Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File:                     HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier:          w50klQZhnVxfUkDzXpfczf7Pjev1bYLQxtaaqPlGMY8=
Subject key identifier:   4D:53:BF:45:11:66:B6:4A:C3:43:9F:87:89:34:83:BD:4A:30:3A:28
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer:       /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial:       01901DEAE8F840ED104776C0B93E34A498BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:52 +0000
Files and hashes:         1: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: HSNvgkUxmDpWK5ZbNXg6/nCbIiBQERoV8XtD31Qm+zE=)
                          2: VrhIJtc15DGMkDMkcar9JzzqBGI.roa (hash: Ht+k5tKIZWqL0+48E54gHUhHu0lSbn4Trz0/cM60FDc=)
                          3: w0Wn88J3lb0R0Bz4JV6tMzaQzO8.roa (hash: OYOalIP9eYwBJQXAADxWmL+TdpKkk9vOIQkuaoIE860=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e8:f8:40:ed:10:47:76:c0:b9:3e:34:a4:98:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
        Validity
            Not Before: Jun 15 22:00:52 2024 GMT
            Not After : Jun 16 22:00:52 2024 GMT
        Subject: CN=4d53bf451166b64ac3439f87893483bd4a303a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:4d:31:ed:7e:ba:a3:5c:cd:ee:9d:0b:73:
                    f2:46:b9:70:6d:67:b8:c9:f5:ac:2b:0c:87:53:86:
                    f7:17:6d:b9:65:e5:fa:07:51:7b:13:d9:0f:56:63:
                    81:3f:d6:39:9f:8f:3d:dc:8e:27:29:10:0c:dc:1f:
                    9c:97:24:97:af:f0:11:9b:eb:91:50:b5:93:f9:7c:
                    d1:f8:e8:7c:ea:16:72:00:52:bb:89:73:10:7b:cb:
                    cb:45:80:98:cb:97:ec:8b:07:24:97:90:b6:43:cc:
                    7a:27:8a:c0:15:7f:d3:b0:0c:2f:7a:9c:e6:93:d0:
                    6a:73:67:d1:9e:a5:15:dd:97:30:d5:48:bd:1e:e4:
                    14:05:2f:54:c2:0b:d7:ee:da:b6:9f:ff:9e:ae:8d:
                    04:a9:85:ba:41:bf:76:84:0a:90:39:21:65:d1:4a:
                    27:8d:49:2d:13:c0:3b:11:01:0e:d5:12:1f:b6:46:
                    19:23:cd:76:03:b0:11:41:14:1f:7d:9e:1b:e4:43:
                    71:f0:82:5c:a7:5f:90:90:e6:8f:5f:8d:1e:fb:b3:
                    64:3d:be:8c:2e:38:2b:f0:94:54:1b:bb:da:04:bd:
                    87:e1:3e:ef:d8:14:3f:67:38:3e:10:d7:ad:5a:3d:
                    0b:25:82:6f:51:78:78:21:b4:a1:61:ce:4c:37:b0:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:BF:45:11:66:B6:4A:C3:43:9F:87:89:34:83:BD:4A:30:3A:28
            X509v3 Authority Key Identifier:
                keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:3a:67:28:3a:7e:35:3d:e2:01:9a:07:70:45:4e:51:48:90:
         a9:38:20:8b:79:38:d4:09:2e:1f:ba:2e:cb:e9:a5:2d:97:51:
         26:a3:fa:74:c4:de:82:c4:7f:1a:12:0d:3b:6e:1f:49:a8:31:
         6e:bd:5d:bb:a8:4c:69:11:a8:68:d3:1c:ae:5f:b8:cc:e4:1a:
         c5:b9:36:38:8b:41:38:2b:b9:46:88:db:c0:72:80:21:9a:0a:
         b6:a3:5f:6d:08:07:f2:ec:46:30:22:9c:9b:6b:bb:08:f0:0a:
         80:a7:e6:b8:b6:11:c6:9c:d2:ed:17:f8:0d:d2:79:78:c5:d8:
         53:b0:28:da:1d:cb:15:d4:0e:97:f9:73:21:3b:9a:0a:a8:9d:
         ad:9c:93:20:b4:d4:6b:b9:2d:2b:ac:cf:6c:f1:c3:c7:97:ff:
         d4:fa:92:f9:7e:9a:ae:7a:f5:d5:f9:3b:d2:dc:87:4d:0c:c2:
         60:22:aa:5e:4e:17:99:11:d1:cc:43:d6:6a:66:71:ff:ac:6f:
         60:29:aa:73:2d:03:ef:bd:29:2a:0f:8e:bd:c8:ab:d1:91:ff:
         2d:1c:d3:49:0d:d7:45:1b:da:8e:5e:b4:d7:b6:ac:63:4f:ac:
         d9:a9:2f:10:11:33:5a:1e:b2:b9:a8:2a:98:3c:1f:b2:fa:50:
         46:c6:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:16 2024 by rpki-client on console-fra.rpki-client.org