb:9c:ab:d3:77:6e:a5:39:a2:21:45:e9:c7:d0:9c:f2:b5:
         88:60:6e:00:c8:4b:1c:64:51:a6:31:5d:df:5e:35:2b:a1:e4:
         89:a8:8e:9b:c2:fd:c4:13:d4:ab:5f:51:7e:ef:81:93:51:82:
         c8:d7:fb:22:ef:6d:7a:ea:a1:d6:e1:cd:fb:a4:55:b3:d0:f4:
         90:69:38:c8:3c:09:5f:70:bf:98:06:a9:47:8d:70:ee:16:c5:
         0f:b1:00:43:15:0c:e4:83:56:d3:db:fb:d6:a0:93:5e:c5:1f:
         cf:ba:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:45:17 2024 by rpki-client on console-fra.rpki-client.org