Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File:                     dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier:          6PupnFLZSjc0YNOJJedbdHx9wtw6Pwzh7laEBdTlslg=
Subject key identifier:   94:F0:45:6C:64:E0:E0:50:8D:59:95:AD:B9:D7:68:BC:3E:5E:8A:F3
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer:       /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial:       018F874AD629EC3DB040D91BC2DAF684DB8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: OcjeEF1cx3-T_0CBYW-ToyTdsrc.roa (hash: rjc3VQIgfHpuemExSnHpB3AE3/GdW36cubSi6Y9wqY0=)
                          2: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: nPTiZh4ssRvS791cbutup/2TATV0lALb1FMpPaSF9mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d6:29:ec:3d:b0:40:d9:1b:c2:da:f6:84:db:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=94f0456c64e0e0508d5995adb9d768bc3e5e8af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:bc:c1:2f:c7:83:70:99:ae:f9:aa:7d:9f:
                    ea:00:75:57:5a:c3:9d:0d:2a:8f:46:c6:5b:0c:2b:
                    59:60:e7:75:a7:3c:a8:d0:de:fa:82:79:44:92:d0:
                    0b:f3:25:a3:c4:3e:d9:75:d2:da:93:00:86:e7:e0:
                    bc:be:dd:1b:20:77:de:05:d4:27:63:19:2d:10:f9:
                    76:20:c9:c7:83:ab:b8:16:e6:e4:06:fd:c4:4d:1f:
                    40:84:ca:c4:4d:6e:38:19:74:43:3e:79:87:c7:37:
                    17:18:e3:e8:01:6a:0a:2e:26:66:e0:63:af:93:f8:
                    c5:a5:7d:f5:9f:e7:a8:5e:89:e8:e4:8c:27:49:67:
                    b6:b1:8b:9e:88:2d:ce:7f:a2:3d:dd:4a:42:31:01:
                    7a:18:04:ac:63:eb:00:88:7c:a0:37:a5:f9:bf:f6:
                    f1:d2:b2:7d:67:2a:a1:a8:30:a7:6c:3c:4f:99:9c:
                    c1:1f:a5:d2:09:90:cf:dc:f8:60:c2:39:2f:c5:f0:
                    11:25:52:04:62:76:71:9d:1a:1f:c1:a5:4d:13:5b:
                    45:e7:3c:25:3e:bc:d8:21:75:57:2f:ad:3b:8c:1e:
                    2d:7c:c7:6e:94:2a:f3:db:b0:54:8d:8c:c0:17:d3:
                    06:12:ff:ef:2b:2f:64:37:be:a0:a6:0c:af:24:68:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F0:45:6C:64:E0:E0:50:8D:59:95:AD:B9:D7:68:BC:3E:5E:8A:F3
            X509v3 Authority Key Identifier:
                keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:0a:83:20:2d:84:dc:b6:1a:b6:0b:e3:fe:b3:b9:fc:73:
         28:58:98:b3:bc:10:00:b0:5f:5b:b0:d1:89:01:fe:a9:5f:fe:
         57:fb:f1:9d:dc:fb:b1:02:98:94:97:fb:4f:db:71:25:94:cb:
         b6:f4:c7:0e:9b:34:a5:21:e4:d9:93:56:ea:e0:6c:15:2b:4c:
         6c:80:6a:97:ef:8f:4d:a1:4e:44:98:35:fb:20:af:c9:4d:c2:
         41:91:cb:30:cc:a8:83:b6:65:c4:4c:40:3a:5e:89:b3:a0:f1:
         97:d5:65:95:64:c1:7c:db:b9:93:d4:7f:cb:cd:bb:2a:ed:f4:
         5d:73:f9:b8:4f:4d:04:a7:66:c2:43:84:51:73:37:65:9f:22:
         1b:b3:12:bb:c5:aa:9a:92:c6:df:69:d9:79:06:ee:86:18:f9:
         63:c5:84:13:55:64:f2:92:ec:a2:83:6f:51:95:30:f2:e2:f1:
         d1:0f:37:8b:73:dc:75:9c:b3:e6:fe:07:88:24:68:c9:ea:19:
         97:2b:0c:6b:0b:3f:25:23:0c:f8:1d:4b:50:f1:49:a4:5f:53:
         62:fb:58:f1:f3:f8:39:a5:6c:69:95:df:0d:17:11:d7:97:40:
         26:4c:3e:ce:78:ad:7d:ab:c2:18:20:37:21:1a:23:ce:f3:5c:
         44:70:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:27 2024 by rpki-client on console-ams.rpki-client.org