Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
File:                     hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft (raw, json)
Hash identifier:          z0alHHwV3c5YM4XOuq6/1t9IPB46IIJF1P4BH9uULEc=
Subject key identifier:   FD:D0:25:97:E3:F1:BB:D2:5E:4B:17:C2:6E:63:21:C2:C1:C3:BA:90
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Certificate issuer:       /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial:       01901E8F72863447574FAA782E2001C29FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
Manifest number:          0C02
Signing time:             Sun 16 Jun 2024 01:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:35 +0000
Files and hashes:         1: 9okTYQzs3mbOwOKEKbSIfPkMutw.roa (hash: scohdNQB54P9dZ3jo1e+R82GMJ05U5dDa7UFtWsehpQ=)
                          2: hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl (hash: dyQabYzsKvozjyFbLX8DcB00/SB/HjE1dFjx52RDyww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:72:86:34:47:57:4f:aa:78:2e:20:01:c2:9f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
        Validity
            Not Before: Jun 16 01:00:35 2024 GMT
            Not After : Jun 17 01:00:35 2024 GMT
        Subject: CN=fdd02597e3f1bbd25e4b17c26e6321c2c1c3ba90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:41:b3:30:83:51:b0:11:4d:c9:f5:28:ca:
                    fb:5a:28:f9:12:d0:9a:47:35:46:e7:5c:2d:1e:4e:
                    52:00:94:44:92:70:9a:d3:5d:6e:59:8c:e6:36:01:
                    d8:b1:fb:a1:d2:ed:57:1a:ac:83:03:3b:84:33:b3:
                    b8:10:15:03:b5:73:4a:cf:49:03:16:14:18:84:8f:
                    d1:50:95:2f:1b:61:ec:af:86:0b:46:a9:e1:bd:fc:
                    a3:08:9f:96:9e:78:10:c2:e7:70:4d:17:b8:99:d0:
                    d1:51:a7:23:88:d6:48:1a:91:16:2f:35:20:97:73:
                    17:19:d1:f9:52:53:2d:f9:53:51:86:04:7f:8f:08:
                    29:fc:a5:89:91:02:90:6d:a1:66:37:a4:5e:03:f7:
                    5d:c3:7a:86:91:05:70:bb:26:95:7a:02:d5:77:a7:
                    42:69:45:3b:e8:49:b6:d6:47:c5:f9:f8:14:4e:37:
                    00:0e:53:32:7e:16:24:c7:b9:c9:c2:3b:25:7c:71:
                    06:6c:c3:95:cb:74:ab:cc:14:5a:e5:df:6e:9f:95:
                    ac:29:15:ce:de:e7:f8:1c:86:f1:c1:3e:91:3d:b6:
                    f2:15:f3:3d:62:bb:b4:2b:5a:ac:d7:ee:03:d8:68:
                    05:13:fa:c7:3b:72:1d:03:2d:57:8e:47:f9:91:61:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:25:97:E3:F1:BB:D2:5E:4B:17:C2:6E:63:21:C2:C1:C3:BA:90
            X509v3 Authority Key Identifier:
                keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c4:19:14:39:43:e4:82:03:47:d8:88:49:11:86:e7:60:96:
         af:06:0e:05:a4:c5:78:85:f7:59:5e:7b:29:0e:48:36:be:88:
         d5:8f:32:ab:9e:87:44:42:0e:1f:fa:1a:4d:d7:01:a2:80:9d:
         a8:04:f9:1e:d5:a9:6e:9f:34:43:22:b7:ac:0a:a6:28:74:64:
         4b:90:bc:da:dd:ad:ff:bd:7f:43:40:a5:59:e6:d3:f2:a4:e9:
         7d:34:ce:67:78:72:09:39:71:18:b7:00:8e:99:a9:f8:b4:2e:
         ec:cd:42:1d:6c:fa:a3:ce:bc:92:64:f4:01:d3:5c:ff:58:f9:
         32:dd:7d:ed:88:b6:a7:33:50:e8:fc:e8:47:f6:ee:e4:9c:6b:
         8a:cb:5f:43:95:8a:f5:78:f2:1e:2b:94:c8:a8:8d:39:f3:f2:
         1a:d8:a1:f2:04:a2:d3:1a:b0:71:c0:68:e2:50:05:a5:7b:91:
         0e:e5:13:f5:06:9b:55:bb:85:2b:5d:47:73:b3:fd:40:b0:b4:
         ce:01:a4:56:75:ec:f5:9b:05:7d:d3:68:b3:05:7c:c4:28:94:
         24:b9:b3:d5:00:23:60:03:57:2a:f0:2a:5c:79:1e:56:5b:76:
         62:36:c1:5e:b0:c0:e2:ed:a9:66:e6:b1:10:57:39:01:5c:26:
         de:42:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:49 2024 by rpki-client on console-ams.rpki-client.org