Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
File:                     H1PAbKeXbXN7I7xydooijDl_ry8.mft (raw, json)
Hash identifier:          8UU/3t7v6XNc+Fr0y8LjWPcU7vD0FGRGLOTn42+2O58=
Subject key identifier:   B6:21:B3:46:C8:06:16:53:BC:E7:47:B0:B0:C6:7A:47:B0:5A:19:A8
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Certificate issuer:       /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial:       019238B877DF4EBBC90E42B3D3CD483C5874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
Manifest number:          12DC
Signing time:             Sat 28 Sep 2024 13:01:06 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:06 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:06 +0000
Files and hashes:         1: AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa (hash: OEX1ZLz/Q8W3VSD1Jl6R186nQf1ltgKwGWR2ZQtX67Q=)
                          2: H1PAbKeXbXN7I7xydooijDl_ry8.crl (hash: 6S9M1wpti06g5+ebk62F64MDRe4YZGf9rCzFq3Re8uc=)
                          3: TGwpOWi-AJheGoPGrEc4BXQqHkw.roa (hash: 10AB8y1KmOv+A+cod240boMGbhvKEZ4R4VTxWH1/sYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:77:df:4e:bb:c9:0e:42:b3:d3:cd:48:3c:58:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
        Validity
            Not Before: Sep 28 13:01:06 2024 GMT
            Not After : Sep 29 13:01:06 2024 GMT
        Subject: CN=b621b346c8061653bce747b0b0c67a47b05a19a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:40:74:c9:e4:87:42:b9:31:9c:92:91:90:
                    d1:a5:ee:9a:10:73:20:78:f0:a6:75:da:a7:6f:fa:
                    c7:4b:58:d3:b5:45:8e:2a:12:55:01:8a:cd:8d:5d:
                    db:12:35:98:f4:ed:ad:5f:2d:e8:b6:eb:d5:09:29:
                    ed:68:5e:6c:d7:0d:7f:57:3e:9a:e7:0b:4c:1f:8f:
                    95:e2:b2:0f:e3:b5:3d:4b:e7:79:f3:93:32:d9:a0:
                    0b:db:d4:13:59:5f:f0:75:3f:7d:5b:6a:79:d1:6b:
                    17:8b:ad:66:e3:bc:30:32:f2:72:09:f9:0e:43:50:
                    ad:b5:53:06:0f:fb:b1:6a:27:e3:0d:70:9a:ab:4a:
                    5a:0d:28:5c:c5:a6:24:51:76:6e:d0:79:bf:94:7c:
                    c4:a4:81:61:13:72:b5:65:17:97:f6:62:ee:3e:e4:
                    fc:be:37:87:b4:29:6e:00:aa:92:ad:cf:e0:ca:2b:
                    2d:f3:32:37:c6:26:f0:7f:fc:63:e3:6b:f4:26:29:
                    45:8b:23:aa:f2:0e:17:2d:15:ef:f0:d2:f2:27:1d:
                    ad:07:03:94:fd:b3:45:26:4b:86:16:1b:69:1e:0f:
                    7d:c6:7a:6f:2e:5e:ab:53:48:50:84:6a:0d:33:c3:
                    9b:45:a9:cf:3d:d7:e3:ad:a8:dc:87:8e:28:ed:a4:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:B3:46:C8:06:16:53:BC:E7:47:B0:B0:C6:7A:47:B0:5A:19:A8
            X509v3 Authority Key Identifier:
                keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:c1:a9:9b:2e:4e:ca:4b:f1:93:9c:33:b2:4f:8c:0f:f6:
         fc:8b:5b:35:77:36:c1:29:9c:0a:69:43:c4:81:32:b1:c4:47:
         38:2e:2c:f2:e7:53:27:2e:16:2f:b1:6a:28:bf:05:cb:f4:97:
         fa:23:32:35:cb:06:72:f8:00:2b:47:a2:87:2c:6e:7c:b8:6e:
         f8:32:92:83:f4:0a:76:b3:37:b0:19:1f:9b:2e:50:03:ad:30:
         66:a8:4b:8a:40:b1:e6:6f:b4:77:95:1a:4c:fb:91:0a:ab:ad:
         81:80:a5:d7:14:34:67:89:d0:7b:82:d5:91:38:bc:73:ad:43:
         65:3c:d8:05:2f:88:8e:f2:3f:3a:dd:20:3c:81:4b:09:98:95:
         bf:59:93:50:ac:5f:9f:a4:8d:45:c3:d5:fb:e7:b6:35:ca:ff:
         55:c8:5f:03:44:65:c6:90:06:a1:fa:4d:ad:f1:a3:81:56:d0:
         11:c1:2a:eb:5c:f4:cd:3c:6c:ab:44:a6:b1:f7:dd:f8:11:a9:
         cf:05:1e:0e:e4:3a:12:49:63:54:59:aa:d3:c1:7d:e8:4a:ec:
         b0:84:53:96:4b:80:e4:40:77:19:f9:4c:2d:fb:01:38:ff:66:
         51:44:a9:0b:52:6c:fd:81:9a:8d:1e:07:87:dc:57:1f:2c:7a:
         36:ba:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:03:12 2024 by rpki-client on console-fra.rpki-client.org