Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File:                     DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier:          6fL/4McwJGJPc4nznJdBAdQ+p0GJYRyhKUgXM1AYwzg=
Subject key identifier:   E7:5B:06:44:A3:13:78:E1:82:9D:33:42:3C:59:9A:67:4D:AF:CB:57
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer:       /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial:       018FB23343BD700F2D82406AA8ECAC2B572F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number:          0D29
Signing time:             Sun 26 May 2024 00:00:55 +0000
Manifest this update:     Sun 26 May 2024 00:00:55 +0000
Manifest next update:     Mon 27 May 2024 00:00:55 +0000
Files and hashes:         1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: X7nb07Oo93twJWEVcaW39KHqkUSHNoiB2l3XlqKBBVg=)
                          2: p4nzSOzSJZwkCR5OhxObKeJtff8.roa (hash: BLOHxxxFX1/szISnrb8lMWcSL99PMalV8m0zR0Ic6jY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:43:bd:70:0f:2d:82:40:6a:a8:ec:ac:2b:57:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
        Validity
            Not Before: May 26 00:00:55 2024 GMT
            Not After : May 27 00:00:55 2024 GMT
        Subject: CN=e75b0644a31378e1829d33423c599a674dafcb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:a8:b8:da:22:fb:3a:90:68:5a:54:7d:18:
                    43:a8:25:10:6a:2a:c2:a0:07:72:e3:65:35:ec:6c:
                    58:46:78:cd:8c:42:e3:8c:aa:60:82:d2:14:a4:ee:
                    27:11:bd:21:e4:7d:aa:3b:e2:f0:83:3f:22:91:b4:
                    45:ce:41:34:c2:18:81:9c:62:ed:e1:08:9a:8c:90:
                    5d:9b:1a:d2:8d:ce:c3:1d:41:bf:f5:63:4d:60:6a:
                    d6:39:fa:88:a6:4d:2b:24:c3:9a:c7:d5:94:c9:f3:
                    5a:6e:df:0e:68:13:7f:64:8b:14:b5:82:0d:46:50:
                    c8:a8:de:cf:e6:7a:bb:46:f3:84:6c:d7:3e:96:79:
                    3c:a0:46:78:cb:67:6d:80:25:16:43:4a:70:10:16:
                    23:5b:a6:7e:70:62:6c:18:10:90:d3:46:5f:f9:54:
                    29:bd:9b:ed:a7:ce:33:dc:2c:6e:f4:9d:8b:c0:64:
                    6c:76:43:59:ca:94:12:f3:b4:09:1d:93:e2:31:f5:
                    61:70:3e:c8:36:1c:11:2f:67:f6:50:4b:48:93:f4:
                    17:87:2a:4d:ee:8a:a3:c1:24:dd:b6:c6:ed:71:cf:
                    71:7c:3b:ee:5a:d3:13:b2:c1:6b:5d:6c:18:86:bb:
                    33:cc:7d:70:3b:69:71:77:5d:26:94:8f:92:82:de:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:06:44:A3:13:78:E1:82:9D:33:42:3C:59:9A:67:4D:AF:CB:57
            X509v3 Authority Key Identifier:
                keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:6e:4f:f3:26:3b:78:a1:11:d3:66:d6:44:92:b6:8a:17:
         c5:0a:c2:6c:28:54:81:81:4e:e7:f2:bb:06:11:bf:65:41:a2:
         7a:24:b3:b1:a4:55:8a:0a:dc:09:0c:48:07:9c:78:af:ff:2c:
         6c:b1:44:aa:ff:1d:60:84:a8:cf:4b:57:7d:2e:5a:cd:5f:f9:
         5e:2b:e8:c7:2f:66:e0:91:ed:cf:38:7b:1c:59:f1:b9:5f:3d:
         30:52:3f:a5:a1:4e:aa:7b:1c:21:bf:1a:65:90:0d:ed:64:bd:
         d9:7a:67:5f:10:bc:40:52:25:d0:c9:b9:b9:ef:a3:80:e7:fd:
         48:7b:f4:82:15:98:02:a1:81:6f:b0:13:6b:68:b3:61:01:88:
         66:09:ac:a4:b9:97:4d:c9:73:10:67:e3:05:3a:a0:1e:76:9c:
         b8:e4:6f:df:2f:23:83:00:cf:aa:c4:b1:e3:50:60:15:a1:2b:
         ff:6d:25:90:6c:26:17:82:a0:2a:89:37:52:d9:da:53:66:eb:
         11:68:7d:e3:26:89:50:bd:de:73:8d:0c:57:50:5b:09:f1:d7:
         f5:7d:71:c4:7b:6a:7c:60:e0:84:8b:01:4a:d6:58:08:3b:37:
         bd:81:78:67:c4:d9:89:b4:d0:85:33:5d:ef:04:f8:da:ac:e0:
         73:26:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:49:21 2024 by rpki-client on console-fra.rpki-client.org