Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File:                     DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier:          JPLVyEUo7dNU3D7yNan7JSk/QMrnTnK5hweTHB1hD8o=
Subject key identifier:   C1:EC:91:DF:30:1D:D8:6F:2C:F4:B2:FF:BF:3E:B7:73:51:83:04:59
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer:       /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial:       019357D2E11375CAB001AFACA6649CCF030E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number:          087C
Signing time:             Sat 23 Nov 2024 07:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:58 +0000
Files and hashes:         1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: LxjgDAqBZNyDoAmYFXtbubakkISgxFXQBzzkrzDkWBM=)
                          2: RIX8teQ0OhHfcf44Ec89KhiWKio.roa (hash: +aQThLxpVtvERsTfSAP6pwGmoswJVZNwEIifsGFgxDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e1:13:75:ca:b0:01:af:ac:a6:64:9c:cf:03:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
        Validity
            Not Before: Nov 23 07:00:58 2024 GMT
            Not After : Nov 24 07:00:58 2024 GMT
        Subject: CN=c1ec91df301dd86f2cf4b2ffbf3eb77351830459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:01:b2:22:ef:ff:47:f3:e2:c8:6e:a9:65:
                    a7:55:81:fa:66:76:1a:d7:4d:3e:af:1e:d0:57:ea:
                    11:d4:66:d9:e6:8e:9a:6e:95:6d:a8:a7:83:cc:a4:
                    9c:1d:34:32:4c:59:e7:34:4e:7a:9d:40:c7:14:05:
                    d2:7b:94:cd:a5:c6:39:c9:4a:e1:a0:40:bc:6a:6f:
                    08:44:73:2c:02:4c:28:ab:85:c2:c3:e1:1a:03:70:
                    f2:ab:35:c8:d7:32:d9:35:bf:82:b7:5f:0b:d4:54:
                    6e:c9:25:3b:8b:ad:8d:f9:42:31:d9:10:1c:5e:9b:
                    bb:bf:6e:ce:74:d6:65:cc:3c:ce:88:f5:48:07:37:
                    1e:ba:5e:d3:6c:56:21:0f:53:30:0f:65:f0:84:c2:
                    12:24:78:fb:82:e2:e1:22:e1:5e:b3:6e:25:7b:7d:
                    a2:80:3e:57:27:0c:87:b7:ed:51:c0:b3:1e:e5:7a:
                    d0:63:da:6a:ef:da:d7:06:73:61:a2:fd:47:9d:24:
                    4f:be:46:82:cc:a5:d5:86:af:30:ec:1f:67:e0:83:
                    1b:57:43:2b:4f:e4:0f:b4:5a:19:ab:80:62:5a:2f:
                    47:36:28:87:85:e4:e8:41:05:03:bc:7b:fd:13:6b:
                    76:c8:19:4f:6e:8b:eb:6d:ae:71:34:38:3a:23:48:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EC:91:DF:30:1D:D8:6F:2C:F4:B2:FF:BF:3E:B7:73:51:83:04:59
            X509v3 Authority Key Identifier:
                keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:6d:d7:4b:ae:c7:8c:2e:9f:0d:40:44:0d:36:59:30:f8:
         d6:32:75:21:c5:34:a4:99:c0:10:e8:33:9b:f1:9d:de:a3:d6:
         13:e1:a0:aa:22:3b:40:dc:94:93:cf:63:e9:ed:94:ef:7e:07:
         06:d6:35:a8:27:57:90:20:af:f2:0d:16:ab:73:30:9f:23:40:
         df:cf:da:04:72:95:0b:ee:46:a9:94:76:5d:a7:fe:22:67:9f:
         86:01:82:f0:4d:0e:c2:19:d7:75:51:b1:72:e5:dc:50:bc:f8:
         67:ed:ef:30:75:c2:b5:91:44:c3:1a:29:b4:54:27:2e:1b:72:
         d3:d9:23:91:bf:54:a0:1f:72:48:d2:7e:e5:e8:b7:63:f7:b3:
         04:9e:6e:13:69:79:57:1c:a9:d8:23:9c:1c:99:3f:d5:4a:ca:
         19:28:94:46:92:7b:03:27:4c:af:cb:c5:f0:97:a2:40:42:61:
         71:f7:f6:7d:30:bf:50:54:9c:c3:28:21:56:68:48:c1:71:08:
         56:17:e2:31:3b:97:53:30:46:77:b7:3e:c5:98:54:d2:ad:bc:
         e2:61:65:f2:e8:f3:ef:88:b6:64:94:79:3a:41:b9:12:d1:6f:
         3e:48:d2:26:21:04:e2:74:95:fc:b0:83:16:fc:ce:24:0a:f6:
         4f:02:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:24 2024 by rpki-client on console-ams.rpki-client.org