Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File:                     dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier:          UhggddVyy7QaO5P9wha0PLqXWGt77NBIpvxjaJ6GhDw=
Subject key identifier:   63:F0:29:B8:A8:7F:54:A1:86:93:E8:D8:F2:6C:32:B5:FB:44:9F:65
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer:       /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial:       018F87ED92697448F6DF00D2417C45A2BC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number:          0DCB
Signing time:             Fri 17 May 2024 19:00:44 +0000
Manifest this update:     Fri 17 May 2024 19:00:44 +0000
Manifest next update:     Sat 18 May 2024 19:00:44 +0000
Files and hashes:         1: 1-dW-tJKx6UJaBHksxZzWr11rQ9Y.roa (hash: /nZfYDzD6gWtYt3mZlXPWQK0m4XXG8VULXtDwiolqVI=)
                          2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: GQXjLclc7vLF7hvbvM4B4dPa+7CWOUanDg6LsbX2jgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:92:69:74:48:f6:df:00:d2:41:7c:45:a2:bc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
        Validity
            Not Before: May 17 19:00:44 2024 GMT
            Not After : May 18 19:00:44 2024 GMT
        Subject: CN=63f029b8a87f54a18693e8d8f26c32b5fb449f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:ab:19:62:0a:cb:1f:f0:4c:17:67:65:ee:
                    58:4c:db:eb:da:a1:09:d4:8e:38:28:d7:38:7a:08:
                    52:de:ff:4d:20:3d:fa:df:da:76:b4:0f:9f:11:a3:
                    66:33:0c:3b:7c:ac:2b:d5:e5:49:3f:2f:d1:29:f0:
                    6d:1f:7c:77:ed:7d:a9:1d:f7:25:72:8c:16:6d:6a:
                    95:22:b6:ab:e0:ac:00:71:e1:3e:b6:e2:75:fb:8c:
                    3c:35:31:29:74:c2:3f:08:ad:26:b2:e3:0b:d0:71:
                    82:85:41:16:f1:ff:ae:8c:0a:bb:9b:64:3f:a7:63:
                    c5:b5:17:d4:d5:0b:5b:48:ef:5c:87:bd:f8:8b:0c:
                    30:d3:6a:02:fd:48:c1:ac:e1:cf:32:31:8e:0d:c1:
                    75:e6:6f:9b:13:7e:3a:2a:f0:1b:7e:77:eb:e0:97:
                    df:b7:35:c1:43:46:37:1b:6b:17:6d:10:88:96:a7:
                    94:de:a3:e3:21:d5:11:f4:f5:f4:2d:ef:9c:c1:a1:
                    3e:33:80:a4:f9:c3:b2:d9:bb:4d:94:b2:8e:76:74:
                    e3:ab:fb:0d:a3:26:20:4e:02:76:fe:33:a1:a4:bd:
                    83:90:01:ba:f8:fb:d1:ec:8c:ea:10:27:06:fa:6b:
                    33:8d:7e:d4:8d:16:13:6a:f2:71:7b:81:75:70:17:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:29:B8:A8:7F:54:A1:86:93:E8:D8:F2:6C:32:B5:FB:44:9F:65
            X509v3 Authority Key Identifier:
                keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:c7:b4:6a:2b:d0:cd:52:9c:c5:aa:14:e0:76:d0:11:02:
         db:4a:ac:d2:42:04:da:5e:6a:9a:76:f5:0d:68:4a:1d:a1:ec:
         5a:16:a7:4c:0c:79:33:f8:a0:1e:d8:38:fb:67:1a:97:00:95:
         63:59:51:16:95:4a:5a:0c:c2:2a:0a:e5:1d:ee:63:37:56:cd:
         d4:52:43:4c:40:c8:1f:08:a4:34:a7:7f:e7:23:24:cc:1b:59:
         5b:c3:15:34:d8:69:b6:25:c4:cc:2e:e0:9f:33:19:7c:85:0d:
         2f:90:52:26:e0:23:5f:f7:e0:b9:e7:a0:00:12:a5:a4:74:ae:
         10:53:7d:04:00:67:9f:53:b6:28:ee:73:24:89:05:a7:30:91:
         98:f9:33:68:49:97:cf:5e:3d:62:99:6e:29:d4:5e:4f:2c:79:
         c8:9d:fd:d5:83:fd:a8:29:6d:31:ba:48:93:49:14:c1:66:7b:
         d6:69:7f:fe:96:51:a3:3d:24:51:71:89:e9:6c:38:75:3d:c7:
         5f:1f:99:ff:78:c4:ef:75:d3:d3:4a:4b:5e:1c:bf:82:49:e6:
         4a:51:68:39:9a:19:b4:7f:a9:0c:95:ba:4e:00:f1:a5:9c:0a:
         65:86:e0:2c:84:8d:28:40:e2:fa:4e:21:41:f1:b6:71:cb:ae:
         7f:d6:43:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7ZJpdEj23wDSQXxForwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl
NDdhYmYwHhcNMjQwNTE3MTkwMDQ0WhcNMjQwNTE4MTkwMDQ0WjAzMTEwLwYDVQQD
Eyg2M2YwMjliOGE4N2Y1NGExODY5M2U4ZDhmMjZjMzJiNWZiNDQ5ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0CrGWIKyx/wTBdnZe5YTNvr2qEJ
1I44KNc4eghS3v9NID3639p2tA+fEaNmMww7fKwr1eVJPy/RKfBtH3x37X2pHfcl
cowWbWqVIrar4KwAceE+tuJ1+4w8NTEpdMI/CK0msuML0HGChUEW8f+ujAq7m2Q/
p2PFtRfU1QtbSO9ch734iwww02oC/UjBrOHPMjGODcF15m+bE346KvAbfnfr4Jff
tzXBQ0Y3G2sXbRCIlqeU3qPjIdUR9PX0Le+cwaE+M4Ck+cOy2btNlLKOdnTjq/sN
oyYgTgJ2/jOhpL2DkAG6+PvR7IzqECcG+mszjX7UjRYTavJxe4F1cBcvEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPwKbiof1ShhpPo2PJsMrX7RJ9lMB8GA1UdIwQY
MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt
OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5
LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJDHtGor
0M1SnMWqFOB20BEC20qs0kIE2l5qmnb1DWhKHaHsWhanTAx5M/igHtg4+2calwCV
Y1lRFpVKWgzCKgrlHe5jN1bN1FJDTEDIHwikNKd/5yMkzBtZW8MVNNhptiXEzC7g
nzMZfIUNL5BSJuAjX/fgueegABKlpHSuEFN9BABnn1O2KO5zJIkFpzCRmPkzaEmX
z149YpluKdReTyx5yJ391YP9qCltMbpIk0kUwWZ71ml//pZRoz0kUXGJ6Ww4dT3H
Xx+Z/3jE73XT00pLXhy/gknmSlFoOZoZtH+pDJW6TgDxpZwKZYbgLISNKEDi+k4h
QfG2ccuuf9ZD9Q==
-----END CERTIFICATE-----
Generated at Sat May 18 02:24:09 2024 by rpki-client on console-ams.rpki-client.org