Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File:                     HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier:          m4NZe+CGqTesmDAY58RkSAdGp/4xPTTwkcoH0dXQZxE=
Subject key identifier:   7E:CF:CC:FE:B9:CC:7F:1D:A5:93:F4:7B:08:45:64:54:33:D2:1A:5F
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer:       /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial:       01901DECC9613CF752E168F99311D1D6F7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number:          0CC5
Signing time:             Sat 15 Jun 2024 22:02:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:55 +0000
Files and hashes:         1: 5yTT4LbWRIqMO89X0PQNBanVEbk.roa (hash: WNMlSF1s7JQQ+lhKB/nU5P1Ta+4+wXDnnXGc7JYmI2A=)
                          2: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: KezmEDAUT37Tnl4Apo8Y6XQHC/Qk1890p/DEh/c62SM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c9:61:3c:f7:52:e1:68:f9:93:11:d1:d6:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
        Validity
            Not Before: Jun 15 22:02:55 2024 GMT
            Not After : Jun 16 22:02:55 2024 GMT
        Subject: CN=7ecfccfeb9cc7f1da593f47b0845645433d21a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:8b:13:81:e0:24:5e:47:b6:a1:cb:da:f2:
                    08:b8:03:93:d7:89:7f:5f:90:5a:5c:ff:9c:ff:ea:
                    8c:f7:54:11:a0:60:c5:6f:e3:62:24:69:a1:22:7f:
                    4b:99:ed:ce:2d:40:86:a5:2d:68:40:46:f0:7d:77:
                    38:10:75:88:9c:e5:ae:f3:38:9a:cb:b9:97:42:9d:
                    25:d6:43:4d:a7:8f:de:f6:02:79:94:35:6d:8d:38:
                    2c:e0:58:0b:5e:a3:c9:ad:e1:28:c3:59:5e:ae:89:
                    c8:95:35:68:84:66:11:a7:19:79:d2:1b:35:ae:ca:
                    c6:2c:d5:d1:ec:fc:cf:a3:d5:ce:c7:c9:37:0d:50:
                    47:53:8a:49:f2:66:bc:36:52:05:a7:b7:d6:db:be:
                    aa:b6:40:cc:2e:55:aa:08:11:d3:f3:b1:13:08:35:
                    8a:ae:29:d1:0d:22:66:d0:f3:08:1d:73:6b:34:53:
                    3f:28:20:ee:2d:9a:b3:a3:ca:1e:ad:b8:06:29:f6:
                    bd:d7:40:b0:44:1d:e3:d3:c1:06:fd:98:f3:61:9f:
                    e5:cc:bc:f2:35:17:84:4b:b5:45:eb:29:4f:07:25:
                    5e:55:94:f7:9c:2a:92:5a:7d:96:7f:00:fa:a8:54:
                    47:93:96:f3:2b:b1:c8:13:45:a1:42:9b:1c:ee:14:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:CC:FE:B9:CC:7F:1D:A5:93:F4:7B:08:45:64:54:33:D2:1A:5F
            X509v3 Authority Key Identifier:
                keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:e1:aa:c8:8b:5a:bd:24:9c:5b:54:4f:f2:54:7e:28:c3:
         71:b4:04:44:97:79:0f:0f:73:23:89:e8:47:1e:0e:43:00:35:
         05:4c:05:64:a4:34:85:10:79:48:c0:f7:d2:88:26:be:94:c1:
         b8:71:e0:52:d9:ee:39:d6:1f:62:bf:32:41:06:5b:39:cb:28:
         b2:1b:a9:98:49:4c:e4:59:c2:83:43:cd:15:b5:43:f4:db:88:
         89:02:ba:50:a7:2c:42:31:f9:80:72:fe:60:e0:c9:17:4f:1a:
         7c:d4:15:81:3e:93:92:bb:bc:0c:eb:9f:bc:8c:2e:3d:65:29:
         42:d9:29:db:19:75:25:07:ee:2c:f8:6c:b2:af:ca:d2:11:c4:
         0e:0a:de:68:de:d1:ca:49:27:c6:d7:de:b7:50:29:cc:af:ca:
         a4:e8:8a:1b:ff:9a:bb:d8:7e:54:b0:1c:e9:52:d2:63:52:9d:
         5b:e5:67:bf:0e:9f:be:65:e8:ed:d3:31:9d:14:b9:b7:6a:58:
         6a:94:a3:08:55:aa:50:13:fa:f5:1b:a6:32:10:c5:a9:ca:f4:
         54:a0:7b:eb:f0:a1:3a:b7:f6:4b:35:de:62:54:f4:c5:34:65:
         d0:19:94:95:1d:e1:da:8e:cd:bd:f6:dd:39:b0:a4:1c:c8:66:
         15:0f:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:55 2024 by rpki-client on console-fra.rpki-client.org