Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File:                     hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier:          tZ9+lFiO9b7n9TGfGZ2omQdpzSRgdlDOsbzQQ3RUCmQ=
Subject key identifier:   25:ED:71:9B:C3:F5:F0:42:49:B5:A7:52:40:E4:DB:7C:66:7E:3C:A8
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer:       /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial:       019037AAEF651B2F9DD8F4CC78964EC09DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number:          0F63
Signing time:             Thu 20 Jun 2024 22:01:07 +0000
Manifest this update:     Thu 20 Jun 2024 22:01:07 +0000
Manifest next update:     Fri 21 Jun 2024 22:01:07 +0000
Files and hashes:         1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: FAnZTzWSIMt/Qg6qDaHwWj17WtnWharvMudhS6eotdw=)
                          2: oEjVTixE8OT9yUUQoVMG2gydrb0.roa (hash: vrPQQUvurpoCDZ8mNDeaY14MVJOF50owbA8pihcPah8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:aa:ef:65:1b:2f:9d:d8:f4:cc:78:96:4e:c0:9d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
        Validity
            Not Before: Jun 20 22:01:07 2024 GMT
            Not After : Jun 21 22:01:07 2024 GMT
        Subject: CN=25ed719bc3f5f04249b5a75240e4db7c667e3ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:4d:cd:d4:e2:41:87:bf:32:f6:67:0b:1e:
                    dd:28:78:54:5d:a6:53:7f:ae:f6:fe:2f:58:5b:94:
                    50:2e:68:7b:a8:6c:fa:86:87:8c:ac:6c:08:8f:27:
                    35:f0:06:88:75:16:b5:af:b6:74:07:97:45:4e:43:
                    5a:8b:c5:be:50:bc:e9:a3:83:36:c4:e6:78:8c:3e:
                    6f:e9:f0:4c:b1:fb:3f:71:e1:d5:03:86:95:76:7e:
                    5a:b7:3d:65:8e:21:63:a7:98:c0:1a:88:4d:1b:4f:
                    14:a4:6a:24:45:f2:9f:ad:e9:ac:86:6d:21:93:5c:
                    39:b7:f2:80:9c:4a:b5:4a:e1:ab:ee:e1:55:18:89:
                    3b:d5:0c:b2:9e:9b:58:62:ca:b7:f9:26:7c:69:6e:
                    ad:c4:37:1a:55:08:24:da:b9:44:68:e2:65:35:97:
                    15:40:8a:a0:45:e2:1b:52:9c:2d:c5:bc:37:5d:28:
                    9e:88:7f:af:d3:49:2e:c4:1b:ae:a2:12:cf:05:57:
                    a4:59:7e:e6:bb:38:fe:bd:00:74:86:fc:fd:a9:d1:
                    8e:87:73:4a:96:79:a9:16:4b:6e:1a:92:53:c6:d8:
                    12:bd:21:46:8e:f3:58:e3:28:a4:11:4f:b1:cd:86:
                    f3:63:b5:c8:11:4c:4d:ea:79:34:53:aa:59:9d:37:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:71:9B:C3:F5:F0:42:49:B5:A7:52:40:E4:DB:7C:66:7E:3C:A8
            X509v3 Authority Key Identifier:
                keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:39:7f:b5:c7:35:71:50:d3:4a:46:58:c6:db:38:49:8f:
         0e:cb:d4:47:13:b4:b4:a1:c4:ed:92:b3:51:61:f0:80:08:e0:
         12:ca:b0:09:0f:9a:1a:b2:90:dc:29:93:e4:f0:b6:32:86:dd:
         54:88:c8:9d:38:a4:30:21:a2:fc:4d:de:61:9c:b3:17:33:a2:
         29:3f:1a:f4:2d:36:b4:86:81:d4:68:c8:cf:9d:d1:7c:f9:ae:
         40:70:ba:46:39:d0:9d:4a:b3:34:79:d4:61:4b:f3:f4:fd:8f:
         66:b6:02:20:cf:ad:94:b2:c6:81:b9:cd:c6:25:e3:89:d0:f2:
         50:d5:94:79:bf:f9:1b:cb:93:80:b1:47:87:30:d7:e8:4d:eb:
         78:45:1d:79:5e:64:6c:af:2d:3e:5f:cf:8e:a7:1e:da:7a:46:
         b5:64:d6:32:16:6b:dd:eb:3d:b3:a3:24:65:35:cd:51:08:f0:
         d1:d1:42:a0:70:00:90:91:ce:b8:7b:b7:fe:22:0a:a6:31:17:
         d0:29:72:b6:50:5b:ee:e9:4d:63:ec:41:a0:fe:9f:81:3a:87:
         67:4a:0a:ea:3f:f9:ed:bb:80:79:10:7c:57:95:97:7c:38:a0:
         c4:90:5d:7c:8c:5d:2b:d4:44:9c:1a:59:b2:a3:e6:95:40:89:
         4e:27:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:23:17 2024 by rpki-client on console-ams.rpki-client.org