Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File:                     DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier:          9R2iH4/zvQyivdrBE2qdWGGIWwNdLbgO7ozvYxY3wK0=
Subject key identifier:   FF:9D:EB:74:C5:28:C6:FC:11:2F:B5:51:EE:77:76:80:9C:BD:2C:72
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer:       /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial:       018F46EA156E928CD514E8EDA828764ADB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 04:01:37 +0000
Manifest this update:     Sun 05 May 2024 04:01:37 +0000
Manifest next update:     Mon 06 May 2024 04:01:37 +0000
Files and hashes:         1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: Ta1RH2BpJut061LCYy/tF8Tdqoy+VA+d2XnJxYyNMS0=)
                          2: Id8c8XTEpBEaBogF4ph1ZHd9dLc.roa (hash: aH0v0T2/HkIK2OuYX4iMr5dnlF13/9+CuSUPeAKBvWE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:15:6e:92:8c:d5:14:e8:ed:a8:28:76:4a:db:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
        Validity
            Not Before: May  5 04:01:37 2024 GMT
            Not After : May  6 04:01:37 2024 GMT
        Subject: CN=ff9deb74c528c6fc112fb551ee7776809cbd2c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:40:01:da:84:ad:4b:89:06:07:a4:6d:dd:
                    48:24:fa:4a:9e:78:04:71:2c:d4:8d:3f:1a:35:4a:
                    de:26:9c:d3:29:2c:a3:41:d6:a9:59:db:ee:54:49:
                    e2:4f:6c:6a:4b:f1:10:3d:1d:ad:69:b3:14:bc:7d:
                    f5:54:a6:94:a5:6c:53:f8:e1:be:41:58:c7:c8:76:
                    a1:59:f4:52:18:63:81:77:c5:e0:e6:96:6e:1b:10:
                    8c:75:ec:7b:54:8a:b6:da:5f:6e:6d:8a:53:50:77:
                    94:01:92:e8:af:66:91:5c:3b:d4:1d:bd:69:00:a6:
                    2b:d1:46:9c:43:25:96:01:dd:16:86:f4:22:1f:fc:
                    48:51:ba:a5:8a:8d:87:fb:53:84:5f:c0:86:d3:48:
                    ed:9f:5d:93:0c:78:6c:60:d5:1d:de:72:0a:e0:e0:
                    15:34:09:02:a1:38:2d:1b:25:5b:66:6c:d9:e3:f5:
                    3b:04:4d:cb:35:90:89:fc:3d:d0:f3:b3:1b:60:65:
                    1c:d4:4c:a9:0f:51:53:51:1b:a6:40:43:f3:b3:f1:
                    dd:93:d2:4a:e9:90:00:36:ca:00:bd:a1:da:de:86:
                    1b:e4:99:46:6b:0c:98:a5:3d:40:0d:c7:86:89:55:
                    d8:6c:7c:70:35:85:b2:ca:fa:34:bc:ce:af:cc:bb:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:EB:74:C5:28:C6:FC:11:2F:B5:51:EE:77:76:80:9C:BD:2C:72
            X509v3 Authority Key Identifier:
                keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:14:1a:2e:68:3f:22:a5:4f:36:cb:04:06:ad:51:47:d7:6c:
         12:54:65:43:48:b7:fc:cb:f2:ff:83:f1:34:72:3c:39:e1:11:
         5e:69:f9:32:8d:ee:2f:a4:5b:09:fd:e9:5b:97:7e:a1:c2:53:
         73:ac:e2:8d:64:60:24:38:e5:b8:55:28:16:d6:08:0a:0d:c5:
         e9:d1:22:65:73:51:0e:2b:cf:fc:c8:cb:0b:e2:eb:d4:26:fe:
         20:4e:c3:69:f9:e0:03:c6:1a:73:ec:47:85:04:cc:d3:15:01:
         8e:af:da:c9:3a:51:0f:48:3a:77:62:d1:18:82:b7:75:36:56:
         26:99:da:9c:3c:2e:d3:55:3c:4a:f7:c1:55:12:07:a5:0f:cd:
         61:be:ed:96:85:05:86:32:bc:da:88:ee:4a:4e:b9:e3:30:87:
         05:40:56:c9:59:85:13:2f:a8:bb:64:50:7e:18:68:d6:28:d6:
         96:aa:a3:b7:d2:db:39:a8:8a:40:31:79:97:89:e1:45:87:f8:
         50:9f:d2:bd:25:c0:11:89:9b:0b:7e:ad:b1:35:36:8c:d5:7b:
         59:f5:07:a2:53:f3:8d:44:02:29:f5:56:29:c9:3b:ce:e1:0a:
         f1:7a:54:b9:f7:1b:32:c2:3a:b7:bd:29:45:53:81:5e:1b:f8:
         cc:1c:b4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:10:13 2024 by rpki-client on console-ams.rpki-client.org