Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          bQauxYNCNbBrbTI0RCCss9J0RUu9qZMU6/MQUgrpYKA=
Subject key identifier:   DF:53:D1:AF:5D:BD:C9:EB:82:28:91:1E:96:15:11:0A:56:A8:D7:ED
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       01901E5895AA3288D0EBCC6DA604D12B21AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          070C
Signing time:             Sun 16 Jun 2024 00:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:40 +0000
Files and hashes:         1: 26vdi3i3-coQYIKBdb4bkDvKg5c.roa (hash: 2KcMWsKD3i1cs5U/nnczaE0l7vEhxTZrXosDte6EWyA=)
                          2: 7rVjxosQnGiU5mwut_AFDi6Q8Vs.roa (hash: 582qOKWd2kg9kfGJt6Cr5ES3veuiAWpDTaXK9dyqv44=)
                          3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: 5AWajbEk1995QjXOrPHzIlFb/Lde+K1GmByoOj8JEkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:95:aa:32:88:d0:eb:cc:6d:a6:04:d1:2b:21:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Jun 16 00:00:40 2024 GMT
            Not After : Jun 17 00:00:40 2024 GMT
        Subject: CN=df53d1af5dbdc9eb8228911e9615110a56a8d7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:b0:7f:47:05:7d:0a:f4:bc:da:bd:aa:06:
                    c5:55:13:2d:3f:3c:af:bc:ca:4e:9b:74:52:aa:63:
                    8c:8a:2b:ae:f3:56:02:b5:d3:e7:bd:a7:fb:50:22:
                    e1:b9:5f:ee:e0:f8:dd:b0:80:cd:87:b5:87:c3:9b:
                    21:f9:6a:c2:6f:2e:4e:68:3c:f3:22:f6:24:9c:a4:
                    f1:f5:00:09:ba:ce:46:46:41:7d:88:3d:02:1f:6b:
                    98:a1:ee:76:5c:18:3d:d9:05:c3:09:10:70:15:c8:
                    3b:d6:ab:ce:6a:01:13:26:5c:58:55:67:bc:e4:fe:
                    11:12:55:1b:7f:ce:3c:4b:cf:59:f3:79:e7:2f:9d:
                    69:c2:b0:b8:a4:84:46:67:f6:24:78:c2:14:b2:0e:
                    31:74:42:7e:54:b4:cb:3e:e3:1e:3f:84:46:4c:f0:
                    16:88:51:af:5c:86:ae:b9:df:ab:49:86:67:b2:59:
                    6b:c2:d4:63:ab:cb:60:96:d7:81:37:af:93:86:11:
                    d0:f2:a9:a5:6b:2c:0a:97:bd:13:6e:f1:74:6b:8e:
                    85:64:2b:48:1b:15:82:32:50:6d:f5:5e:57:cb:3a:
                    c6:19:7d:02:e9:91:7b:37:52:bd:9d:ae:84:27:26:
                    b1:5d:d2:9e:a1:c6:ef:b9:2a:b5:c2:1f:3b:0e:ba:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:D1:AF:5D:BD:C9:EB:82:28:91:1E:96:15:11:0A:56:A8:D7:ED
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:4a:53:00:dc:bd:64:bd:f8:14:98:18:68:21:32:3f:e2:
         cd:d3:dd:10:bb:9f:49:a2:26:ef:9f:37:02:4a:e9:dc:29:54:
         ce:99:58:f9:ba:fb:3d:6c:a5:7c:5c:93:0f:82:70:7f:af:ba:
         7e:75:1d:a2:63:64:20:22:6c:f1:9b:49:41:e4:b6:76:81:a8:
         d7:04:6a:eb:10:14:96:ae:66:3d:32:54:5c:78:9d:f2:4d:7e:
         1e:4a:34:70:d3:39:bd:1d:ce:93:71:19:f4:e7:30:22:dc:7b:
         55:c2:93:55:73:4e:cb:ae:01:18:32:20:10:5b:1f:b6:60:68:
         d0:1a:c7:50:49:d6:bb:a5:cc:fe:fe:9e:d4:ca:49:44:9f:01:
         68:f3:ec:3f:06:b5:de:8e:22:f2:d1:97:bf:4a:87:e9:53:48:
         b8:2b:a0:a4:38:3b:d8:cc:ea:d1:b6:2d:13:99:8c:37:8c:a1:
         e6:ce:73:6c:32:c1:23:ed:86:7e:27:63:a4:58:8c:88:ca:c7:
         16:26:ec:a9:a7:27:5f:72:06:b5:9b:5c:de:f0:7d:37:da:62:
         8a:b1:59:2b:a0:53:83:60:1b:34:2a:6d:fa:4c:9d:e5:67:22:
         14:71:9b:02:7c:40:44:6e:f7:11:1c:a5:a8:b7:85:40:a5:b7:
         a1:f7:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:31 2024 by rpki-client on console-fra.rpki-client.org