Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File:                     HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier:          Udepb1bLZ1hLyNpjnNzmqN1FkShQAM7nVwfnS9ywRqo=
Subject key identifier:   43:02:36:A2:C1:9D:D4:13:DE:A9:84:5C:91:C5:C2:29:F2:B1:18:6D
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer:       /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial:       01901CD823C08E582D8E5EFCF59903DBFD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 17:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:45 +0000
Files and hashes:         1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: DFixWXAzRADp4IB9BT68fRrTDtfnyfkHBbvdT3KrziI=)
                          2: c6jmPxm6QNo7BT0i7_LRupo9C-U.roa (hash: 4i6Qq9Xs0mMF9rLEDQxasHhaWU6AsnktyD8wJFZZeFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:23:c0:8e:58:2d:8e:5e:fc:f5:99:03:db:fd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
        Validity
            Not Before: Jun 15 17:00:45 2024 GMT
            Not After : Jun 16 17:00:45 2024 GMT
        Subject: CN=430236a2c19dd413dea9845c91c5c229f2b1186d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:b5:7c:43:17:3d:e7:a1:5e:79:7d:72:da:
                    64:8a:67:37:25:71:19:ec:ae:16:9a:a2:18:b2:8e:
                    de:12:27:57:9c:99:3c:51:cc:fc:90:03:97:88:34:
                    51:4d:6b:28:56:16:e1:82:5e:20:1a:ae:23:67:0f:
                    06:fd:fb:dd:14:cf:7a:4c:0f:d2:ed:52:20:be:6c:
                    26:a5:b7:1e:1d:64:8e:22:f5:80:95:16:45:de:8b:
                    5a:5c:8c:8c:84:24:6d:71:16:8a:8c:c9:86:9d:57:
                    7f:30:d1:81:71:94:64:83:12:a2:20:3f:1d:e7:28:
                    61:30:18:ab:8b:d7:2c:c4:0b:e0:96:de:ac:64:b2:
                    02:96:9c:d0:48:77:0c:0f:a1:f4:d9:b4:99:d1:2c:
                    13:bf:b3:08:8c:7a:45:e4:f2:c5:81:2c:fd:c3:d6:
                    35:0e:a5:76:17:3b:08:18:d9:c0:4c:1c:a9:3f:93:
                    ad:0e:fd:c9:d4:25:53:4c:8d:9b:aa:9f:0d:39:f4:
                    68:ff:7a:84:ad:00:d8:91:2b:44:80:eb:41:0b:e3:
                    4d:30:5b:64:09:11:52:aa:29:4c:50:e8:09:c7:e4:
                    ee:7a:b8:ac:f8:20:60:f4:e5:23:24:7a:d3:8e:43:
                    49:4d:36:0b:58:42:ff:f9:97:f0:5d:ec:71:9d:4d:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:36:A2:C1:9D:D4:13:DE:A9:84:5C:91:C5:C2:29:F2:B1:18:6D
            X509v3 Authority Key Identifier:
                keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:aa:a2:55:36:8f:76:00:4b:82:49:51:42:5b:8d:0c:b2:
         ce:e0:57:09:0b:b1:3c:7f:38:77:c4:75:ee:8c:ac:ea:c7:20:
         f3:ee:17:1b:bc:44:76:6d:46:8e:da:de:4b:bb:39:6d:42:9f:
         29:43:be:08:43:8e:33:38:98:b2:97:b2:6d:16:5e:f9:1e:2c:
         b1:af:ba:60:68:6c:8a:5f:3d:6f:74:2f:cb:52:84:01:f7:89:
         00:e7:87:89:16:30:6b:92:75:0b:1e:da:72:cb:0a:8a:88:f0:
         98:04:3c:1d:51:fa:b8:7a:ca:b6:b4:f4:34:ce:9e:51:04:3c:
         ce:14:7a:3a:72:42:65:6a:2c:82:98:74:7b:65:06:6e:ee:ee:
         b6:58:a6:8e:35:6e:ad:ba:b6:ec:55:29:5d:5c:23:4c:40:b3:
         a8:16:89:4b:c5:a3:5d:31:a6:8e:98:64:73:8f:e4:8b:d5:d3:
         d1:b3:3a:48:c5:4f:6e:81:49:ee:6e:bc:f0:15:96:01:59:d5:
         7f:31:d3:95:19:f7:f5:3e:1d:06:d9:43:aa:be:ce:69:ff:d6:
         39:f0:a9:3f:32:5f:39:ba:38:cd:c1:72:eb:5d:54:29:80:1f:
         ad:9c:59:9a:54:f0:58:b3:60:ad:22:12:17:66:50:d0:7b:90:
         87:51:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:21:20 2024 by rpki-client on console-ams.rpki-client.org