Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File:                     HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier:          FQcsMiyR/EdxUfHc7W8jSiAK4KsyyR+OWNm9B4QLCnA=
Subject key identifier:   44:3D:04:B1:F2:E0:75:2A:24:5C:FB:33:0B:94:9C:86:62:DE:03:1D
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer:       /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial:       018F847E40D724A2E43E3FE390B5E43F499D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number:          10DC
Signing time:             Fri 17 May 2024 03:00:17 +0000
Manifest this update:     Fri 17 May 2024 03:00:17 +0000
Manifest next update:     Sat 18 May 2024 03:00:17 +0000
Files and hashes:         1: 9Gckpgj615o1Dmz5QGu19vjq0cs.roa (hash: LS57GAHOJ/d3/qOCgfLpgld5fd4V/+mYjZmUjPMD+6g=)
                          2: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: 2fxwLBSBuj6/ejNw4ntShyxTb4HbMhMfPQFMLlgOfyQ=)
                          3: V1-RA5UhLbt5fQNNb8BDNPf3TVw.roa (hash: oHxFkGdXz6+irsKwlvdmJbfmp8bgy4ZpElgxyHWGfw8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:40:d7:24:a2:e4:3e:3f:e3:90:b5:e4:3f:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
        Validity
            Not Before: May 17 03:00:17 2024 GMT
            Not After : May 18 03:00:17 2024 GMT
        Subject: CN=443d04b1f2e0752a245cfb330b949c8662de031d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:da:5e:9e:b0:64:0f:03:76:97:7c:be:79:
                    38:07:09:1d:6a:80:90:fa:44:72:0c:41:05:f9:6f:
                    81:ca:ba:87:d0:44:97:2b:0a:33:06:00:ee:a7:f0:
                    78:50:54:06:ab:c9:ce:56:34:1a:ec:f9:fa:fe:e1:
                    03:d6:86:25:8a:96:93:2c:a6:e3:31:f4:4c:9f:3d:
                    e1:ca:6d:ce:33:6c:23:3f:97:26:fc:4a:67:3e:75:
                    22:9a:13:a0:ae:b0:47:71:69:21:6a:65:6b:30:94:
                    d5:f8:a4:78:26:f7:a7:4c:fd:94:85:c8:3e:8e:5f:
                    5e:b6:8b:c0:af:a3:6b:f7:9f:10:32:ef:56:73:f3:
                    f9:d0:5c:78:e9:ca:39:0f:c8:fe:23:c5:5a:10:14:
                    04:1f:96:83:bb:e3:c2:40:1d:79:05:41:40:f8:02:
                    f2:17:5d:13:e0:7c:8e:0c:94:a9:6a:80:7c:f4:8b:
                    7a:af:97:12:cd:7a:db:5a:38:94:0e:4a:70:18:a1:
                    eb:a0:4f:a4:d3:f1:3c:77:e0:25:71:0c:1b:44:a9:
                    3d:f4:3a:43:8c:7d:1b:fc:4f:17:fc:0b:b8:62:90:
                    6d:f8:17:8e:1b:6c:f3:7e:f3:ff:48:59:2a:ec:91:
                    ac:b3:53:4e:c8:23:f4:be:b5:1a:e5:b2:53:40:21:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:04:B1:F2:E0:75:2A:24:5C:FB:33:0B:94:9C:86:62:DE:03:1D
            X509v3 Authority Key Identifier:
                keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:75:43:c5:66:6c:04:c2:92:20:78:82:8c:bf:07:f8:2f:94:
         ef:c8:90:35:5c:32:12:27:1f:78:1a:fb:12:24:1f:c5:66:5f:
         4a:64:80:9e:55:f5:37:d8:d1:f8:22:47:2c:42:46:fb:24:f8:
         4e:cd:77:f7:0d:f1:ca:df:e6:ce:bd:49:ae:11:73:28:e4:ba:
         18:76:9f:b9:95:81:55:97:63:67:81:22:ec:a0:42:68:c0:cc:
         e8:75:9b:8d:19:ad:4b:fd:6b:30:b4:94:fe:48:ef:3f:9d:64:
         0b:b5:9e:3e:89:6b:52:67:21:ab:88:29:03:07:6a:0a:7c:f4:
         8f:66:85:23:d5:29:22:94:c3:d6:b4:bd:63:97:59:95:64:f2:
         56:6f:9e:2f:8f:b8:b5:be:35:9f:ec:af:3d:4e:26:7e:57:59:
         5b:87:c2:25:f3:b3:36:7c:85:d5:92:ed:61:f7:d6:2a:ef:a3:
         f8:85:70:04:67:45:b8:89:75:4f:8a:b6:4e:b7:5c:41:38:20:
         ab:b8:9b:9e:7a:05:e4:9d:8d:b7:a3:5f:93:fb:e9:e8:b8:50:
         a9:dc:70:b0:0d:58:6f:0f:86:f5:28:51:f5:21:ee:a7:c5:3b:
         1d:8e:e0:26:b1:8c:4a:34:b7:85:e3:6d:a5:d7:b1:ab:1b:9d:
         f6:d4:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:22:01 2024 by rpki-client on console-ams.rpki-client.org