Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft
File:                     mhe_INhUCF1m-tFNux6PJq5jGEo.mft (raw, json)
Hash identifier:          23TjuOJt1VbSeOz9BbXyZGMtFs5cJkm3BKWDh0ONCAM=
Subject key identifier:   51:64:1F:F6:FA:7F:15:A5:4E:1A:8F:A8:6F:D0:E5:62:A8:10:EE:48
Authority key identifier: 9A:17:BF:20:D8:54:08:5D:66:FA:D1:4D:BB:1E:8F:26:AE:63:18:4A
Certificate issuer:       /CN=9a17bf20d854085d66fad14dbb1e8f26ae63184a
Certificate serial:       0190429DC1705EA412A99FEEB31DDE907093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhe_INhUCF1m-tFNux6PJq5jGEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft
Manifest number:          113F
Signing time:             Sun 23 Jun 2024 01:02:33 +0000
Manifest this update:     Sun 23 Jun 2024 01:02:33 +0000
Manifest next update:     Mon 24 Jun 2024 01:02:33 +0000
Files and hashes:         1: mhe_INhUCF1m-tFNux6PJq5jGEo.crl (hash: K3EMFD53TYqrA55c22BfpdYrhmPMjxfKY1OOqKGCeak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhe_INhUCF1m-tFNux6PJq5jGEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9d:c1:70:5e:a4:12:a9:9f:ee:b3:1d:de:90:70:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a17bf20d854085d66fad14dbb1e8f26ae63184a
        Validity
            Not Before: Jun 23 01:02:33 2024 GMT
            Not After : Jun 24 01:02:33 2024 GMT
        Subject: CN=51641ff6fa7f15a54e1a8fa86fd0e562a810ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:ba:ad:e4:51:9a:9d:9b:da:9f:f0:89:0d:
                    de:c8:d2:b9:92:d1:9f:4b:e8:6f:54:1a:04:75:69:
                    08:bf:a6:fe:84:83:99:d9:cf:5f:9c:14:18:f3:b8:
                    aa:78:04:7e:00:74:09:a6:bc:7e:cd:3c:e1:71:28:
                    fd:d1:a7:ac:75:5d:4e:ef:d7:e1:fe:45:2b:2e:f3:
                    5f:59:94:2a:6f:70:97:b8:4b:79:c1:03:a4:0c:4f:
                    4b:23:c1:f9:70:2e:a4:13:e2:57:b6:b4:c7:db:53:
                    37:91:06:53:23:21:6c:94:fc:75:29:a8:13:82:a7:
                    ed:55:40:d0:34:2a:28:89:78:1f:67:21:ab:92:61:
                    28:c9:55:5e:fe:df:d4:5b:f0:95:54:ce:2f:ce:9a:
                    58:c7:55:5c:94:1b:93:09:3a:52:09:c7:d4:c0:db:
                    04:f1:0e:cf:04:ce:0c:c0:24:ef:11:f8:35:d9:e6:
                    e8:a4:47:b2:0d:57:a7:64:76:ec:73:81:d6:29:e3:
                    b2:f3:b7:54:43:ce:25:6d:d5:c6:31:f2:75:8f:4e:
                    fb:0f:6e:68:d7:d5:5d:fa:a5:a0:e9:d6:46:8d:19:
                    c6:b0:db:8b:14:c4:97:ec:00:9c:e1:41:d6:6c:74:
                    f8:86:fc:ab:e9:ad:6d:f0:ba:2f:95:03:6a:92:28:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:64:1F:F6:FA:7F:15:A5:4E:1A:8F:A8:6F:D0:E5:62:A8:10:EE:48
            X509v3 Authority Key Identifier:
                keyid:9A:17:BF:20:D8:54:08:5D:66:FA:D1:4D:BB:1E:8F:26:AE:63:18:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhe_INhUCF1m-tFNux6PJq5jGEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cf3ccc-45c0-4d56-a776-b23798cff0f7/1/mhe_INhUCF1m-tFNux6PJq5jGEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:b7:e9:0e:e4:6c:25:e1:0a:37:b6:ce:86:c5:eb:26:78:
         f0:20:e6:8a:d8:1f:e2:f6:cf:6f:53:3c:38:aa:52:9d:b7:6a:
         11:f9:03:0b:9b:84:21:2f:ef:6f:d3:8d:0d:f9:ed:00:99:ab:
         fd:36:10:d9:af:c2:5a:bb:26:70:af:36:60:1b:ea:38:db:bf:
         91:66:b0:d8:b3:75:56:af:c9:e2:04:3e:d4:9b:89:a5:29:e8:
         11:4f:56:4e:1f:db:06:bc:8b:f5:20:7a:bb:38:df:cb:36:32:
         2b:1f:3c:96:32:dc:f1:04:73:3e:d9:15:32:e4:32:f7:68:48:
         8d:c8:15:57:46:36:c3:98:86:a8:7e:6e:c8:93:9b:aa:d9:9d:
         8a:bd:cf:f7:88:5d:60:4b:1e:14:f6:9f:d5:4e:0e:8f:cf:3c:
         98:11:a1:a3:f3:51:92:bd:ec:a5:2f:78:42:55:15:4a:59:8a:
         76:7e:be:ab:2d:dd:ee:9a:07:0d:df:f5:98:b7:7c:94:68:19:
         cb:1b:8a:66:6d:d8:8a:38:2d:43:da:0f:76:41:ef:3d:2b:b7:
         9c:10:2f:34:92:d4:e7:2f:2a:3b:93:15:5b:2c:1c:98:98:70:
         ba:ae:e0:27:a0:6c:8b:c0:99:35:c6:40:a0:f6:50:32:17:1b:
         0f:2a:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:13:50 2024 by rpki-client on console-fra.rpki-client.org