Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File:                     ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier:          7mXdmuW+uWnuHyzwwVReNc7VOoBXqNeweS9pdhOZMaI=
Subject key identifier:   0F:AC:AF:BC:2C:7F:AB:74:71:86:85:EA:5A:65:88:7E:DF:4B:9D:F3
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer:       /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial:       018F915E4C0C32AB2395F3BA80215B27AC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number:          1180
Signing time:             Sun 19 May 2024 15:00:27 +0000
Manifest this update:     Sun 19 May 2024 15:00:27 +0000
Manifest next update:     Mon 20 May 2024 15:00:27 +0000
Files and hashes:         1: JdHVrtrj0kFN-8TcyUni4bw6LEU.roa (hash: JmgR9+iKN5XVkBEQeH/ADarpjAi970qSWgdB0bmIuq8=)
                          2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: biKKdNpLXweV6Dvpkkk9GjiTLWm6VfyH4OXc6fT9ISU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:5e:4c:0c:32:ab:23:95:f3:ba:80:21:5b:27:ac:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
        Validity
            Not Before: May 19 15:00:27 2024 GMT
            Not After : May 20 15:00:27 2024 GMT
        Subject: CN=0facafbc2c7fab74718685ea5a65887edf4b9df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2b:36:88:e7:f8:b7:be:00:d3:00:8b:97:2b:
                    96:43:1e:24:a4:c0:c8:2b:26:41:69:4b:f3:e3:65:
                    d9:d7:7d:20:a6:d3:47:4a:ed:6a:a3:f3:12:19:e8:
                    60:4e:a0:f1:7e:21:a0:ab:2e:a2:c5:45:94:60:6d:
                    10:43:b7:af:ee:07:24:36:c7:e4:b0:70:f4:8e:e5:
                    2e:81:73:36:e0:8e:e1:ea:8e:24:33:3f:90:13:e9:
                    73:0d:c4:9e:66:be:94:d2:f7:cf:8f:18:f6:33:83:
                    39:ce:b2:1c:b9:21:a8:f4:cf:50:75:a7:b4:13:61:
                    e8:c8:99:d0:62:61:f4:51:01:9f:2f:54:a0:0d:07:
                    4a:fc:bb:d4:62:45:d8:d2:16:60:24:f8:00:b3:4c:
                    86:2c:bd:cb:fa:71:fa:ae:91:b5:43:ad:5a:78:82:
                    cc:6c:db:b4:ab:fe:f3:75:41:63:44:ec:0d:f3:c9:
                    8d:67:cb:96:e4:23:f7:32:14:9c:30:1b:6e:92:c6:
                    71:1b:78:0f:80:9d:b6:9d:91:bc:c4:7c:b1:ae:9f:
                    31:15:16:d3:c5:84:ca:55:6a:19:08:d3:67:a2:06:
                    74:d8:59:2e:8d:e7:8a:d8:14:b9:94:7a:3c:d7:b4:
                    7b:68:26:25:9a:9e:73:bf:99:32:c6:fd:85:58:4e:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:AF:BC:2C:7F:AB:74:71:86:85:EA:5A:65:88:7E:DF:4B:9D:F3
            X509v3 Authority Key Identifier:
                keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:57:fc:b4:26:7f:38:f1:18:4d:0a:9e:b2:da:9d:2c:69:
         db:8e:48:05:1a:9a:c9:7b:6c:c0:9f:1e:4d:09:c3:02:1a:f9:
         08:bc:67:88:c1:41:1b:c5:a2:37:fc:c8:f8:b1:4a:c0:65:da:
         70:ad:a6:16:2b:77:bd:28:b7:75:d5:9c:90:bb:cc:ed:6d:f4:
         0d:e7:1e:c8:2a:f4:3a:d6:df:ba:f0:38:df:8d:d4:ef:2f:67:
         9d:cb:a2:14:3f:7d:d3:ea:c9:9e:d3:de:78:e0:1b:d2:c4:73:
         48:7e:b4:8b:94:a4:7e:22:56:45:5f:e4:8f:34:4e:8d:ac:63:
         9c:6b:7c:a3:8a:6e:7b:fe:e8:da:bc:bc:1b:33:fb:4d:aa:3c:
         07:12:82:b6:e0:b4:5b:cc:56:b2:b7:07:c9:6f:0f:37:21:8e:
         e2:25:fb:71:c7:61:b5:be:ef:27:14:31:96:af:05:cf:be:d4:
         b5:6a:e1:47:c0:b7:ae:65:5b:dc:57:64:4e:79:4a:50:29:d3:
         fc:e4:5a:d7:bd:6b:a9:ee:33:73:40:46:55:3f:5e:9a:fc:65:
         37:8c:92:49:dc:da:23:ea:db:20:30:48:73:ad:95:cd:31:8c:
         b6:20:5a:bf:ec:d1:7e:e1:95:ad:3b:ac:08:8b:be:d7:77:cd:
         40:70:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:03:38 2024 by rpki-client on console-fra.rpki-client.org