Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File:                     hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier:          5OibiMvoewC3gclhAKJ7EyYoe51uLiCLuC00OG3+2jk=
Subject key identifier:   DD:49:88:2F:0F:78:08:26:37:0D:30:B3:10:CA:46:01:44:6D:53:E0
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer:       /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial:       01901DEDB2AF376AD97FC7DAAC543B76F685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number:          0DE3
Signing time:             Sat 15 Jun 2024 22:03:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:55 +0000
Files and hashes:         1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: UuHgumAiOS8BqCdTo0kVCUaKhCtWDJhSmY1A9lWFVP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b2:af:37:6a:d9:7f:c7:da:ac:54:3b:76:f6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
        Validity
            Not Before: Jun 15 22:03:55 2024 GMT
            Not After : Jun 16 22:03:55 2024 GMT
        Subject: CN=dd49882f0f780826370d30b310ca4601446d53e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4e:48:db:af:66:8f:94:94:b0:e7:40:65:84:
                    3a:2a:21:c4:b4:c1:4e:4d:1d:7f:4a:aa:70:89:bf:
                    ef:f2:e4:10:24:cb:b2:d1:05:64:2a:63:55:f8:ea:
                    41:6d:4d:47:54:8d:76:6a:6f:fa:b4:bb:47:b2:6b:
                    5d:8e:b3:56:27:2e:8b:77:a0:49:2f:6c:27:f7:34:
                    f2:53:84:49:c5:9a:c8:f7:44:0f:1f:77:56:db:f2:
                    e9:73:dc:5d:a0:3b:78:fc:08:fb:f1:6f:4d:b8:51:
                    82:c3:2d:fa:b4:ef:05:82:b5:11:c6:84:71:c1:b6:
                    aa:75:60:c2:3b:db:05:2e:94:55:be:6f:a1:f8:7f:
                    86:0f:ea:bc:84:fc:d9:11:fe:b1:d9:12:a8:8f:95:
                    df:f9:b3:17:55:fa:bc:fe:d5:76:01:d6:ff:ed:95:
                    73:6e:84:62:b8:65:a6:76:f4:4f:98:38:70:7e:c2:
                    0b:2e:15:c1:d0:a4:2e:cd:32:f2:e7:c3:41:bf:69:
                    37:4d:b6:4a:ff:9c:94:ca:bc:c6:b8:29:94:55:92:
                    3c:aa:eb:67:d1:c8:c5:86:95:2c:2a:1e:b9:8f:65:
                    62:ab:62:70:3b:11:34:7b:ef:37:47:db:e1:8e:8a:
                    19:52:e9:4b:ab:06:ca:3d:99:29:17:b6:40:ba:be:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:88:2F:0F:78:08:26:37:0D:30:B3:10:CA:46:01:44:6D:53:E0
            X509v3 Authority Key Identifier:
                keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:5c:d8:f6:2d:69:e6:31:64:9d:20:fe:ca:7e:36:62:05:
         ce:23:a2:3b:1e:be:f9:11:ae:5f:75:09:ef:80:f6:03:bd:0b:
         ae:76:43:6a:35:55:9f:cc:99:d0:af:38:f5:69:9f:fc:bf:e6:
         7f:85:0d:cf:a6:44:18:a9:c1:c7:6e:4d:98:fb:98:8e:de:fb:
         e2:4d:02:f8:60:6e:74:f5:dd:a2:88:49:16:d6:97:dc:1f:87:
         68:17:6a:73:f1:11:c1:1e:f1:6a:fb:5d:30:09:2f:7f:3b:c0:
         67:ae:91:4a:b7:cc:a8:36:0c:5d:86:6d:94:2d:22:59:59:36:
         3b:9a:4c:3b:ff:75:c9:4a:bb:1d:01:6b:f3:87:e4:bb:8f:3d:
         3d:d2:61:76:80:34:f9:ac:17:5d:c9:b9:51:d4:99:e6:fc:58:
         bf:a5:e6:5d:ba:a3:f3:43:52:2f:77:e7:cb:c1:71:a4:10:93:
         07:94:a6:c6:72:92:c3:f3:e3:ce:d5:60:b6:8e:64:bf:7c:fd:
         8e:5a:0a:a3:7a:1d:1d:4a:e5:6e:0b:e7:d5:8d:22:1e:e3:a3:
         03:2c:5b:c7:54:3a:29:85:5a:42:6b:18:a4:80:33:30:72:f6:
         9a:4a:27:73:c3:5e:99:0a:60:c6:5c:98:04:84:b6:76:32:6f:
         bd:68:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:42 2024 by rpki-client on console-ams.rpki-client.org