Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File:                     ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier:          GKdMRO6s34I+NdqJCPPSY7B4UkLVZ1lKmiaiGrJZzVA=
Subject key identifier:   35:29:4E:89:FF:D2:6C:FD:A6:F4:6A:20:EA:23:5C:C8:9E:7C:13:B8
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer:       /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial:       018F8748FDB95612E393368AEDBC3537C1E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: atKE68eodvcZAlGK3V6bjqpw2S4.roa (hash: 8AvUYoeajDlOwilLNU/fdayTVnMLJa2RcHp+ohE2yYI=)
                          2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: KgY/LDTh8cKgYJ2bqmA3kbcf9TyEQOG3pvostMmaWbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fd:b9:56:12:e3:93:36:8a:ed:bc:35:37:c1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=35294e89ffd26cfda6f46a20ea235cc89e7c13b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:f7:bc:38:d1:8a:92:9e:80:f0:b4:7d:ed:
                    e3:62:5a:1f:34:b0:75:8a:7f:4b:90:8b:f2:42:8c:
                    35:57:0f:d1:b7:f4:c2:e4:ad:38:09:ce:91:44:a2:
                    31:f3:f1:88:3c:65:42:55:9a:bc:23:5d:01:35:54:
                    df:c4:b5:b8:31:e5:f3:bb:02:0b:a7:a4:89:8b:60:
                    c0:14:78:91:fb:e7:92:5f:2b:a0:c2:33:67:d0:c1:
                    7d:57:5b:95:eb:90:1c:a0:52:9c:31:e8:29:04:e2:
                    a9:01:cb:b4:87:d2:7c:f2:0d:c0:ab:46:96:e0:c7:
                    4a:65:a7:f8:ac:88:f9:dd:6b:fe:a1:b6:97:51:57:
                    91:8e:13:04:bf:46:21:c1:3a:48:02:06:5d:43:53:
                    02:75:f3:19:c7:fb:2b:46:ca:4e:a9:7d:92:9c:9b:
                    88:7c:b1:c1:b0:ed:54:b9:f9:ac:7a:d3:ce:b8:8d:
                    5c:c2:7e:7c:9d:24:3a:a4:ff:54:ee:52:4c:7c:97:
                    c2:d8:7c:ee:f6:3f:85:30:67:ac:d6:b9:3f:3d:ed:
                    aa:df:e3:e8:bf:92:43:c2:69:1e:ae:92:ec:67:7d:
                    8d:d1:cb:7d:e0:d5:c5:81:48:85:0c:7a:55:52:5b:
                    47:4e:f9:47:f5:5b:4f:3f:99:52:2b:fa:59:46:db:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:4E:89:FF:D2:6C:FD:A6:F4:6A:20:EA:23:5C:C8:9E:7C:13:B8
            X509v3 Authority Key Identifier:
                keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:a6:6b:98:4c:68:ca:79:06:51:52:b4:47:bf:cf:97:50:
         7a:be:82:4a:05:6a:a6:64:41:3f:12:9a:ef:a0:7a:92:95:a0:
         dd:b7:0a:15:8a:07:25:04:a2:4e:89:a8:42:01:39:79:3b:8c:
         c1:e4:7e:9d:63:b5:63:c4:d1:ef:22:f5:68:9b:51:ef:a1:ef:
         44:b4:c9:56:99:a3:5a:8f:fa:6b:4b:46:a4:ad:22:72:fe:a3:
         fe:57:eb:e6:59:fc:6c:28:ef:f3:ac:db:c0:37:5c:b7:19:75:
         61:5a:1f:a1:65:c5:b0:e4:01:0c:93:78:5f:7f:c5:60:98:e5:
         44:b3:9e:8f:0d:88:6b:53:bc:3f:89:c0:a1:0c:22:e3:0e:bf:
         08:0f:43:af:d1:da:92:14:4c:03:36:37:e0:e2:e1:a6:96:16:
         4f:bc:a4:c6:f6:87:61:ff:15:d7:e1:2f:39:58:bf:d3:bb:9c:
         00:5b:43:77:34:88:6f:1b:29:40:e9:00:ef:40:8e:1f:d8:e4:
         45:64:b9:e2:9b:eb:e0:19:cd:f0:2c:c7:77:0d:d6:b9:36:b5:
         5f:8b:3f:7a:94:e0:cd:5a:4f:71:97:50:62:c5:e0:6f:a4:fe:
         58:17:7c:3e:4f:79:35:87:5a:04:5c:26:20:e7:22:eb:92:0a:
         56:64:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:58 2024 by rpki-client on console-ams.rpki-client.org