Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
File:                     ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft (raw, json)
Hash identifier:          MD2WyR+iJe6kcwexMGb1hdTemxUskOLoDcrZtN7eZ0M=
Subject key identifier:   EB:E8:B3:DA:49:D1:61:66:E9:11:12:D0:F5:FC:D2:75:2A:B8:F0:AD
Authority key identifier: 65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
Certificate issuer:       /CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Certificate serial:       018F87ED7EC825C3D9D8AB160C9CF7E6242F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: 9cNkOnvTCog2hgiasaGZdrnPHbM.roa (hash: zS/Xw5VN1/8hexWf6gdCNIvqiL7JGNesOL/kTQHZ+ew=)
                          2: ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl (hash: YCLhr+vWdCZiSLtvIQtHRAhV/IqWgI2+nicJ+SkPeyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7e:c8:25:c3:d9:d8:ab:16:0c:9c:f7:e6:24:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=ebe8b3da49d16166e91112d0f5fcd2752ab8f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:28:c0:61:f3:18:8b:72:02:e5:ab:b1:79:ba:
                    cc:31:67:c3:58:e5:11:06:7f:2a:9f:f5:16:74:cc:
                    77:a2:90:cc:08:a3:c4:87:91:2d:85:bd:8a:13:f6:
                    f9:a7:c7:12:5c:d9:73:2f:34:53:bb:21:d4:7e:ed:
                    55:5b:69:02:ea:99:8b:ec:0b:3c:6a:8e:42:f7:3c:
                    b7:6b:78:44:3f:75:80:65:98:4d:1e:b6:60:ad:23:
                    3b:db:36:6b:00:78:de:64:e8:65:3a:e6:92:e6:29:
                    23:23:69:aa:34:53:d7:68:e9:d4:a9:ab:0c:21:fc:
                    1f:fe:b2:f6:ba:9c:a1:c0:44:04:bf:28:4d:63:02:
                    6a:95:8e:c1:a4:9a:d7:69:d7:e7:15:5c:7d:73:fa:
                    99:d8:b2:68:f7:10:80:e6:7f:ce:a6:82:59:93:f0:
                    25:c4:4f:d6:d4:ce:fa:0f:fa:8c:f7:4a:19:40:29:
                    13:c7:93:da:1d:1b:91:fe:f2:d8:da:70:69:8e:1e:
                    db:a9:32:32:a1:7c:ef:24:2a:1f:8a:29:38:7c:7e:
                    71:27:c5:0a:f6:27:12:ef:ed:6f:6c:27:06:e3:88:
                    08:f3:dc:9d:49:ad:8b:85:2a:a6:03:e3:e1:9f:43:
                    8a:f0:f0:41:b9:62:da:98:98:44:e8:13:6e:04:bf:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:B3:DA:49:D1:61:66:E9:11:12:D0:F5:FC:D2:75:2A:B8:F0:AD
            X509v3 Authority Key Identifier:
                keyid:65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:18:b3:f5:85:7b:64:fe:2e:cd:fd:f6:c5:23:d5:15:cc:b0:
         3f:b0:a7:71:02:ba:fd:22:34:02:5e:55:ed:db:8d:9d:c0:de:
         85:47:bc:f1:ba:40:18:26:73:e5:de:74:99:e4:0c:b8:d3:48:
         5b:91:14:70:cb:54:22:4c:1c:71:9d:3c:a6:23:24:66:30:b4:
         9c:c9:73:08:17:34:55:c4:8e:ee:2e:f2:d3:92:d4:bb:34:d7:
         9f:99:a3:7f:e8:49:cb:82:0d:a7:68:e7:7b:93:6e:ea:b0:09:
         5e:5b:16:49:d6:4e:1b:23:a1:de:22:0b:77:41:fd:f8:d9:e3:
         b5:15:27:28:37:d8:b0:db:b2:2a:f1:f9:fa:c9:bd:54:cf:55:
         3e:db:1a:8a:85:dd:1b:d0:17:d0:9d:e1:e5:72:0a:60:c9:70:
         ff:b5:c6:40:49:20:55:16:aa:ee:93:67:4c:4d:c2:44:60:66:
         4b:72:fb:2b:ec:67:e4:5e:05:c8:58:c5:13:6c:3a:d5:c4:6a:
         32:f7:d9:6d:fe:2c:4f:b3:74:1a:57:53:6e:c7:d7:3d:e8:1f:
         f0:56:ac:54:84:c7:75:64:39:68:6e:5c:6d:cf:2a:c3:e8:57:
         ae:aa:e9:71:57:a4:7c:73:d5:cf:b7:72:d6:69:76:0b:13:96:
         11:d4:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:05 2024 by rpki-client on console-ams.rpki-client.org