Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File:                     D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier:          sl02YX8zLNvHMzpWJX4nElkRUcDuUfsuxAlyVB4vaBw=
Subject key identifier:   09:FB:E1:6F:D2:0B:54:CC:95:37:D8:A7:4D:BB:64:2B:87:46:76:8D
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer:       /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial:       018F22DF7CFF10450ED3987DDA020BA273B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number:          1032
Signing time:             Sun 28 Apr 2024 04:03:42 +0000
Manifest this update:     Sun 28 Apr 2024 04:03:42 +0000
Manifest next update:     Mon 29 Apr 2024 04:03:42 +0000
Files and hashes:         1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: pSKr85q+rfV/L79Aghl0tuZ5X8ZdEqJFuiUEvvndiVQ=)
                          2: FTqmlFMxWKN_VKjCbBPQT1I1zEE.roa (hash: 8tEjwq4dZuPYvckFOIS70Hxj9s+8qSEEsK0rGSytwBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:df:7c:ff:10:45:0e:d3:98:7d:da:02:0b:a2:73:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
        Validity
            Not Before: Apr 28 04:03:42 2024 GMT
            Not After : Apr 29 04:03:42 2024 GMT
        Subject: CN=09fbe16fd20b54cc9537d8a74dbb642b8746768d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:5c:c7:30:35:5f:16:ef:89:e4:62:ed:26:
                    13:ec:d3:50:c5:46:0e:23:c7:9c:f3:fb:63:4b:c2:
                    21:d7:1d:f4:5a:1d:5e:bb:a4:63:d6:0e:e2:73:3b:
                    92:b9:da:05:4b:90:d2:68:73:3b:46:6e:5f:e2:7c:
                    2f:c9:c3:2d:29:03:74:70:fa:ea:18:bc:5f:ba:f2:
                    b4:0a:e8:53:8c:c8:68:83:d2:c1:b7:27:d6:a4:8d:
                    f6:c8:41:13:40:1b:7d:96:6c:4c:5c:f6:da:6e:b7:
                    5c:0c:63:1d:54:61:c0:a0:db:2e:db:69:35:5c:39:
                    b8:aa:3d:66:68:cb:31:32:52:df:37:ca:9b:d6:b1:
                    0f:3f:af:73:02:dc:d4:5d:2d:83:31:62:95:34:fb:
                    6e:6e:47:12:6a:b3:2c:02:f4:8a:6d:ca:f7:2f:e4:
                    02:89:34:6e:7c:a3:c1:45:d7:e4:bf:a0:c7:3e:22:
                    1f:af:50:85:00:f9:e2:cf:2e:5d:dc:f3:eb:c3:46:
                    b9:08:85:c4:f8:2e:e3:80:c7:36:c6:bf:c9:09:c5:
                    b2:fc:59:8a:26:8c:5e:a9:d2:02:82:c0:9e:6c:cc:
                    f8:54:50:39:ef:84:9d:87:d3:0c:2c:c5:c0:0c:a0:
                    58:17:60:b6:c9:37:fe:fe:f3:aa:75:f5:c8:29:04:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:E1:6F:D2:0B:54:CC:95:37:D8:A7:4D:BB:64:2B:87:46:76:8D
            X509v3 Authority Key Identifier:
                keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:83:6c:e1:31:b9:53:eb:ce:13:01:16:98:b4:28:df:c9:
         91:28:f6:6e:57:51:ce:b9:e6:24:19:06:c1:65:d8:9b:8a:85:
         7f:5d:35:98:13:3b:27:7d:2c:3d:0c:83:5a:33:f8:d0:bc:a1:
         75:9d:f7:72:26:ac:3c:f6:18:f5:4a:d3:11:1c:b8:e3:4e:31:
         e9:25:59:89:8d:7e:c8:6d:fd:0a:3d:de:07:8d:c6:3d:81:ea:
         10:3a:b6:87:dc:28:e2:ae:ce:0f:8f:96:6f:18:a9:39:9a:03:
         37:30:90:e9:5c:11:c1:17:89:d5:27:60:e3:6d:2a:8b:81:fa:
         6f:40:90:22:08:36:e0:d9:f0:56:8b:a1:fb:a7:62:9c:b6:99:
         5e:ef:5b:15:13:cd:c8:5f:41:da:69:3a:dc:c4:e9:ef:92:59:
         c6:dc:f1:e4:b9:7f:0b:38:14:86:f8:c1:4b:03:54:e6:24:36:
         54:e1:98:64:de:6f:ca:4f:7f:70:be:f5:27:0a:c9:b2:1b:ed:
         9d:55:49:b0:cc:71:46:ba:57:fd:f1:a5:b8:1e:c2:92:27:15:
         14:34:ae:5f:cd:a6:e6:2e:85:e3:79:db:b8:d2:55:0d:36:47:
         df:b7:48:94:50:81:e7:c1:35:4a:11:ab:18:24:e0:49:09:77:
         1b:5d:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:59:46 2024 by rpki-client on console-ams.rpki-client.org