Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File:                     hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier:          SzrmMUQUHFiNdpTrPL2notsB9yTW5+rd9SVzZrpqfHg=
Subject key identifier:   23:F0:AB:B2:44:94:A3:0D:B7:82:46:A9:56:DB:F6:88:55:CA:18:E1
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer:       /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial:       01901BFD5A11E21462E32AAE0A83FE7AE513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number:          0289
Signing time:             Sat 15 Jun 2024 13:01:46 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:46 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:46 +0000
Files and hashes:         1: gld-UXK7BJQJzvR5kcWe-fNAhSw.roa (hash: CwEWOKksg7cXUNTy6P0aiK/+sZboUAm5uQld3uxKGx4=)
                          2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: 2Qwu6ngpFE6oJiIkg530PGal7bEd9FpBukjBkcqsp8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:5a:11:e2:14:62:e3:2a:ae:0a:83:fe:7a:e5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
        Validity
            Not Before: Jun 15 13:01:46 2024 GMT
            Not After : Jun 16 13:01:46 2024 GMT
        Subject: CN=23f0abb24494a30db78246a956dbf68855ca18e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:d1:ae:9f:57:86:9f:02:83:b2:35:17:b8:
                    7f:e7:2c:13:06:6c:fa:7a:a2:41:6a:1e:01:56:af:
                    b6:c7:04:7f:4f:b5:06:d0:50:f6:24:db:bf:83:26:
                    ee:8f:25:67:98:33:ee:21:23:f9:db:5b:e1:65:db:
                    22:61:cf:f1:7e:4b:0e:66:47:02:26:1e:e6:0b:b2:
                    5e:09:50:3d:7b:47:9b:d7:00:b5:12:3e:fc:53:90:
                    35:02:81:4e:fd:81:97:79:3e:4b:f0:32:52:85:72:
                    a7:19:78:16:f5:82:42:93:cd:df:06:e3:00:58:b7:
                    29:4f:36:71:63:60:cb:f2:4a:3a:f4:1c:e7:d2:71:
                    1d:d2:69:fb:98:e8:ed:96:9e:82:e8:b9:08:e5:5c:
                    1c:0d:b6:b0:f6:8b:ae:37:38:98:85:e7:3a:fc:26:
                    63:be:41:cc:e7:e6:f1:c3:a9:04:7b:f5:be:d4:8a:
                    77:a8:8c:52:b3:f3:eb:d0:c4:b4:4f:1f:68:8e:57:
                    e6:47:e2:a4:50:0a:84:4b:9c:b8:dd:9b:83:64:09:
                    ad:85:82:62:c0:32:c4:fa:82:a7:a3:ab:9c:c4:ab:
                    2c:e8:2f:f8:50:57:47:3d:34:c1:d4:7a:c8:5b:4c:
                    8d:10:88:59:23:1a:f1:1e:f2:34:fe:79:a4:bd:62:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:AB:B2:44:94:A3:0D:B7:82:46:A9:56:DB:F6:88:55:CA:18:E1
            X509v3 Authority Key Identifier:
                keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:de:85:36:9f:59:2c:3a:42:f8:5f:d2:0e:ab:02:ae:36:
         71:ae:62:e0:a1:b4:3b:cc:92:cd:3d:86:1b:50:92:0a:b0:5d:
         ca:e2:e3:ec:79:28:e0:c9:8a:58:d5:20:52:ee:2a:37:c0:c8:
         8a:d0:84:88:3b:2a:e9:c1:b6:57:da:c6:d0:20:c4:a3:07:2b:
         3f:81:71:f7:2a:1c:ce:41:f8:a9:5c:15:59:fb:45:6e:e4:1b:
         af:93:00:ac:47:e9:c5:5f:39:77:d9:7f:4f:2e:a7:1c:c9:94:
         c8:9c:10:bb:6c:bc:7f:e1:48:76:dc:cc:08:d3:29:b8:46:90:
         41:5f:96:bc:ac:5a:3f:aa:c4:e9:2a:0c:de:c9:0a:ad:e7:3f:
         ce:90:d1:24:93:01:dc:d7:6f:1f:f2:81:4e:9f:23:e7:e3:e1:
         ae:7d:4c:8b:45:ca:e3:a4:83:36:2d:5a:e4:ae:b6:cf:24:e0:
         45:ed:a9:fb:d1:81:fc:2d:28:2e:ec:b7:db:cb:6f:ed:7f:f2:
         af:41:0c:64:50:97:28:db:08:15:d5:22:41:71:17:57:53:5a:
         a3:01:64:c5:74:cf:dd:d0:f9:41:21:5b:67:c7:bb:7c:be:a2:
         26:4b:da:b6:ec:cd:84:bf:a9:66:90:43:e4:2a:e8:fe:c9:77:
         0b:69:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:08:41 2024 by rpki-client on console-ams.rpki-client.org