Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File:                     dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier:          qDW8oDOw6JMFnIHp+HDk2sOnEoNbQUp5VUhNKoCi6Hs=
Subject key identifier:   74:DE:BC:84:C6:5B:9B:3E:8C:6D:33:0D:E9:CE:9F:1D:45:3E:EA:90
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer:       /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial:       018F885B47323A535475A11B2C1084C19706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: Y9-5OB6sAH2hvTY8KhQ7Bfj_dkg.roa (hash: L7cP2DeB0qDZnPyY5RlG+VPi+0uuLck6T+YterajaT4=)
                          2: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: Yzhe5Siq34dBmbdlly2zkF5ASKPQ0ptiI2gbH5bcE2I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:47:32:3a:53:54:75:a1:1b:2c:10:84:c1:97:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=74debc84c65b9b3e8c6d330de9ce9f1d453eea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:60:a9:86:ae:d8:bf:f4:41:5c:6b:b9:9a:
                    1e:7d:0d:a0:eb:c3:83:f8:cd:ab:bb:58:ac:20:3f:
                    82:c1:8a:e9:c8:d2:4b:75:82:56:d5:b3:1c:71:a3:
                    6b:72:c4:01:7c:25:1b:aa:bf:a3:27:32:fa:9a:57:
                    a3:e7:13:54:66:21:a5:a0:da:a7:54:a3:2d:ac:06:
                    33:2d:a3:ea:f6:54:8c:d1:fb:8b:6f:87:7f:ac:11:
                    b1:9e:74:4b:a9:ff:da:fb:de:5a:8c:19:2e:81:51:
                    9a:d7:43:26:f7:fb:a6:cd:2c:c2:fc:41:c5:7f:20:
                    4a:d9:e3:d4:12:53:51:3f:5f:d7:78:e3:84:56:35:
                    2a:ae:8a:8a:75:9f:9e:2d:91:88:7d:06:da:9a:45:
                    be:9f:50:17:e9:45:38:6e:5a:a7:6f:1a:42:b3:d5:
                    de:8f:9c:32:f5:d4:50:b3:45:6f:45:93:84:ae:b4:
                    c4:12:90:c6:a8:24:f8:ad:57:3c:6e:9a:b9:8c:6c:
                    65:34:aa:b3:08:17:91:b8:c2:93:89:8f:62:91:4a:
                    55:66:d7:82:6d:ab:10:43:10:e8:8b:0f:7b:ee:c3:
                    08:cc:7d:a1:40:05:f1:73:c4:9f:c3:28:d5:f7:14:
                    e9:95:3a:2b:2b:52:77:15:b5:24:91:e4:23:dd:46:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:BC:84:C6:5B:9B:3E:8C:6D:33:0D:E9:CE:9F:1D:45:3E:EA:90
            X509v3 Authority Key Identifier:
                keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6f:a2:c9:7c:61:c9:4e:d4:1c:46:93:71:97:2c:74:fe:82:
         62:10:85:83:ac:46:85:3b:4f:ed:0b:89:51:f8:11:8c:a5:55:
         85:5e:65:87:4f:85:6a:75:a5:5f:93:4a:8b:13:5b:95:34:a9:
         fb:b1:d4:90:35:e3:a7:61:9a:f1:28:5c:3e:af:69:b1:c7:8e:
         c8:90:59:67:7d:86:b3:84:18:38:c1:51:07:f9:a9:e9:a2:38:
         b7:e6:cb:4f:3f:2f:e2:4d:33:b4:11:e9:bf:f0:c3:e7:17:1d:
         56:a2:10:2b:9e:60:d6:1f:8c:73:ad:8a:d0:34:74:cc:0e:c7:
         c4:e9:0f:cd:57:ce:94:fa:9c:6f:79:96:1a:83:87:f4:df:18:
         9f:6b:2d:59:e6:a5:72:74:1a:72:39:87:7b:17:8b:56:96:10:
         40:dd:97:c5:06:0c:19:13:fa:98:c1:ff:22:de:1e:39:73:5c:
         fa:ff:9e:d3:6d:0e:d0:12:91:3b:aa:9c:2d:a8:ca:67:ac:fe:
         df:f1:01:34:02:c7:2c:1d:05:f6:ca:1f:57:46:93:29:d0:8b:
         1e:bc:20:55:a6:a3:78:d1:e2:53:53:1f:7e:b8:07:7b:e6:4f:
         8e:d2:98:ea:15:cb:72:5e:dc:85:97:0b:19:71:5c:1b:8a:7e:
         27:bd:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:45:24 2024 by rpki-client on console-ams.rpki-client.org