Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File:                     ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier:          g7GCnsqGH+onPF6/wp8oULcuErWubkvFRt83JANmhZ8=
Subject key identifier:   D4:0A:BE:02:C3:07:60:32:7F:65:54:AC:1D:FB:D4:E3:E2:06:CA:6B
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer:       /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial:       018F8749FF3A9C73293FB76ABD4BFBB6CB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:04 +0000
Manifest this update:     Fri 17 May 2024 16:02:04 +0000
Manifest next update:     Sat 18 May 2024 16:02:04 +0000
Files and hashes:         1: 6piAzuAN2kuWt4UFrGQk358IebE.roa (hash: deMGTXOnEGhiCd0eNl399SjW6CrtBqIztbeyTbDdCSs=)
                          2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: 2Sd+lT9hN/pUNYi2YrVeyeE1PXmt8yKXiiMpaF3gYGM=)
                          3: jDIK_Wvi40-c54GMqhUzcrZ6fyw.roa (hash: J4POzUiARMEYtE99pB4I1dJMaoOINPs8qZx3Aa6OmRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ff:3a:9c:73:29:3f:b7:6a:bd:4b:fb:b6:cb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
        Validity
            Not Before: May 17 16:02:04 2024 GMT
            Not After : May 18 16:02:04 2024 GMT
        Subject: CN=d40abe02c30760327f6554ac1dfbd4e3e206ca6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:bd:8f:a3:6e:4b:6c:46:eb:5d:5f:d8:05:
                    8f:67:60:3c:30:4c:02:61:c6:7e:67:93:53:74:13:
                    03:55:2f:93:4a:74:15:83:cd:20:90:01:ea:fc:29:
                    86:2c:e8:72:db:f3:27:e6:58:8a:6b:17:76:ab:b2:
                    85:0e:ab:99:e9:38:07:fc:3d:77:3c:cb:51:5e:c4:
                    86:f3:66:8f:64:b9:1a:83:95:95:0c:57:18:90:fc:
                    f1:16:0e:f5:80:5b:56:5e:ba:84:4a:f0:26:6c:cf:
                    e9:99:23:9e:62:6d:05:e5:71:8b:dc:0a:c0:54:d4:
                    5c:43:66:83:81:5d:14:b8:73:6b:e2:74:60:71:19:
                    3b:54:c0:c0:bc:c5:3b:cf:24:19:f1:89:c1:ef:31:
                    58:18:a4:ee:12:12:e4:b6:b6:22:aa:e2:85:01:1b:
                    ea:3c:71:f0:10:94:23:5d:3d:e5:eb:3f:27:a4:8d:
                    f9:4c:be:7b:28:0c:9e:b2:85:37:12:08:13:fa:ea:
                    5e:b4:7a:1d:7e:25:cd:80:4a:6c:ee:d7:76:f9:20:
                    6d:7c:01:c8:d9:cd:8f:f7:34:51:3a:12:7c:fc:98:
                    f9:7f:e0:9c:f2:5c:57:87:44:9e:4e:01:ec:e2:74:
                    8a:60:d7:a3:a6:09:20:e3:98:6e:3e:b1:8a:9a:6b:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0A:BE:02:C3:07:60:32:7F:65:54:AC:1D:FB:D4:E3:E2:06:CA:6B
            X509v3 Authority Key Identifier:
                keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:38:3d:3c:7e:0a:9b:df:f3:56:14:e6:ed:d3:81:d9:65:58:
         54:6c:1f:d3:5a:02:e3:95:3c:10:50:23:72:3b:85:62:36:8b:
         6f:c9:7c:7d:3c:55:0c:b7:d1:db:cd:17:10:e7:51:9f:24:fc:
         18:08:e6:c3:0a:a7:9b:2c:0b:a8:4c:05:d7:fa:d9:4d:ff:2a:
         f3:5c:59:74:ff:62:4a:e1:d8:01:2e:ba:75:d5:fe:51:6f:09:
         93:f1:db:02:39:81:0a:b8:4d:73:4e:db:c0:50:5f:10:7b:ca:
         38:14:a2:f1:ee:e6:06:ae:f9:1b:66:8b:4c:47:6c:53:eb:77:
         ba:62:f8:24:79:7a:e5:a0:cf:cc:b6:6b:6c:f4:98:f7:ab:79:
         fc:c1:6e:a4:7a:8f:41:8f:db:36:34:ca:c8:1c:97:71:17:72:
         6b:7e:84:ed:74:74:b3:e9:59:30:30:6c:14:bd:86:5a:4f:51:
         45:49:ed:79:39:20:42:79:36:42:02:98:cb:b5:3f:78:b5:1d:
         ad:ac:06:63:34:e8:d1:d4:a0:61:7b:56:fc:9d:d2:eb:b1:56:
         65:aa:81:2b:70:db:98:5f:02:b3:47:5f:09:d5:65:2d:10:3d:
         49:b2:9a:fc:0a:22:03:94:b2:67:43:27:62:fd:04:b8:61:4a:
         51:23:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:57 2024 by rpki-client on console-fra.rpki-client.org