Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          99LnIhLGiqhk11MLFZCe8EIAQWKqwNac14B0RnftKnI=
Subject key identifier:   F7:06:AE:71:DC:24:09:CF:63:82:9B:A5:AE:5F:D0:7A:5F:A5:93:10
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       018F8824746A0180A429659B21FFE467280C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          0E4C
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: 1LqretNV1bZvfI58WQLyxPKMKDs.roa (hash: JeaaDVGvdipxBJvAnra6aUoOXoRjyJHDznWXIJHpHdw=)
                          2: B5_PLFMTMr-Yi226cY7EfZbK4RE.roa (hash: inoWc64rSb5YZSj/JHl212KOGSILy6MwoGnq5lXP7vk=)
                          3: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: E/+YOOcbTgkW9UBMDIzKv2ug3qOZ3zn5D15L4gscH5I=)
                          4: KgXJh7l1LSW0ffz2tr5qblPqQvs.roa (hash: UbRRPoQzvBqn5L2Zq+IrNZ+EiABOsl3IxlpHzg/zrLM=)
                          5: LNaFovXEEUjxdoHg1fLCjM-NQx0.roa (hash: NNyIaNGcvOablfmmGfZD6uBrRNwdo6jnA6mKC9kz608=)
                          6: kr5rL_Z7xsvhkEk_AIK7NK733io.roa (hash: kP8Z7liCyjHZObvjEztxyEQ5NDI4DJIMCK6U5iDa9TM=)
                          7: nlDHQkn-DIYxrxjTGwo5Vktb-uE.roa (hash: DeHqdIwA2dfTmwITCQp1QdRUBcnBHFOJtmQBPv1RXRk=)
                          8: p0e9AeXOTDWL3drMN6lwi_LLOSU.roa (hash: uMK6pF7z1zI1fkX039/LevAdJ7mNOIoF37gSl021s14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:74:6a:01:80:a4:29:65:9b:21:ff:e4:67:28:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=f706ae71dc2409cf63829ba5ae5fd07a5fa59310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:20:91:47:82:22:57:80:79:1a:b1:48:a0:
                    4b:10:f2:75:c5:fe:fd:3c:2f:9f:0e:e6:ac:1b:57:
                    61:ae:f2:bf:19:16:db:ff:0d:c3:4b:18:39:f4:ee:
                    c0:41:8e:70:fa:dc:27:ea:39:0f:04:ad:7c:39:1f:
                    9b:93:c9:6e:0f:6a:32:09:9e:e7:66:d9:ae:e1:35:
                    bf:6e:40:8b:d6:f4:f7:67:21:8d:59:7e:59:ef:c0:
                    40:4e:83:ed:c5:60:0e:89:1a:9d:5a:20:10:05:ef:
                    4c:7f:38:d8:eb:79:d8:aa:b5:f9:4d:eb:57:2e:a5:
                    43:2c:e7:8f:8e:9c:1e:55:5b:f2:15:6d:a5:eb:bd:
                    77:ec:18:4a:32:7b:7e:5b:60:b0:30:d2:fa:dc:df:
                    3d:87:94:54:4f:8a:9d:11:a8:1d:a4:21:8f:dd:f1:
                    9e:6c:55:d3:ce:bb:ac:bb:27:f7:42:5f:a0:86:bd:
                    52:65:24:8a:2d:b3:a4:55:38:9f:32:3d:98:42:21:
                    31:c4:21:a5:70:bb:a4:92:9b:3b:37:6d:9d:63:d1:
                    66:4b:94:b7:a2:13:df:0f:b3:bb:5b:99:4a:4b:53:
                    75:ad:09:43:89:e6:6a:71:ea:aa:56:8e:53:68:1f:
                    9b:50:b8:db:58:cc:53:a0:72:72:fa:c6:9b:f7:28:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:AE:71:DC:24:09:CF:63:82:9B:A5:AE:5F:D0:7A:5F:A5:93:10
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:ea:9e:a8:7b:f5:4a:42:df:e7:92:ee:c7:85:41:f3:f5:
         5e:86:91:2c:8f:4f:22:35:ff:75:65:dd:cf:c0:17:fb:38:1a:
         c2:8b:11:eb:09:3a:45:cf:10:53:bc:23:b9:8e:ad:05:02:f6:
         65:0f:6f:6e:a7:ac:f6:8a:cd:b6:ec:a3:07:72:18:1b:e4:5c:
         82:52:c9:8b:c5:ed:68:b6:fd:b1:cd:7c:14:fa:34:58:da:28:
         5d:89:73:05:7e:46:f6:7d:92:70:bd:b9:81:9c:ab:69:3f:d4:
         af:15:7c:7a:af:c3:36:5c:ab:21:9c:fa:61:cd:9c:38:88:46:
         a4:bc:87:2d:91:f7:cb:68:f0:75:e2:e0:c6:8b:32:2c:7c:62:
         32:40:fb:4a:ab:6f:43:8c:28:fb:ae:fe:6b:20:b0:b8:e1:e7:
         c0:bd:7f:6e:d0:1b:47:02:a0:f7:27:85:8d:ed:df:33:c9:f8:
         2d:78:d4:36:53:0d:a8:ce:2a:d2:fe:ee:9c:11:8d:94:a4:6b:
         13:15:44:ae:d8:a0:d3:4b:62:87:7f:cd:11:e7:6e:b6:9e:61:
         1e:91:12:e6:a3:71:5d:c3:14:f4:6a:1e:c8:4c:77:64:fd:4b:
         49:12:5a:74:a3:af:4f:4f:f1:2e:9b:38:6b:01:0b:33:e8:54:
         0f:a9:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:44 2024 by rpki-client on console-ams.rpki-client.org