Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File:                     ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier:          iuKf7I4717wok0PYuNdxofRKE10Z9YrJHh+jQriurKs=
Subject key identifier:   60:5D:77:84:45:91:8C:F5:0E:F7:2B:9A:66:BD:0D:93:80:D3:34:16
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer:       /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial:       018F8892672A450D7138C3A857E181868E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 22:00:47 +0000
Manifest this update:     Fri 17 May 2024 22:00:47 +0000
Manifest next update:     Sat 18 May 2024 22:00:47 +0000
Files and hashes:         1: 5eVmMCsF3wvdUhJgc9XdYPP1Y6U.roa (hash: UwukM/YPDcxg55N79ZLfsI7cXx5g14bpUugNsYdJCvA=)
                          2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: P2smYWt8qZ9tQpYxu665O7OU/Ou044BkQd5ezIKCfd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:67:2a:45:0d:71:38:c3:a8:57:e1:81:86:8e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
        Validity
            Not Before: May 17 22:00:47 2024 GMT
            Not After : May 18 22:00:47 2024 GMT
        Subject: CN=605d778445918cf50ef72b9a66bd0d9380d33416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:e2:c9:e5:1a:6a:2b:02:95:d1:03:e0:60:
                    90:d5:49:1d:ee:2a:17:c6:5c:95:0f:13:02:fd:bb:
                    02:65:e4:a0:af:99:34:dd:62:f3:34:4a:99:53:ed:
                    87:b0:74:48:2c:53:64:ed:f8:c7:d7:67:c4:0c:da:
                    4a:d1:1c:e7:63:f8:e3:cf:86:e1:b9:23:e9:7f:98:
                    29:87:63:f8:75:7d:01:16:a2:d1:c8:54:23:ff:0f:
                    e0:87:e4:7a:c6:3a:8f:be:fe:5b:42:a5:90:d7:a3:
                    2e:37:4c:3b:36:df:30:d1:40:1b:0c:7f:02:c2:bf:
                    8a:89:b5:6a:08:4f:ca:a9:10:eb:c3:0a:d7:88:41:
                    c3:31:95:2a:fe:85:d0:df:a9:79:19:48:82:5d:bc:
                    2e:ce:df:95:63:58:72:54:1d:b3:b7:e3:9b:69:c8:
                    28:40:74:71:39:ac:66:12:9a:47:4d:1f:25:61:87:
                    01:cc:2e:db:c4:75:12:da:a0:ad:ff:fe:d1:fc:ec:
                    9b:77:e0:f4:da:e5:de:eb:7f:e5:c9:0b:28:d6:ce:
                    02:5e:66:c1:e7:fc:2b:9e:d1:7b:da:3b:02:2a:16:
                    7e:ba:c4:41:23:9a:58:cc:4b:5a:77:e2:c5:22:f8:
                    30:b7:8f:a4:31:38:ff:2e:26:40:1a:a0:e2:5a:28:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:77:84:45:91:8C:F5:0E:F7:2B:9A:66:BD:0D:93:80:D3:34:16
            X509v3 Authority Key Identifier:
                keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:93:cf:3e:e9:3e:c4:9f:af:45:1f:d7:9e:1e:f6:92:17:0f:
         1e:59:09:f6:4d:29:39:04:1e:bf:c5:96:4a:0a:4f:4e:3f:cc:
         cb:ed:a0:74:e1:ab:6d:c3:0c:40:67:0f:f5:d7:48:5f:80:03:
         6b:df:9f:ed:c1:d1:10:16:b0:56:94:35:f0:ca:f4:af:1a:02:
         9d:f6:df:da:46:fd:35:8c:d6:f4:8b:f8:c4:4d:70:ac:b8:d1:
         1d:0e:d1:d7:27:90:6b:c1:c0:7b:26:dd:95:cc:74:36:e8:59:
         07:7e:0b:74:09:e3:eb:6d:12:33:fc:a4:86:d6:bf:af:af:ee:
         6b:de:8f:fe:b9:7b:62:45:ff:5b:5c:ca:9c:5e:66:5d:87:f0:
         36:8d:c9:c0:61:8f:ea:ac:41:3d:a1:a5:c1:ff:ae:07:a1:c7:
         5d:53:d4:0e:0f:20:4e:79:80:cb:a1:37:7e:c8:75:f6:9a:ea:
         69:c1:1d:00:e2:41:b0:ea:10:66:23:f8:32:12:e2:7d:10:5e:
         bb:97:b2:25:07:60:50:0c:aa:93:cf:5a:7a:c5:aa:18:64:ce:
         2d:c9:7f:4a:51:ec:74:7a:79:13:e7:9b:3b:c2:31:ef:57:42:
         01:7d:36:bd:53:13:f3:1d:8f:40:30:e0:15:14:eb:f5:72:26:
         68:04:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:19 2024 by rpki-client on console-ams.rpki-client.org