Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File:                     do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier:          ZIkN8anNthIXazqNXhI2DMkoaSItIRjKVwcBk0ul2xQ=
Subject key identifier:   BE:88:B5:16:A5:06:B0:72:0A:7A:35:29:73:4F:7B:53:37:93:DE:5D
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer:       /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial:       018F87B6CADF57AC44AA775002B3D136F479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: 1-Rb3U9ZTIGj7qfCag4g7GzJsHKI.roa (hash: gCyHpQqfnZ2yB8sN1nrczY7XFo9eFl5dbZsjfhWId+o=)
                          2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: K4kNAU01jNMpcusDZv/+lBEh+Yuprne901K9tooIxBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ca:df:57:ac:44:aa:77:50:02:b3:d1:36:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=be88b516a506b0720a7a3529734f7b533793de5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:34:a8:4b:2f:e6:f9:06:df:8f:c1:fe:aa:
                    04:05:e8:6d:1f:78:f0:6c:73:d2:da:c8:93:38:87:
                    5a:0c:f3:9e:51:c9:06:6e:88:33:13:0c:45:0d:70:
                    9a:4c:03:05:54:7c:52:26:9f:8f:58:39:48:e7:9f:
                    e2:55:93:ef:ac:13:dc:22:a3:ee:d6:e8:af:0e:ae:
                    7a:2f:86:50:2d:24:5c:e3:1b:f2:71:9a:2f:ec:b7:
                    d7:45:22:3f:1c:4e:f4:dc:e7:b0:9b:cb:cb:cd:6d:
                    cb:fd:18:5d:c0:fe:08:d9:1d:de:66:43:66:4c:32:
                    ef:fa:7f:ed:48:04:96:eb:11:e2:3c:0b:61:01:85:
                    55:e7:02:14:e6:7a:bc:f1:1b:2d:9b:8b:83:b2:d9:
                    d0:5e:2f:43:6a:60:43:bb:87:cb:56:04:32:ad:88:
                    38:b8:32:95:53:d3:96:a3:32:9c:84:a6:39:85:fc:
                    32:65:06:d6:bb:22:f5:b9:8e:7a:e9:0d:ff:91:d5:
                    bc:81:a4:31:17:93:10:ec:e6:c1:b8:4c:50:bd:f3:
                    99:90:59:4c:02:fc:13:b9:a3:5d:1b:fc:a4:39:21:
                    47:c2:49:af:6f:c9:a1:f1:42:a1:0e:6a:60:fc:a9:
                    33:fb:11:2b:39:47:db:bb:2c:22:93:e7:60:90:7c:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:B5:16:A5:06:B0:72:0A:7A:35:29:73:4F:7B:53:37:93:DE:5D
            X509v3 Authority Key Identifier:
                keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:70:20:f4:fd:4f:4f:c1:d0:0e:fc:3e:34:d6:33:44:99:92:
         3b:aa:b5:5f:c4:9f:f7:00:01:83:74:2a:64:ac:a0:38:62:76:
         17:f0:8d:49:6d:28:57:c2:b3:e1:fe:d0:4b:1d:07:8f:ad:dd:
         10:76:a1:e0:5a:a8:82:a3:07:9c:96:5a:1e:cb:1b:fd:5e:61:
         2a:f2:61:d7:d7:f5:f0:6a:90:f2:99:96:ea:80:e9:21:f0:ce:
         7f:3b:87:f6:67:18:39:f2:cc:3c:b0:50:01:13:01:12:ee:a0:
         39:86:1a:1b:af:75:32:dc:62:f2:d4:96:64:dd:5e:af:e1:9c:
         fb:a5:06:6d:22:fa:aa:73:65:e9:3f:3f:27:f6:2b:a7:9a:80:
         87:68:b2:da:e2:09:9b:e4:cb:94:69:a9:f2:a6:a8:2d:fa:7d:
         73:32:58:18:a6:2a:6a:ef:25:90:39:91:67:fd:cf:05:bc:90:
         53:1a:6f:7e:62:d5:99:75:1b:cd:6e:9c:a1:79:a1:8f:ac:df:
         a7:f0:c7:03:85:9c:b4:e2:d5:9c:aa:19:99:99:1d:cb:64:1b:
         45:0a:90:34:15:9b:d1:b8:ad:d0:8c:1c:2a:ba:78:54:00:7f:
         7a:bc:72:ad:26:a8:5e:9b:35:43:aa:d1:21:67:17:b6:42:21:
         54:05:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:33 2024 by rpki-client on console-fra.rpki-client.org