Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          qvAPq67jocR6TkHJAC4SfVg72PzAYlepaPbW8JTX6Uw=
Subject key identifier:   7D:B6:DD:F6:07:E0:E0:CD:A9:AB:F1:D0:D7:4F:09:FB:E4:2F:1D:B9
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       01902ACB39118C824294CBAC7591E06A3956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          11A4
Signing time:             Tue 18 Jun 2024 10:01:19 +0000
Manifest this update:     Tue 18 Jun 2024 10:01:19 +0000
Manifest next update:     Wed 19 Jun 2024 10:01:19 +0000
Files and hashes:         1: 1-Hf4Ds-tDJsQaFnpdVeDcBMxNpw.roa (hash: 5lVD9/VBP1RPjkkHx9mC+iELyJOZpcxXn75DCiepme0=)
                          2: TLNLNdGXJaCxf1N5oggAF-JbCnw.roa (hash: iM08eS2vY0Df5L1BnZvDQLEsOjj7mfcs52L34MGOEFI=)
                          3: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: hCw3orgVw0RTcpJDIBlNXGpkkg71J43ekfsRw+R01Gk=)
                          4: yV-H-r5h1RaE-v9tN7THyTRnRUI.roa (hash: HjnTfGzkO4PwUSKkLRD4gkXk6PmEWxsBGsEI2S4vEBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:cb:39:11:8c:82:42:94:cb:ac:75:91:e0:6a:39:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Jun 18 10:01:19 2024 GMT
            Not After : Jun 19 10:01:19 2024 GMT
        Subject: CN=7db6ddf607e0e0cda9abf1d0d74f09fbe42f1db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:45:da:05:3c:a4:5e:b9:bd:d6:ba:13:c3:
                    8f:de:24:f3:1f:eb:ba:8b:12:85:24:f8:1a:c2:64:
                    e6:bd:1b:f9:e1:14:b6:5e:df:ef:35:e2:a3:9d:7a:
                    22:02:3d:8e:b9:5f:c6:38:0d:e7:da:2f:c3:9f:12:
                    79:be:f7:83:2d:40:56:ea:4c:a5:f9:73:76:1b:c8:
                    94:a0:3f:02:aa:f8:5f:dc:a4:93:5c:99:66:ac:42:
                    1c:cc:ee:e0:cb:93:7f:c7:d4:dc:4c:ae:f6:c0:78:
                    cd:dc:32:db:0d:c2:32:18:b9:e2:ed:60:ef:1a:b2:
                    31:78:93:6b:e7:ff:51:db:01:2d:25:63:24:52:ee:
                    a3:d6:03:48:47:63:e0:13:b1:51:0b:b2:e9:fe:72:
                    cb:e2:4b:87:26:91:b7:44:57:b7:37:3a:8d:d8:e2:
                    de:8f:3f:78:ee:63:21:ea:51:13:5b:08:24:ed:43:
                    3a:c4:6a:c3:76:a6:ca:bd:ff:49:e7:e4:db:93:4a:
                    32:75:fa:a1:e3:dc:1e:aa:5f:db:a6:41:36:7a:ce:
                    76:66:59:ca:a8:2b:bb:ea:ea:b5:9a:0f:e8:3c:2a:
                    64:20:ed:be:7f:29:96:df:e3:27:19:e4:80:4d:b9:
                    e3:b0:02:06:05:21:f7:0d:c2:03:49:12:f9:2d:d7:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:DD:F6:07:E0:E0:CD:A9:AB:F1:D0:D7:4F:09:FB:E4:2F:1D:B9
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:33:76:b9:9a:8b:bb:2f:71:4c:74:7b:a7:9c:20:80:a8:
         d4:d6:9e:84:66:9f:2d:39:48:7e:67:10:82:0b:0d:c8:f7:bb:
         40:52:9f:21:55:2d:d7:05:eb:b7:cc:7d:89:c2:9b:31:cc:88:
         ed:e6:e1:71:70:2f:c4:db:ef:95:4a:ae:93:8e:0e:3e:5d:58:
         d4:07:66:22:8c:c5:b1:99:f2:75:f0:11:72:c5:aa:ba:86:61:
         ff:98:d4:59:82:50:8a:bc:42:0d:bf:39:26:03:a4:73:4a:bd:
         77:d7:1a:1b:9a:c0:ff:67:e1:4c:c1:65:4d:a7:6e:b4:dc:c5:
         b4:75:74:33:71:81:3d:b5:da:9f:92:72:58:59:f5:7e:3d:6d:
         0c:4d:50:72:b1:8a:86:77:0b:4d:85:93:81:5a:87:41:df:26:
         b3:3c:60:4c:58:b0:fe:8e:a5:d2:f5:fc:3f:37:65:fd:e2:70:
         31:99:d9:6a:24:a6:db:bb:75:0a:c9:74:9f:de:92:28:af:3d:
         21:6d:3e:7b:19:9b:84:40:fa:5c:74:2a:a0:18:43:fe:63:d2:
         b1:60:c2:0d:a9:f6:47:89:e6:96:6a:a9:cd:43:13:3d:2a:49:
         f6:7d:f1:20:78:c8:05:a4:96:eb:dd:ea:0c:29:04:9e:eb:97:
         9c:09:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:11:39 2024 by rpki-client on console-fra.rpki-client.org