Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          Z21JhjPIuwYYOBpuT3baQl0qU3H8MoaFiBxgwEggyZI=
Subject key identifier:   C1:BA:61:21:7B:B4:36:E6:D8:16:D8:F1:96:D5:63:0D:7D:C8:C1:2A
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       01901FDB183C780BC22B04C6B1CD23F50F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          0CAC
Signing time:             Sun 16 Jun 2024 07:02:50 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:50 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:50 +0000
Files and hashes:         1: NLW01DZVFyztsd7cwNdeP8d6ct0.roa (hash: j/R2Lr63WXHx+MUqbKy/50ME+RSpa71cOXWo0ULL9Lk=)
                          2: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: moifoBOLFsyP7xAqwMRAtReG4Q/WeZsFGsoAINJYoQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:18:3c:78:0b:c2:2b:04:c6:b1:cd:23:f5:0f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Jun 16 07:02:50 2024 GMT
            Not After : Jun 17 07:02:50 2024 GMT
        Subject: CN=c1ba61217bb436e6d816d8f196d5630d7dc8c12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:04:c9:01:26:2b:9f:f4:d5:c2:bd:51:62:
                    f0:ce:13:07:ad:40:e1:6f:f9:39:aa:44:23:88:8d:
                    29:c0:70:86:5a:6a:17:2b:bb:7d:7f:e8:23:a9:89:
                    33:6e:e3:86:f5:c8:c5:b9:c1:f3:33:6b:70:e0:05:
                    f7:2b:c7:93:00:10:1d:26:10:c8:6f:9a:93:d9:37:
                    90:03:ae:ee:6b:d2:2b:64:af:be:ac:47:63:cd:74:
                    71:e8:46:62:15:46:9e:7f:77:3a:6e:a6:c3:9e:9f:
                    1f:89:53:69:8f:ac:ef:d0:d1:d0:89:fb:99:49:a3:
                    52:31:03:67:8b:cc:85:25:28:f4:36:e6:9f:15:1b:
                    12:d8:f0:de:53:17:06:e5:84:55:df:c1:6e:60:18:
                    94:c2:9d:a9:f7:17:4c:37:4b:4a:2b:58:a6:83:53:
                    4a:00:7c:6d:8d:eb:7e:b1:d8:d3:a9:c5:91:f8:f2:
                    c1:ad:40:b8:58:fe:4d:0a:2d:3f:61:7a:07:10:42:
                    bb:ae:62:89:ad:63:cd:66:30:86:f7:3b:e6:38:9e:
                    86:c0:22:84:55:6e:78:b8:67:e6:3f:5a:5a:d6:ff:
                    ed:38:b3:14:4e:94:1d:9f:55:10:bb:db:2a:de:22:
                    81:4d:f7:91:44:1a:4e:f7:05:3e:6c:30:6c:43:39:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:61:21:7B:B4:36:E6:D8:16:D8:F1:96:D5:63:0D:7D:C8:C1:2A
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:94:4b:2a:7a:77:42:c0:27:d4:c5:4f:ff:8a:17:6d:ca:ac:
         5f:f7:89:b4:c3:26:ee:dd:71:1d:95:f1:c1:d5:07:92:29:92:
         74:64:53:8d:14:57:10:eb:0a:73:fe:be:ac:f6:63:57:c5:c8:
         7d:bb:8b:47:89:ed:26:1a:d5:8f:98:f2:0e:69:7c:d2:9e:6a:
         50:bb:a7:ee:3f:f8:f4:68:49:c0:65:3f:54:39:63:ce:40:fc:
         50:c5:4f:5a:bc:59:41:5f:6f:5e:77:35:69:f9:3d:68:1a:65:
         42:7f:74:22:88:c6:c8:2a:be:56:0d:21:b1:6a:56:e4:38:d9:
         a9:7f:f5:fa:9c:3a:7e:ad:da:79:da:ac:f2:90:ae:82:51:6e:
         e7:1e:e4:2a:7e:b9:17:0f:6e:1b:21:7a:29:c8:d5:b4:92:01:
         1f:55:63:5a:fe:4b:f1:0b:b9:20:b7:ba:60:5c:42:a4:b3:84:
         76:20:d5:dd:fb:60:cd:62:f0:77:34:76:54:b5:fe:27:cb:cc:
         ee:96:d1:38:89:a9:6e:bf:3b:96:ca:d4:f3:85:81:05:16:25:
         eb:50:54:61:51:dd:69:64:55:99:40:ed:52:0d:4d:5f:bb:af:
         cc:6b:e0:3e:06:37:64:13:e9:d1:b7:25:4a:15:65:28:f1:d9:
         94:4b:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:58:28 2024 by rpki-client on console-ams.rpki-client.org