Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          BCsoKx/erlVsbQmS41XSeo3uD0SCfE1+b2Elb5u/5PU=
Subject key identifier:   9C:09:DD:39:6A:B6:69:D3:50:BA:EF:C8:0A:F8:5A:D5:12:D5:91:0E
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       018F3889418D0CB8E6778871249A9E86511E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          10E4
Signing time:             Thu 02 May 2024 09:01:10 +0000
Manifest this update:     Thu 02 May 2024 09:01:10 +0000
Manifest next update:     Fri 03 May 2024 09:01:10 +0000
Files and hashes:         1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: GDGETBTcOAROp6w0J7ywUbantJPPPAjGhxlc++V+UWw=)
                          2: RkN-Cptr3YHJisX16E1DVbKdi7U.roa (hash: Lbeldsj6jmiGeOyBgNj8hwIsbFowUtjZFQ4TaIwlf+s=)
                          3: p8DP7BTJXsLkekkZ0H9CGtIycbI.roa (hash: lWRbxzUszwEkvQex3O5FidgpUX9OwF0+rxwW4fab0Pk=)
                          4: tm_SCgsNJmh-AXzEbCrn2y7a680.roa (hash: Yhicv8DH/EBqjllTuyT8u7QugkvnRLWR1gpgqoj3d08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:41:8d:0c:b8:e6:77:88:71:24:9a:9e:86:51:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: May  2 09:01:10 2024 GMT
            Not After : May  3 09:01:10 2024 GMT
        Subject: CN=9c09dd396ab669d350baefc80af85ad512d5910e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:00:0d:21:8f:88:48:6f:35:d1:3b:01:ad:
                    e6:00:da:42:4c:a5:b7:4c:43:b4:67:95:cd:99:f3:
                    4e:37:d3:9c:ca:24:3f:f7:f3:53:67:5a:38:2d:33:
                    b3:80:81:24:05:6e:f3:07:a2:19:dd:fc:82:21:7f:
                    ed:04:98:98:44:1a:70:27:54:94:15:52:76:be:e5:
                    01:fd:dc:13:b7:68:1e:ed:61:8f:d4:b6:6c:46:d2:
                    76:f4:46:e2:6d:77:72:d7:ef:a3:b6:25:25:09:96:
                    83:80:1f:18:db:02:52:e3:f7:47:5a:80:0b:f1:70:
                    7e:fd:4d:b9:35:eb:aa:0e:61:65:ca:c2:33:5d:1a:
                    4d:32:1c:2f:60:c8:1f:7b:1c:53:b5:06:c7:66:d3:
                    6d:b9:51:c2:97:77:eb:58:30:f3:59:71:36:74:2e:
                    ac:d0:1c:21:5a:8b:14:34:4c:05:ba:1b:63:a5:96:
                    a4:46:75:7e:ce:9a:b9:b8:5c:00:f7:e1:30:01:4a:
                    49:ab:60:60:57:90:b8:d0:ee:bb:a6:94:47:ca:ca:
                    8a:25:fe:a4:62:b7:bb:c0:9e:b6:cd:27:5e:43:5c:
                    61:56:eb:07:77:18:8e:82:53:4d:f9:7a:18:2a:cf:
                    95:34:b9:e7:a2:fa:50:aa:7f:8d:cd:87:8f:ae:99:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:DD:39:6A:B6:69:D3:50:BA:EF:C8:0A:F8:5A:D5:12:D5:91:0E
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6a:60:c7:71:95:21:e4:da:94:64:ba:5f:ab:9a:61:31:0d:
         37:32:08:bc:1e:65:3b:dd:fb:d1:39:79:20:68:bd:79:b8:76:
         7b:09:05:24:4a:06:ff:7b:b1:70:ef:6c:b4:c4:50:c1:21:de:
         fb:83:d0:19:1c:b3:ea:89:7b:55:8c:dd:3e:7a:1c:2a:ee:65:
         b8:5e:3a:79:47:99:ca:c8:33:fa:00:31:4e:03:11:0b:7b:1a:
         67:c0:5e:d6:bb:29:31:62:19:5c:df:16:76:c8:fa:9a:be:5d:
         fa:2b:28:0c:5d:09:2d:51:be:ed:71:62:b3:34:42:8a:57:4c:
         f3:f0:a8:9d:ee:dc:e1:16:97:45:5a:8f:92:a2:6d:c4:35:c9:
         5f:cc:b3:a0:bc:fd:4b:53:12:27:d7:0b:c5:aa:6f:44:06:db:
         7e:5a:8b:06:42:2a:e0:ef:11:eb:81:ea:b3:13:fa:56:cc:0a:
         db:8f:ad:a9:f1:53:fc:c7:23:fe:9d:12:bd:2d:1a:0c:bb:0b:
         1d:5c:ba:d3:c7:d8:f5:03:87:dc:c2:50:32:84:1a:19:80:c5:
         e2:9a:e3:c5:fa:f4:26:8e:1d:a5:b6:ec:cc:69:40:91:1b:d7:
         b4:ed:38:48:91:d5:31:65:4a:d3:ae:11:98:e8:fb:5e:79:32:
         9e:38:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:37:32 2024 by rpki-client on console-ams.rpki-client.org