Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File:                     hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier:          RNVg52BsIl0qmSrN4vvq+Li3kAeI95iTosqBJHLq3yI=
Subject key identifier:   D0:56:62:98:A4:F5:08:6C:CA:D9:3C:EA:26:E7:91:F7:F9:5E:51:2D
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer:       /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial:       0190460AFA978058F66604D5F2856AF0F2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number:          0387
Signing time:             Sun 23 Jun 2024 17:00:42 +0000
Manifest this update:     Sun 23 Jun 2024 17:00:42 +0000
Manifest next update:     Mon 24 Jun 2024 17:00:42 +0000
Files and hashes:         1: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: Imf1LDBnN3p6Ezqko2i98qrWYataNNWUH/7/r5ejhOo=)
                          2: lEvl7FYEE5cP4FeYSihM_VI8sf4.roa (hash: 8vpQ7bwyXlks2op3JNzzAGD2ihX0DZk+8hHGvH97rdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:46:0a:fa:97:80:58:f6:66:04:d5:f2:85:6a:f0:f2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
        Validity
            Not Before: Jun 23 17:00:42 2024 GMT
            Not After : Jun 24 17:00:42 2024 GMT
        Subject: CN=d0566298a4f5086ccad93cea26e791f7f95e512d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:a8:77:a7:5e:12:f1:3a:a0:71:d1:12:df:
                    52:37:1c:16:4e:5a:7a:c7:5c:f9:99:41:99:08:4a:
                    3f:89:05:64:d1:ef:83:d4:de:0f:2f:28:a9:29:a3:
                    84:c1:9a:ca:ea:8b:c8:78:bb:d6:cc:c4:fa:98:db:
                    f0:0b:8a:a5:cd:60:c7:70:ba:7c:4c:fa:3b:5a:ee:
                    60:4c:15:32:3f:c3:26:e2:94:d0:09:9c:85:25:2a:
                    bd:d1:bf:e0:a4:bc:d2:47:c8:ac:8d:9d:4d:31:ac:
                    a2:a3:2e:81:83:86:cc:a7:fe:2a:03:4b:39:ad:fe:
                    09:f3:a9:07:94:8d:2f:ab:6d:48:d7:9e:19:84:e4:
                    7e:28:9e:18:64:bd:53:aa:44:97:83:a9:a3:9f:81:
                    be:70:1a:63:cf:43:32:09:0f:0a:39:c7:be:7b:3e:
                    79:eb:6e:2f:a6:08:49:9e:fe:64:a8:c5:6c:a7:a8:
                    4b:ef:5e:34:c0:1c:91:26:55:ad:47:b1:44:07:5a:
                    0a:80:37:51:ab:f4:83:84:dd:c4:96:35:ac:e1:da:
                    35:7d:2a:a8:ab:61:7f:94:76:bb:ce:ab:13:7a:2c:
                    16:f5:e1:ed:b7:ef:f3:bc:fb:20:f7:fb:bc:5b:88:
                    8e:59:d7:f7:44:b3:83:f1:cf:09:bd:35:ee:d9:ea:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:62:98:A4:F5:08:6C:CA:D9:3C:EA:26:E7:91:F7:F9:5E:51:2D
            X509v3 Authority Key Identifier:
                keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:fb:cd:b9:37:34:10:c0:e8:ca:4c:68:54:fb:7e:cd:28:7d:
         79:c0:24:46:5b:cb:b2:0f:0d:2a:2c:cf:53:de:2e:d1:40:41:
         b2:c0:09:da:93:81:ea:d6:ea:e2:26:cd:63:54:14:b0:c1:ad:
         66:d8:2c:91:de:26:80:b9:70:fd:77:bd:2f:25:e9:a7:ac:1b:
         53:b0:f6:1e:7d:92:5d:63:48:65:07:99:55:df:5b:da:d8:52:
         3e:36:ba:36:14:69:e2:77:f7:4e:74:ae:e0:ff:42:ca:f1:5b:
         6f:60:74:65:4a:5e:db:ed:0a:91:60:da:56:e9:ab:84:c7:b5:
         cf:20:d2:6f:af:ad:26:bb:3f:0c:89:78:70:6a:cf:67:61:07:
         8e:10:d6:75:22:b2:1f:0b:89:50:dc:d1:2b:c5:7e:62:15:cb:
         0d:1d:b0:7f:54:41:07:a5:06:a6:e3:62:01:9d:13:b1:08:f8:
         8d:c4:99:5a:fe:6b:70:b0:d5:68:b5:d0:6c:d8:68:7c:54:77:
         e6:5b:38:13:2d:3f:bc:cd:13:25:47:76:04:b1:5c:f6:2c:71:
         f7:69:da:65:5c:5d:5f:73:53:86:65:c5:c6:ed:78:a0:31:49:
         01:e4:b4:e7:a3:80:8c:b5:56:b4:37:4e:31:6f:9f:d9:06:ee:
         97:ff:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:26 2024 by rpki-client on console-fra.rpki-client.org