Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          CNN0ELropuyRhjFU+YiQVz81oEo0CeFK+V49dsbhjmk=
Subject key identifier:   7E:A8:39:2E:A7:86:61:67:CF:70:A5:AF:86:8A:62:22:FD:89:10:75
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       018F874ABBBF42C431974AE29F1702E4D5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0808
Signing time:             Fri 17 May 2024 16:02:52 +0000
Manifest this update:     Fri 17 May 2024 16:02:52 +0000
Manifest next update:     Sat 18 May 2024 16:02:52 +0000
Files and hashes:         1: 30C9T3ht2svgAAKuydIMrAemeAg.roa (hash: nS/dzBSFIH4d7V4ECjKPT03vRBd52Y+IHjvsu10eeLc=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: WfL8Kav/3W3Xx5zPu0+oCileb3OCTkolX/ifo2EC8zI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:bb:bf:42:c4:31:97:4a:e2:9f:17:02:e4:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: May 17 16:02:52 2024 GMT
            Not After : May 18 16:02:52 2024 GMT
        Subject: CN=7ea8392ea7866167cf70a5af868a6222fd891075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:5e:20:be:2a:fb:d0:0d:e0:03:03:7e:e0:
                    75:b8:79:aa:c5:f8:54:72:10:f5:55:45:2a:eb:3d:
                    d8:31:32:e4:1a:af:24:17:11:4c:4a:ed:0b:31:d4:
                    e3:46:27:af:f5:91:07:19:e5:10:4b:ef:84:28:5d:
                    18:1c:12:35:ad:6b:31:f7:bd:01:24:47:fd:eb:88:
                    09:7f:7b:6a:dc:04:aa:e5:7a:0b:c2:a1:1b:8d:4c:
                    36:83:b3:43:9a:34:91:fb:cb:66:ef:dd:9f:46:18:
                    65:b5:a4:04:5c:9e:93:1e:56:9a:c8:12:12:97:a1:
                    55:1f:25:97:85:25:60:de:73:b9:bb:5d:43:6c:39:
                    4d:4e:6f:07:cf:e6:a0:d0:43:2a:02:6e:f5:38:97:
                    15:00:c9:79:e0:e1:fd:53:63:e1:03:47:92:67:b5:
                    4a:6b:2d:4b:fa:c0:a4:0a:f5:97:18:37:a5:c0:f6:
                    20:69:61:ed:35:3b:d7:6f:30:60:39:3a:ce:2a:ad:
                    b6:cd:35:c0:5c:3e:29:c1:b6:2e:03:c5:39:8f:ce:
                    fe:fc:00:18:8a:7d:e4:a8:04:e6:f1:1e:a1:10:f0:
                    94:22:b5:56:dd:e2:ad:ee:8a:0a:e6:1a:a1:aa:6c:
                    e0:48:88:f7:63:3b:0a:ca:18:9c:1c:0b:24:54:a0:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:39:2E:A7:86:61:67:CF:70:A5:AF:86:8A:62:22:FD:89:10:75
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:27:4d:51:3c:36:52:63:95:62:96:54:e1:fb:c0:a2:c3:77:
         84:aa:11:5b:62:9d:8d:37:f7:a2:a8:d8:d6:c7:b1:24:fd:ae:
         fd:f8:db:51:62:a5:7c:85:f8:41:6a:31:8a:61:41:4f:51:4a:
         7d:c7:f5:f5:2b:5f:ef:bf:6d:d2:70:74:04:8a:07:51:8a:b6:
         98:d6:94:02:49:e4:71:eb:53:cd:09:25:1f:3d:85:3d:dc:9e:
         f4:2a:44:70:ab:25:99:fe:2b:16:e1:7a:60:79:08:6e:37:d4:
         15:66:de:e5:12:67:d1:02:b5:3f:e3:ab:b4:6a:01:22:bf:b0:
         2c:fd:9a:4b:90:ff:91:05:0a:17:5e:9b:e0:8e:f6:a2:fe:dc:
         9e:0f:53:57:69:8a:90:d3:4d:e3:be:83:c8:57:51:03:24:2c:
         7a:7b:b4:f3:47:bb:a8:16:51:82:35:fe:eb:58:b1:2d:ed:f8:
         42:77:23:8b:83:11:72:8e:a7:76:b1:1c:31:ea:25:d5:9d:ef:
         80:65:9d:fd:36:30:09:4f:fa:8d:e8:be:09:5a:0b:e7:eb:3a:
         5f:b0:5d:cd:87:e7:91:23:e0:09:16:0b:0f:3d:c6:03:0a:16:
         c3:7a:6a:e7:bb:15:88:50:8d:63:1e:99:46:59:3a:53:ed:ab:
         28:13:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:48 2024 by rpki-client on console-fra.rpki-client.org