Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File:                     DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier:          o8B98OKGksEEjcMhvTRVyoVtNT6d+SfutXIucvTb+gw=
Subject key identifier:   C7:C2:0A:A3:F1:5D:14:0C:17:4A:EF:85:78:4A:8B:4B:77:45:DA:51
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer:       /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial:       01936B22BA5E77DCE78FBB1EC2C0B073F77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number:          0C87
Signing time:             Wed 27 Nov 2024 01:00:58 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:58 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:58 +0000
Files and hashes:         1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: H+v1jUsZhc/VIxaVqztkJPjydCeg2s5qbSYw7+w0qB4=)
                          2: ePYCFXeiPtZtfsznThlTguOn4QQ.roa (hash: x7vi5p5A5+swIJ7wSfenY9L+XPLiPoM5/Cdf6bL6K1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:ba:5e:77:dc:e7:8f:bb:1e:c2:c0:b0:73:f7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
        Validity
            Not Before: Nov 27 01:00:58 2024 GMT
            Not After : Nov 28 01:00:58 2024 GMT
        Subject: CN=c7c20aa3f15d140c174aef85784a8b4b7745da51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:23:e4:b6:db:6d:bd:ad:bc:78:50:e3:29:
                    d2:a9:80:dc:a2:75:92:77:6b:17:6c:72:af:dd:f6:
                    cf:16:91:dc:55:4f:4b:2e:7a:7a:20:7f:59:5e:59:
                    42:bb:75:86:ee:1a:08:f2:5b:4e:99:37:44:a9:04:
                    1f:b4:26:fc:dd:03:c7:3c:de:63:5b:07:ab:91:05:
                    89:47:ba:9a:8e:70:c8:92:c5:5b:61:5a:9a:1b:8d:
                    6d:b7:98:58:d7:49:a0:2e:76:37:cc:73:e5:d8:55:
                    0d:4f:7b:a4:e9:8e:44:88:66:46:a0:5e:a5:65:54:
                    b8:83:51:7a:fa:76:16:84:91:1f:61:0a:7e:4a:68:
                    48:af:b4:19:e7:9a:ac:1d:fe:ad:3a:15:8f:75:99:
                    b9:53:57:c8:a8:6d:30:9b:3c:fa:92:c1:36:d8:3c:
                    ed:dc:68:ef:6e:51:a5:e5:9d:43:a1:c5:d1:42:b3:
                    90:4b:bb:ed:d8:89:1a:a9:49:70:b4:ff:c7:b4:64:
                    25:17:1a:11:93:6b:d4:52:d8:6c:47:18:c0:45:ab:
                    d5:9a:b4:c6:0d:06:23:78:9c:14:ea:69:56:96:f1:
                    ad:df:c9:64:50:8d:de:23:09:fc:d2:d0:45:84:bd:
                    68:f8:4e:be:c0:63:9b:5f:5e:f6:7c:63:51:f1:24:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:0A:A3:F1:5D:14:0C:17:4A:EF:85:78:4A:8B:4B:77:45:DA:51
            X509v3 Authority Key Identifier:
                keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:bb:41:5d:c6:b1:3a:90:f1:6c:56:84:a0:63:d4:2f:3a:
         35:f6:54:5d:ba:36:87:77:c4:23:83:e8:9e:ad:70:32:69:1a:
         a4:9d:a6:1a:f1:06:d4:fc:34:72:9a:70:81:a8:11:a5:00:3b:
         a0:97:19:6f:ef:35:d0:4a:9f:ae:fa:db:6f:61:f1:b0:4d:00:
         f6:f4:20:39:c3:47:dd:aa:80:5b:06:78:2f:d1:dd:63:83:2b:
         00:e8:83:e4:2c:91:ad:1a:a5:45:06:38:80:39:b5:1a:87:7a:
         a8:78:9c:7c:dd:86:1f:a8:af:51:a4:e3:26:73:2a:72:45:03:
         d0:11:9c:b7:ec:38:c0:da:d4:9d:c3:8f:a0:35:7b:72:ea:c1:
         0b:e5:48:2e:d6:64:80:b7:2c:33:54:3f:58:29:9e:dc:f7:0c:
         47:4e:8c:58:df:88:99:cf:8b:5b:78:10:3b:09:d5:fd:88:bb:
         fc:5e:12:da:be:55:92:4c:7b:b5:3a:5b:2f:1b:c5:6e:8a:1a:
         cb:56:58:49:22:9d:4b:75:5e:0d:4f:05:66:c7:c9:ab:54:fd:
         b1:bf:7d:97:71:8e:c2:23:34:38:0d:a5:7d:e8:c4:a4:33:ff:
         7b:2e:80:77:8c:7d:61:77:86:46:c4:32:ff:d2:80:89:e1:af:
         75:13:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:45 2024 by rpki-client on console-fra.rpki-client.org