Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File:                     DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier:          syiiiUlNFaCzeFGFvrKuNkZ4lfFLJOM+IT2IvYs6M+Y=
Subject key identifier:   D9:41:C9:2A:0E:37:00:97:3D:44:5B:0F:44:5B:5A:B1:5C:58:20:E4
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer:       /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial:       018F576FB60122A898EBE613273ADBAE2F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number:          0BD9
Signing time:             Wed 08 May 2024 09:01:29 +0000
Manifest this update:     Wed 08 May 2024 09:01:29 +0000
Manifest next update:     Thu 09 May 2024 09:01:29 +0000
Files and hashes:         1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: oxjEMP8Rvl4Dvj+lx/hL7k80bvNRXBQwGlUk8UI777E=)
                          2: k09V3IpWbuei7CZ9cnDBzqGuLOQ.roa (hash: RaiQ/o4ZAPJKEvNSVvdxbb7Zfzm2aZc6LuGHE5e4hns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:b6:01:22:a8:98:eb:e6:13:27:3a:db:ae:2f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
        Validity
            Not Before: May  8 09:01:29 2024 GMT
            Not After : May  9 09:01:29 2024 GMT
        Subject: CN=d941c92a0e3700973d445b0f445b5ab15c5820e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:f3:df:d7:4e:43:e5:08:9d:c7:81:49:38:
                    b7:61:ae:61:b7:56:47:72:6d:83:ce:7f:a4:78:d6:
                    2d:d3:15:eb:b7:01:74:bc:96:e9:ba:46:d0:11:59:
                    32:ff:83:c0:6d:59:a5:04:46:1b:bc:84:d8:19:5b:
                    3d:ce:38:8f:54:03:a8:69:bc:44:84:ce:cd:8c:fd:
                    38:eb:a4:e6:ed:f9:e3:cc:31:e4:53:35:ea:63:4f:
                    51:c8:f8:04:d7:9b:c9:a3:05:c1:87:11:f6:e8:c0:
                    ce:9f:93:1f:b9:d3:40:50:5a:90:1a:d4:b2:8d:2a:
                    82:1b:0b:83:c1:68:c5:02:ab:03:af:a9:ed:c2:59:
                    4c:70:18:4c:51:01:75:a6:9b:83:86:bb:5c:ea:e7:
                    c4:d3:78:f1:02:a7:0d:60:57:2c:8f:6d:ea:81:ea:
                    99:40:7f:47:f9:f6:2d:cf:ee:7b:2a:ad:e8:91:7a:
                    af:33:fb:40:cd:55:3b:cb:03:e2:8c:22:58:29:91:
                    16:54:b8:b4:42:fa:74:2a:9c:7e:fa:90:74:23:99:
                    b1:cc:5b:cf:59:32:45:6e:51:10:fe:5d:27:6c:91:
                    aa:11:3f:d5:93:b3:ad:ba:d3:fe:1b:f9:94:fa:05:
                    7b:e4:a3:ca:7c:aa:bd:3e:13:09:d8:ae:c9:0b:62:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:41:C9:2A:0E:37:00:97:3D:44:5B:0F:44:5B:5A:B1:5C:58:20:E4
            X509v3 Authority Key Identifier:
                keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:95:5d:df:c3:51:51:7e:be:02:ff:e3:3e:32:79:64:34:
         9c:ab:cf:90:17:67:60:49:56:13:96:34:fe:fa:c1:ff:98:0e:
         50:e1:8c:5f:25:ba:c1:40:e8:db:ae:ec:74:fb:4c:bf:8d:32:
         37:45:f5:b4:33:00:6e:98:51:b8:33:4f:f1:a2:08:12:fe:f0:
         fa:3a:06:f0:25:d1:b5:48:d3:9f:22:9e:ca:65:2c:ac:8f:a3:
         37:9b:c9:35:94:20:96:9b:82:13:28:9d:b7:3d:c8:61:a4:21:
         61:3d:80:a8:71:23:b6:ba:3a:07:65:ca:44:29:c3:cf:5e:49:
         ab:6d:a3:dd:d2:75:7f:79:ad:18:51:03:88:5f:f7:1a:7d:af:
         56:56:66:8c:0c:64:13:01:85:a9:df:b9:5b:91:96:3c:ac:0a:
         64:d0:d1:a2:3a:a2:87:4a:2f:a2:f5:91:27:1c:54:71:6a:c8:
         6a:20:c5:09:76:ce:01:85:94:1c:3a:ac:4c:72:93:79:3c:95:
         ff:c1:25:33:a4:d8:9c:22:cf:c2:a0:74:ed:c8:24:91:e7:d2:
         e1:67:9f:d2:aa:4b:f1:58:7c:42:14:30:99:c6:78:7d:04:f0:
         81:bc:5e:c4:28:52:e7:3c:ba:cd:41:2c:c3:2b:6b:54:64:ba:
         9e:cc:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:35:46 2024 by rpki-client on console-fra.rpki-client.org