Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File:                     DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier:          f6lypuxZUk08tiG75hGbdshl9kj8o9w8M7rJFbtUaV4=
Subject key identifier:   8B:3F:EB:59:8A:B6:CA:03:7A:49:47:B1:A6:B5:71:9E:6D:00:5E:CE
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer:       /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial:       018F8748844D9491B8527E4BB31B3C32EF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number:          0246
Signing time:             Fri 17 May 2024 16:00:27 +0000
Manifest this update:     Fri 17 May 2024 16:00:27 +0000
Manifest next update:     Sat 18 May 2024 16:00:27 +0000
Files and hashes:         1: 3mFP0_WBovE3Y_l_tAvXokzqvc8.roa (hash: tXPzcGcfF2oh9QGnvf///8JtT9O+iOiKjamjtmJ3CS8=)
                          2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: lQFURTv5yHjQJgNTfWUarEl/Ft2aRiF5jHCPDqLhHyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:84:4d:94:91:b8:52:7e:4b:b3:1b:3c:32:ef:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
        Validity
            Not Before: May 17 16:00:27 2024 GMT
            Not After : May 18 16:00:27 2024 GMT
        Subject: CN=8b3feb598ab6ca037a4947b1a6b5719e6d005ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:70:ba:53:99:32:e1:1b:2b:4f:b0:e7:65:
                    05:79:bb:be:9f:6e:3f:06:0a:98:bb:46:77:fb:96:
                    8a:5d:e2:95:b4:6c:14:f6:54:e1:1b:ce:d0:5a:c5:
                    6e:a2:f4:8d:94:5a:99:b6:e3:e0:c7:e7:94:0c:1c:
                    0e:4b:27:11:26:94:00:1c:c8:35:31:ee:ff:6e:03:
                    10:e9:74:06:79:76:2c:83:94:e6:61:ae:1f:1a:af:
                    1f:38:52:32:43:37:aa:b2:fa:c7:a9:86:02:73:0c:
                    92:d0:f0:e1:2b:dd:fc:4a:d9:cc:61:30:b4:db:64:
                    3d:6e:3b:1b:99:10:ba:d9:0f:14:f8:03:01:f8:86:
                    87:bf:18:95:43:40:46:f7:96:17:4f:d2:b8:c2:ca:
                    c2:b1:44:26:98:fe:fc:16:03:f4:0b:f4:b4:bb:81:
                    ac:80:85:ad:ab:72:0c:85:54:59:d1:20:7c:da:bf:
                    9d:df:aa:53:3a:08:2b:b5:24:0a:4d:1d:7d:49:42:
                    f0:3b:a6:db:39:b9:c4:7c:41:84:2c:75:c2:29:2f:
                    4d:c5:b2:e5:e4:08:15:12:b5:b6:7d:ec:b2:a5:f6:
                    f6:33:7d:e0:ca:55:4c:24:97:e4:96:05:ca:c1:76:
                    b9:bf:a7:ab:13:1d:4b:10:26:24:76:b0:40:8c:a5:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:EB:59:8A:B6:CA:03:7A:49:47:B1:A6:B5:71:9E:6D:00:5E:CE
            X509v3 Authority Key Identifier:
                keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:bc:db:ac:66:c8:b8:01:3b:b2:a3:86:76:f6:ab:c9:17:b0:
         40:cd:d8:77:de:42:fe:63:2e:0e:09:ab:75:2e:a9:cd:cf:31:
         b3:08:9d:94:f7:d7:b5:d6:f3:8c:18:21:40:3d:bb:de:03:42:
         fb:98:73:ac:1a:f0:ee:d5:93:31:c5:eb:7f:25:cc:e2:5b:ea:
         38:98:da:52:d2:50:58:c8:7a:f7:29:f1:3c:75:37:52:5c:7b:
         73:64:b0:30:1a:60:33:8f:c0:b5:49:0a:bd:a4:b6:30:e0:08:
         0c:23:bc:d3:fc:23:eb:dc:3c:34:de:28:e5:dc:9d:e0:4b:26:
         fd:19:81:e5:67:ee:da:de:b1:6c:b8:cc:22:99:c5:8d:d0:e5:
         b5:0b:2d:0a:ca:03:84:32:9f:e5:4e:cc:c2:d3:82:f0:7c:a2:
         29:a9:83:45:e7:9c:bd:d9:17:89:b5:b5:71:e3:c2:2d:57:7f:
         13:5f:6d:b0:56:f9:32:74:67:fd:35:3e:e2:b9:97:16:ef:ef:
         34:49:6b:f1:af:3e:a1:d5:fb:7b:84:bd:4d:d2:6d:ba:5a:67:
         07:07:b7:5f:a3:b2:67:74:05:fd:8b:71:09:9e:2a:6c:06:72:
         c4:a5:cf:18:4c:8c:e6:30:2d:f2:fb:f9:70:93:03:5d:79:8d:
         27:d1:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:54:29 2024 by rpki-client on console-ams.rpki-client.org