Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          RCAup57I/X7FQfIZ/DlAMpy53KPvD0hVy052xe+f1rY=
Subject key identifier:   A3:16:0A:C9:11:EF:B7:1D:23:FD:C7:47:1B:07:A4:01:1E:05:99:55
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       018F3A0A9AD046948873477C59C88E1C507E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          045D
Signing time:             Thu 02 May 2024 16:02:04 +0000
Manifest this update:     Thu 02 May 2024 16:02:04 +0000
Manifest next update:     Fri 03 May 2024 16:02:04 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: ddjdLkfXJLGQT7IkzESzJkoHm/5Es1Ai7Vs8yYjjVfM=)
                          2: YG8gGKvgybLhSUzMA-4JIOw0crA.roa (hash: yqXlr4Nq996/MSta3ADMhCNmvq03TzCrDeMZHoPsRWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:9a:d0:46:94:88:73:47:7c:59:c8:8e:1c:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: May  2 16:02:04 2024 GMT
            Not After : May  3 16:02:04 2024 GMT
        Subject: CN=a3160ac911efb71d23fdc7471b07a4011e059955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:5d:60:9f:51:10:e3:96:1d:6c:39:51:91:
                    1c:ff:50:e5:79:4d:6e:71:c8:47:91:29:48:0f:b0:
                    7f:89:b2:39:c6:79:84:f7:20:ff:68:26:e8:30:9a:
                    63:65:85:93:01:d6:24:c2:43:82:a8:53:eb:f3:13:
                    26:5d:28:02:44:84:91:6b:ee:78:cd:e2:45:0a:a7:
                    25:85:4a:28:8f:c2:2c:c4:51:1a:0b:b8:85:68:25:
                    a7:af:35:a5:42:eb:7e:9b:f3:ff:a2:2d:c2:9b:f6:
                    fd:00:af:ac:2c:f1:c0:f0:d6:0b:f2:31:40:4a:0c:
                    70:23:28:15:c4:24:40:34:b6:99:be:82:08:2a:64:
                    ee:19:c8:7b:95:f9:51:83:a7:bc:5c:4b:72:3c:cc:
                    90:7b:ff:f7:48:a4:36:89:85:0f:04:66:42:6d:d6:
                    dc:58:ce:ae:99:8d:16:aa:ce:69:a8:13:b4:68:35:
                    4a:5d:2b:3e:ea:64:d9:7e:ba:55:d3:0a:be:b3:1e:
                    c2:8a:8c:f3:e8:cf:d4:a7:46:08:da:9d:2f:0b:5d:
                    80:c0:e1:c1:c1:06:a4:ca:f3:43:f1:96:5c:25:b3:
                    d4:fa:69:fb:46:ed:88:7e:46:75:8b:a4:88:64:3d:
                    05:93:e0:21:4d:39:29:46:f5:80:96:0c:7e:13:fb:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:0A:C9:11:EF:B7:1D:23:FD:C7:47:1B:07:A4:01:1E:05:99:55
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:05:37:33:66:e0:8f:68:95:0c:15:a9:98:0a:25:42:3a:
         80:7e:28:b2:4b:2a:c6:a5:4b:6e:ee:3e:60:8d:f2:e0:61:50:
         0b:9a:c1:18:9c:15:0d:c2:c7:c4:84:40:44:bb:4d:a9:22:21:
         48:b5:82:9d:73:d2:90:94:18:94:ed:f9:af:66:ca:98:2d:79:
         6c:ef:34:9d:5a:c3:ef:99:f8:50:b9:4c:90:e3:db:1b:b2:91:
         51:f3:4f:b6:26:a7:0a:7f:8f:fd:9b:f9:60:60:66:07:cc:2e:
         58:a0:8a:9c:e5:6d:b5:29:63:41:6b:12:a4:de:98:8e:e2:55:
         a3:8b:b7:a3:8c:87:3a:ba:28:9a:97:eb:0f:d1:81:e6:a9:ea:
         94:74:f1:c6:9e:48:54:45:a6:16:2e:5c:0b:3a:74:b8:8c:3e:
         9c:95:0a:96:c7:5c:30:8b:75:cf:d6:26:5c:b8:0d:7a:74:9f:
         16:7d:8e:a0:34:54:e4:51:5b:14:c6:e0:91:a7:c6:fc:5a:b6:
         c9:fb:0f:3c:02:70:5f:b0:0f:bc:3b:f3:49:46:8d:ad:b2:ec:
         ca:02:75:24:fe:d7:7e:9b:3d:5f:d6:f8:10:33:f0:27:45:9a:
         e5:7e:91:9f:01:12:c9:f9:95:45:84:f6:d7:43:84:d8:eb:1e:
         b3:5b:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:14:11 2024 by rpki-client on console-ams.rpki-client.org