Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File:                     DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier:          sr8bthkkZNPHhxvMBpCmuV/wMpB6GKhUB3NYgFHNx70=
Subject key identifier:   6A:0A:70:0F:DB:E9:21:43:A5:AA:83:1F:68:6F:32:C7:3E:A6:C3:C5
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer:       /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial:       018F4D5A9ABAAA4DAC8332088A2C4C4530F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number:          065D
Signing time:             Mon 06 May 2024 10:02:14 +0000
Manifest this update:     Mon 06 May 2024 10:02:14 +0000
Manifest next update:     Tue 07 May 2024 10:02:14 +0000
Files and hashes:         1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: TXhULttIJuPtWPmkmNAPoirpOLtLRWyKdqFzK+/G/VE=)
                          2: mAKm25Ksm_z8ew6z3xwE12PpnP8.roa (hash: zCJaao9aGvB9C5+dyWqyXR8QH2iC+FEnhef1zrzHPXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:9a:ba:aa:4d:ac:83:32:08:8a:2c:4c:45:30:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
        Validity
            Not Before: May  6 10:02:14 2024 GMT
            Not After : May  7 10:02:14 2024 GMT
        Subject: CN=6a0a700fdbe92143a5aa831f686f32c73ea6c3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:4c:a9:68:79:de:87:07:c0:d9:57:00:0a:
                    61:68:e6:db:b3:1f:90:0a:46:fc:18:34:3c:b8:b6:
                    24:d7:8b:f9:b1:ce:74:50:15:19:a8:7a:33:6d:92:
                    c8:d3:bf:a7:96:28:23:03:af:ff:b0:88:9f:da:ae:
                    dc:b6:bd:d3:00:e1:90:e3:5d:f1:fb:8d:75:71:82:
                    67:1e:58:25:e0:9f:e0:4e:d7:67:e2:35:32:1e:d4:
                    90:19:ce:4e:23:1d:51:eb:f9:3f:60:ae:f7:55:1f:
                    95:e3:3d:55:df:91:c9:3e:65:1b:4c:c5:d6:04:8a:
                    02:2a:fd:47:f4:df:6c:d0:a8:da:46:2f:ea:8c:99:
                    a7:aa:77:2d:2a:76:06:0f:39:f5:10:c3:6f:32:3f:
                    80:90:4b:02:e2:67:e1:07:9b:75:46:ca:ce:ad:8b:
                    26:fd:35:ef:02:38:40:68:4a:bb:c0:65:79:a1:7a:
                    ab:e6:3e:e4:a9:30:41:8c:63:4a:8a:e5:13:5b:5b:
                    31:10:f5:fb:f2:8a:c7:68:d3:ad:fa:35:43:74:46:
                    ec:85:14:e0:dc:37:3f:30:81:63:db:fd:99:ef:26:
                    ad:a7:a9:31:61:b2:04:7c:cc:eb:58:10:69:7c:22:
                    14:5b:38:c7:bb:bf:db:65:36:b7:af:4f:11:8b:df:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:70:0F:DB:E9:21:43:A5:AA:83:1F:68:6F:32:C7:3E:A6:C3:C5
            X509v3 Authority Key Identifier:
                keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:fb:01:43:0e:4e:2f:8b:34:f3:26:2c:f3:ef:13:d4:1b:
         95:ad:90:b1:a6:a2:8e:a5:9f:17:2b:49:fb:aa:81:2d:c0:70:
         83:48:3b:c1:80:7b:b4:80:84:6a:83:7b:03:d3:98:33:f8:16:
         72:e2:37:cf:94:e8:ec:26:61:81:0f:db:4d:8c:57:45:f0:c6:
         02:ad:93:36:51:4f:ba:df:37:4b:e9:fa:c3:09:53:cb:25:8b:
         82:a8:2f:28:0a:b1:33:30:87:72:24:db:ae:a9:37:db:ce:65:
         c7:14:f4:c6:35:ee:7e:8d:eb:5f:26:05:d6:50:f2:90:c6:ef:
         81:a4:b9:f1:ab:77:7e:55:f1:ad:27:f1:5e:b9:0b:f2:db:d4:
         e5:2d:32:47:9d:c4:9d:1e:27:e7:fc:a9:f8:3d:00:e2:bc:40:
         9e:c1:fd:0b:78:18:77:ae:33:63:c6:10:94:31:71:da:35:a8:
         9d:f7:02:65:b7:12:f7:22:9f:d4:e2:a4:6d:06:e4:f3:64:f7:
         14:bf:4c:61:99:ff:9c:47:0c:5e:5a:a0:a9:93:12:68:a9:b9:
         df:e0:a3:54:a1:6d:bb:0d:69:33:20:35:f3:5e:8f:5b:10:6a:
         5d:75:c3:91:cb:4b:ba:40:c9:68:e8:cf:9a:5c:39:8f:a2:5b:
         bc:4b:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:52:06 2024 by rpki-client on console-fra.rpki-client.org