Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File:                     DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier:          QZ8jLQ9WiHrDbxz7AaRBB5vmUg+GRG/R0cdnWkYx8GU=
Subject key identifier:   00:1E:6F:24:67:D9:2A:90:97:D6:A6:FE:71:F9:83:EF:40:09:9B:DF
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer:       /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial:       01940721A4961C67E87C1D42607CB2CE2A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number:          57
Signing time:             Fri 27 Dec 2024 08:00:32 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:32 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:32 +0000
Files and hashes:         1: Cr3DQsjlQ8ahYfB2ii4XV01-PnM.roa (hash: kaD9Lk1QSAEgEXIW8MrWsmqAT5h2NCCK9D/pGCbqCRc=)
                          2: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: 7C8y0B1Pc6Jmvv7WsYEBgqG2m85jU67wPh0WS7NILaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:a4:96:1c:67:e8:7c:1d:42:60:7c:b2:ce:2a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
        Validity
            Not Before: Dec 27 08:00:32 2024 GMT
            Not After : Dec 28 08:00:32 2024 GMT
        Subject: CN=001e6f2467d92a9097d6a6fe71f983ef40099bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:98:98:db:43:44:da:c8:6e:8d:ad:09:d4:
                    1c:67:af:32:4b:e2:01:b1:9a:29:f3:9e:5f:bf:06:
                    9d:ab:47:d5:32:93:ff:78:ee:03:5c:48:5b:ac:45:
                    2c:51:d0:f0:0c:39:1f:ca:4d:bb:81:0b:3c:7f:27:
                    d1:20:d4:c8:de:3e:f2:c8:07:05:91:a5:f7:58:d1:
                    01:5f:0e:5b:e8:80:84:bf:48:c4:b7:ba:0d:f1:ba:
                    a8:8e:a5:1f:b5:40:a6:fa:96:7f:50:6f:2c:e4:a8:
                    09:ae:e4:aa:7e:7a:08:d7:7d:b4:35:51:ea:01:c5:
                    c5:17:59:27:60:c9:37:8a:a3:3c:e3:8c:66:ee:d1:
                    94:a0:cd:30:93:3e:2c:f1:4d:d6:bf:f3:e2:38:7a:
                    57:9d:2b:61:c0:b2:a5:b3:0a:17:e1:be:f5:1c:2e:
                    f5:6d:1a:a4:c8:3e:1c:7f:be:3a:12:4f:b5:5b:dc:
                    5e:cd:76:8b:7e:37:7b:93:3d:9c:c4:9b:8e:d1:1c:
                    e2:c3:f2:7c:03:d5:a5:b1:cc:b5:00:9b:86:86:3e:
                    b0:6a:ec:4f:c6:41:4b:b6:92:34:c7:61:40:d6:3b:
                    19:79:95:b0:72:ef:5e:4c:97:fa:04:fb:07:31:e8:
                    20:0c:b4:22:71:80:c8:ef:76:bf:52:79:95:f4:7f:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1E:6F:24:67:D9:2A:90:97:D6:A6:FE:71:F9:83:EF:40:09:9B:DF
            X509v3 Authority Key Identifier:
                keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:72:ab:76:20:45:f6:cd:7c:64:35:e6:06:5a:fe:e5:ba:
         41:f0:54:c1:aa:c5:b5:9c:04:95:d3:93:50:be:bb:7c:3c:32:
         12:02:f2:59:81:53:28:6c:8c:43:c6:f9:db:01:ff:a5:66:23:
         f8:10:7a:32:30:a6:82:03:6a:91:39:7f:a0:4e:d3:f9:29:7e:
         f5:e5:14:cc:d3:e0:f3:37:fc:57:a0:68:c9:b1:aa:50:39:11:
         93:96:88:43:74:0f:8d:41:b8:c3:74:d5:93:bc:cf:bc:f5:dd:
         62:1b:5f:e2:c7:e0:be:00:e9:27:57:92:48:ed:3b:b6:5e:1d:
         a8:c7:c1:96:b0:25:e8:e1:66:1c:71:c0:46:e3:72:a7:a6:11:
         9e:01:3e:be:82:27:30:a8:57:f5:64:ff:3a:55:46:b8:82:37:
         f4:3e:24:2c:0a:64:aa:df:25:0f:a8:a1:e9:90:52:b0:eb:0b:
         bc:23:77:39:69:a0:79:a8:d6:e6:9e:97:04:9e:0a:8b:66:6f:
         c5:8e:fe:b7:54:78:7b:cd:36:f0:c1:a7:d6:35:73:a3:78:c3:
         ec:70:9c:17:00:6c:8b:99:ab:5f:21:b1:3e:4b:2b:83:24:1e:
         1d:57:48:ba:bd:69:27:b2:ff:40:e9:a8:75:c1:bf:2d:b9:3e:
         d7:30:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:03:57 2024 by rpki-client on console-ams.rpki-client.org