Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File:                     Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier:          X2EXvmLX1+VthgTKdnZ7fszjevcv0cCNO9kL6xzdWo0=
Subject key identifier:   0B:0E:33:49:E9:03:63:AD:51:94:5A:F5:FE:30:84:F1:14:C3:CD:C7
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer:       /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial:       018F87488895BC112192B7E2B042064A47EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number:          078C
Signing time:             Fri 17 May 2024 16:00:28 +0000
Manifest this update:     Fri 17 May 2024 16:00:28 +0000
Manifest next update:     Sat 18 May 2024 16:00:28 +0000
Files and hashes:         1: 5dRUaiAbsApMZZU9uQV5VnD0O2o.roa (hash: /fA3RLFbDZSvplf/CZpKN1BPjI7I85ymUxR5JWCXbT0=)
                          2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: k0fsVueO952anXe30TCu4R/gFEUWMsM2PKvoRlBKLJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:88:95:bc:11:21:92:b7:e2:b0:42:06:4a:47:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
        Validity
            Not Before: May 17 16:00:28 2024 GMT
            Not After : May 18 16:00:28 2024 GMT
        Subject: CN=0b0e3349e90363ad51945af5fe3084f114c3cdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:76:40:36:66:65:4c:fd:0d:e8:df:c5:42:
                    15:c6:2c:23:68:93:5a:23:87:cd:0d:ae:8d:b9:5c:
                    36:16:51:c3:c5:05:64:8e:97:e5:e3:fa:7c:2d:d0:
                    d3:4c:43:37:cb:8e:01:b7:e5:f8:82:7b:fe:5e:45:
                    07:6d:83:77:c7:67:25:e5:cc:51:56:7a:1a:38:c9:
                    11:10:66:db:df:38:aa:3a:da:e5:71:64:c1:70:2a:
                    96:d6:27:b3:40:d1:f2:fa:82:8b:3c:7f:14:f3:25:
                    cf:d4:cd:0f:5f:62:0e:e1:f8:a6:f9:20:6c:5e:2b:
                    f8:bf:8e:4a:a2:8f:e7:54:1b:20:73:84:9a:31:14:
                    3c:bf:41:85:ff:b0:72:0c:0a:32:28:89:10:13:d0:
                    e5:4b:5f:07:8d:30:38:5c:f0:d6:a3:57:30:46:c8:
                    9c:f8:57:03:88:d3:32:f7:ac:36:38:ca:78:11:79:
                    20:07:1a:f4:b5:b8:ec:5c:b3:56:c0:d4:c4:b7:98:
                    99:13:09:87:31:74:54:c3:d9:e5:4a:77:ce:48:42:
                    72:db:a3:42:39:a8:dc:48:4e:e8:91:4e:2f:e6:9a:
                    72:7a:44:fa:c7:30:ef:7b:3c:a2:2f:0e:92:d4:b0:
                    24:b9:41:09:91:5c:d2:b2:df:93:19:44:89:af:39:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0E:33:49:E9:03:63:AD:51:94:5A:F5:FE:30:84:F1:14:C3:CD:C7
            X509v3 Authority Key Identifier:
                keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:ad:b4:85:25:41:6d:64:a9:ee:8f:0c:62:8f:e2:7b:b3:
         7e:97:10:bc:ac:6b:f6:cc:d8:0e:a5:d1:74:a0:a4:c0:cb:df:
         c3:ee:a6:2a:f7:08:ae:29:3f:f9:06:5c:36:82:ac:4f:dd:2f:
         36:c4:3a:2d:82:50:d3:89:cd:0d:4c:e7:fe:f3:b1:8d:78:f6:
         68:49:27:43:2a:58:64:3e:d6:de:79:c8:14:2d:09:f3:e8:86:
         6a:f5:71:3d:e1:09:6a:6e:f3:b9:0d:73:8c:bc:ff:09:b9:64:
         47:f2:ae:1e:7e:07:eb:49:6f:e7:74:57:c5:1c:24:ba:71:c8:
         05:4d:07:24:ef:7c:22:ba:54:db:4a:67:5c:f6:23:91:9e:e7:
         0f:45:ee:be:be:77:94:f8:a1:47:bd:f1:96:81:90:a8:aa:b6:
         a7:98:45:ba:7f:f6:42:78:dd:21:59:24:4b:2e:77:92:0a:db:
         e3:35:30:94:9d:23:29:4c:f6:1f:83:03:8f:34:80:b0:61:b3:
         58:7f:f1:2f:d3:b4:6f:f6:f9:1f:0d:cf:f0:ce:f8:84:47:f0:
         63:39:46:b1:97:b3:0a:e0:92:dd:96:8d:78:97:78:23:f7:a0:
         97:05:5f:d8:ec:8d:e2:cd:da:ff:4f:4e:1b:9d:d9:2f:e2:86:
         91:35:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:16 2024 by rpki-client on console-fra.rpki-client.org