Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File:                     DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier:          taipfaSXXVVbeR4EhI0hDioSwWd8dELQa12jPZEK4oU=
Subject key identifier:   7E:10:C8:7C:7E:61:76:BE:59:10:F8:6B:14:D4:B2:1A:3D:DA:F8:14
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer:       /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial:       018F513898BD90CD00D714FA5A1AEE754E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number:          0A84
Signing time:             Tue 07 May 2024 04:03:34 +0000
Manifest this update:     Tue 07 May 2024 04:03:34 +0000
Manifest next update:     Wed 08 May 2024 04:03:34 +0000
Files and hashes:         1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: rYPq6yW5HeioDJq6fikhIqmOihCRk1YOUCks01GpPo8=)
                          2: wCcTjDuqoN-DJ1sYunMef5Qaa78.roa (hash: ZPfrcuOtSZLTNj06rQvS/LKuC0YzTSeizUqEqYZMsVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:98:bd:90:cd:00:d7:14:fa:5a:1a:ee:75:4e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
        Validity
            Not Before: May  7 04:03:34 2024 GMT
            Not After : May  8 04:03:34 2024 GMT
        Subject: CN=7e10c87c7e6176be5910f86b14d4b21a3ddaf814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5c:dd:39:fd:bc:c0:14:fd:ae:70:b2:68:f5:
                    2b:33:d9:45:a1:1b:f9:17:c3:b8:ea:92:9f:94:82:
                    9b:19:3e:f4:8c:15:9c:f5:87:71:ae:5d:f3:94:04:
                    72:7a:3b:33:1f:ba:a5:99:77:2c:55:81:43:1d:01:
                    b7:84:50:7f:90:ee:b7:fb:32:df:c1:f9:5f:aa:7a:
                    7b:6d:0c:9d:9c:a1:bd:80:d9:75:df:c7:54:e2:f9:
                    c0:ef:d5:46:96:27:85:4f:5e:ba:61:62:21:c1:6e:
                    8e:85:d7:6b:36:2e:df:64:39:3c:09:e6:38:0e:40:
                    dc:cb:52:7a:16:de:ce:77:e8:a7:e4:6c:97:01:6d:
                    ea:9c:af:07:73:b9:ed:2d:17:cb:b8:29:e0:04:bb:
                    47:c2:ab:4d:64:ae:d6:5d:e4:24:64:0c:46:bc:e7:
                    c5:22:d3:e3:5d:b2:4c:ec:90:24:02:bf:d1:6f:5b:
                    5a:6e:7b:d3:b0:1d:d0:17:1f:c7:5f:34:26:21:41:
                    63:f3:49:a6:19:83:e3:f6:e0:73:77:77:ca:8e:b2:
                    c0:95:9d:a3:8b:e5:17:c3:31:73:bb:85:b6:bd:63:
                    06:7b:21:45:64:44:9c:d9:5d:32:42:d0:ed:ea:88:
                    12:8b:81:48:95:e8:32:76:26:1e:54:0d:44:95:91:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:C8:7C:7E:61:76:BE:59:10:F8:6B:14:D4:B2:1A:3D:DA:F8:14
            X509v3 Authority Key Identifier:
                keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:03:66:e4:f6:95:74:36:f0:44:67:d4:a9:ec:bb:e6:36:0c:
         c7:58:2f:1f:f2:51:d8:f9:29:29:e8:d6:a7:b2:1d:19:38:14:
         a8:89:13:0c:f8:09:9b:84:84:ea:98:d7:9b:e7:13:e6:94:44:
         94:50:b4:47:69:99:38:12:c1:94:ea:0b:97:c8:a0:4f:6c:3b:
         b8:cf:1e:66:20:bc:2b:63:a0:74:e6:1d:3d:50:c0:f9:a8:3b:
         93:8f:98:b1:0e:b8:58:16:84:79:13:cc:d3:5e:b8:fc:53:5f:
         c3:37:56:40:fb:8b:66:90:a9:42:a8:ea:42:8f:ba:93:ab:95:
         76:9a:a5:b8:f8:0e:65:25:10:a5:bd:ed:84:6f:b9:cb:be:8e:
         f0:38:bb:fe:0a:f8:4f:63:05:43:cb:d8:f0:7c:80:c9:ab:ae:
         17:42:65:27:70:de:93:bb:ae:1c:5c:50:84:a9:9d:e0:3e:3c:
         d7:2a:29:58:fd:d9:e3:d4:4a:c8:b4:38:c2:d0:ba:c0:f8:60:
         96:31:b5:bf:22:54:8b:bb:ca:6b:ba:a2:35:9f:2e:db:eb:00:
         ef:c2:4b:a5:2b:d1:e5:d8:c2:f3:cc:82:39:f3:d1:35:f4:f4:
         6f:c5:00:bc:74:b9:5d:6d:74:d7:89:0c:a1:0c:fc:ca:e9:07:
         7e:50:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:14:39 2024 by rpki-client on console-fra.rpki-client.org