Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier:          ZmJHN7qn5jzGg4ByGOTBPYS8kT4uwYSB6/gTAdQa4b0=
Subject key identifier:   D7:A7:2E:B1:96:FD:56:9C:AC:76:07:28:4F:42:0A:0E:8A:FF:BF:15
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer:       /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial:       018F4F496B4F86C6AB0681D53FB128AB3133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number:          0F2D
Signing time:             Mon 06 May 2024 19:02:42 +0000
Manifest this update:     Mon 06 May 2024 19:02:42 +0000
Manifest next update:     Tue 07 May 2024 19:02:42 +0000
Files and hashes:         1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: pKGEAnEtVY1d3n8EkRk2NydLtPACVgxqRcHyLZ02YwQ=)
                          2: ZtQJs8_eQMeo6nOAoxa5nOfbbcQ.roa (hash: enn42o3Ym/kOxyHdmFmn6clJsf47uEFpc466xlwkd28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:6b:4f:86:c6:ab:06:81:d5:3f:b1:28:ab:31:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Validity
            Not Before: May  6 19:02:42 2024 GMT
            Not After : May  7 19:02:42 2024 GMT
        Subject: CN=d7a72eb196fd569cac7607284f420a0e8affbf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:7e:ed:50:f2:1b:ef:19:4b:9b:51:c6:c5:
                    d3:81:25:d2:54:f8:8d:d6:89:58:c5:dd:c2:41:51:
                    f4:41:b8:06:1c:e4:17:f4:31:22:7c:a0:84:83:e9:
                    95:a7:8e:30:11:94:33:2c:1e:6d:96:48:e0:4f:f9:
                    5e:9a:42:7a:c4:44:84:e4:20:3a:1a:db:df:33:01:
                    d6:af:24:28:ff:d0:2a:34:58:1f:9d:d5:02:da:97:
                    13:b8:b7:a5:c3:9f:8b:ab:04:6d:18:9c:4e:b2:12:
                    2e:ec:4a:2d:43:4e:cc:72:42:7e:8b:e1:62:67:07:
                    e8:8b:6c:b1:f4:07:d2:d4:4f:c6:b0:49:c4:df:1b:
                    28:e6:1e:02:42:5e:d4:ff:d1:a3:f2:ec:a7:7e:f3:
                    b9:c2:fd:68:9b:0e:8d:37:c5:d8:0b:ff:05:df:5e:
                    55:0c:37:db:1d:46:a5:ff:39:62:02:8e:82:fd:df:
                    93:3b:b2:05:70:90:57:fc:90:a2:c1:ac:7b:f1:02:
                    44:ba:b4:10:ea:7b:4c:8c:ec:ef:be:4b:48:2e:17:
                    2f:c4:c0:cc:29:74:40:4d:93:39:13:c9:d6:93:fb:
                    fb:f2:bf:1d:47:92:cc:43:fc:33:9a:7d:dc:56:13:
                    dd:3a:c2:b4:36:fc:29:bb:8e:05:a3:cf:bc:a6:83:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:2E:B1:96:FD:56:9C:AC:76:07:28:4F:42:0A:0E:8A:FF:BF:15
            X509v3 Authority Key Identifier:
                keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:08:72:23:c2:ed:c8:ce:7b:82:c2:d8:de:ea:9c:82:54:
         39:55:f3:44:f7:ad:84:7f:58:4a:7b:54:a9:cf:c7:62:1d:c0:
         68:b5:4a:48:ca:41:3d:e0:83:38:a2:63:8b:65:8d:3a:4e:c3:
         e5:ed:95:10:d7:c0:ad:99:f9:15:12:83:d4:1b:e3:51:c9:2e:
         c9:64:0c:bf:31:41:45:96:4c:e3:33:e5:2a:d3:99:4f:60:1d:
         fe:90:0b:59:f7:6d:0d:ef:e9:26:85:62:71:6b:d9:3b:37:42:
         87:ea:69:89:22:8d:6e:b0:de:91:64:93:2f:b4:39:09:0b:ec:
         89:1d:46:d4:a1:0d:9d:a3:d4:0b:60:1c:45:6f:c8:46:1d:6f:
         e0:9b:e8:b4:2a:ef:71:92:2a:38:92:5f:20:de:23:4d:2a:d6:
         d2:41:2e:02:e5:5f:59:23:c7:10:8f:83:44:6d:1d:0f:8f:54:
         41:a3:ca:60:f9:d6:f2:d1:7f:ee:d6:4c:20:dd:2e:ec:87:b8:
         21:86:e8:50:33:12:85:71:62:c3:3c:9e:98:48:c6:5a:a5:aa:
         f3:14:fb:fc:01:7e:86:53:bb:57:29:61:46:67:16:d9:11:b1:
         c4:70:7a:92:d3:cb:34:db:39:e8:5c:63:07:99:73:52:e6:60:
         13:c6:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:55:46 2024 by rpki-client on console-ams.rpki-client.org