Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File:                     hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier:          HMHYlrWwNlNR6YfWcN6cm5uLY4WJ0FZmVQns/t6N9zw=
Subject key identifier:   BA:6B:44:84:75:61:B3:5F:EE:32:AF:BF:12:CA:31:66:88:C6:32:3E
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       018F8F0409F55C8153EB9678A258FFD5FE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number:          0D9F
Signing time:             Sun 19 May 2024 04:02:37 +0000
Manifest this update:     Sun 19 May 2024 04:02:37 +0000
Manifest next update:     Mon 20 May 2024 04:02:37 +0000
Files and hashes:         1: D6jL7Zll5nH7p6ZK7dH8lTC92r8.roa (hash: zrqxb3Vmj7CIgcW9xX/ngFlMrDmUhW7UKD2vt99OJpM=)
                          2: MZUM0hSSRaBdQC4lbZj09JhNKZA.roa (hash: wyoaeVIfoWcKivcoZRDqHmar6MFrpCKWDAeeZzAomks=)
                          3: dC04HAlEZwg4HmnZusOjbxjMqAc.roa (hash: ykPiX1+6Q7jF8x3c99JcRWnXbFiNync8/XSlxI7JSHM=)
                          4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: lWs+hTTXA4dk1h06PH7dlncDntot8Ae1Rb01ymtGjfw=)
                          5: uA_COy_nhiulcYwwLXRE7amZR30.roa (hash: TUefD6i7JrtaacXIkcf0GhfQWLEB7AcsOfmpwkn9Qpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:04:09:f5:5c:81:53:eb:96:78:a2:58:ff:d5:fe:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: May 19 04:02:37 2024 GMT
            Not After : May 20 04:02:37 2024 GMT
        Subject: CN=ba6b44847561b35fee32afbf12ca316688c6323e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:bb:54:28:20:0e:d0:ad:17:de:8e:ec:7b:
                    0e:d1:61:d5:02:9c:63:6c:d6:7c:b6:8b:05:89:50:
                    57:79:e0:80:90:b1:05:11:fa:c4:43:20:3d:7d:4d:
                    ed:22:7e:46:6f:b8:6b:d0:15:46:b9:ae:a2:cb:66:
                    7c:fa:42:34:80:3b:7c:d9:fd:61:ad:ae:45:d8:e6:
                    86:9f:e0:22:4b:ca:aa:17:f5:96:93:54:ea:b1:12:
                    0a:5f:58:16:c9:2f:f6:25:c8:5d:c2:86:5d:61:e2:
                    1b:86:3b:8c:7a:e4:c4:93:8f:45:89:ab:ef:7a:51:
                    bf:db:6d:02:98:27:92:8f:a3:14:cc:ae:8e:2f:69:
                    b7:a2:35:cf:c7:d7:51:5b:c8:6a:d6:f4:b0:57:2a:
                    da:f8:3e:50:3d:06:f3:e4:ce:84:8d:a9:fe:f3:20:
                    43:70:ea:08:74:16:38:4c:b6:3b:db:ee:f3:b6:54:
                    9a:eb:ca:81:37:00:11:14:1c:d7:b1:14:28:f5:5d:
                    b8:04:86:49:c2:9d:bc:93:0e:b3:02:57:96:15:5a:
                    ef:e0:13:e4:4d:60:d9:9b:f4:7e:ca:75:b2:75:81:
                    dd:7b:47:50:ee:63:13:54:1f:73:fc:0d:1c:9e:54:
                    b1:12:57:3b:ca:49:c5:68:07:b3:a0:fa:03:5b:e1:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:44:84:75:61:B3:5F:EE:32:AF:BF:12:CA:31:66:88:C6:32:3E
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:a6:94:24:37:24:e1:7e:b4:93:d2:b5:fc:27:97:e6:bb:
         0d:ff:d3:b0:39:9f:fc:ab:99:17:6e:34:c5:8f:64:15:72:2e:
         29:85:92:8d:6b:18:52:67:aa:ba:4c:6f:db:2b:ba:7a:2a:d2:
         df:d3:f8:9a:fc:a9:f3:e1:f4:c9:ed:ce:4e:41:ad:69:14:c4:
         2e:1e:f7:07:d5:32:2f:76:e5:ce:b6:e4:68:33:3e:b8:5a:c1:
         c1:14:a0:c4:cb:2f:5d:30:d5:3b:a2:e1:fc:59:a4:39:08:23:
         ea:a7:f4:8a:6a:bb:41:1f:b6:ab:df:a4:9c:a7:bb:8c:9b:5b:
         c5:e5:53:4f:4e:b6:e0:0b:21:c9:5d:5e:21:e2:2b:04:79:9d:
         81:d4:20:d4:d7:9a:21:9c:6b:04:f2:f0:0c:1a:ab:5c:d5:c9:
         b4:fa:9f:a5:08:d9:8e:27:ea:eb:f3:47:c1:a6:1e:92:02:3b:
         37:0c:bd:1d:a9:b3:85:8e:9f:97:d2:2a:ad:f4:2c:48:c6:c3:
         4b:66:9b:30:d9:9b:0a:d1:14:af:83:f9:8e:45:d0:4e:5c:a6:
         68:47:38:66:b0:61:ef:01:7c:85:14:39:fc:31:92:a8:d7:b9:
         34:14:d4:74:be:52:02:b5:b9:49:98:59:a3:1a:21:00:15:e5:
         43:d8:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:11:14 2024 by rpki-client on console-ams.rpki-client.org