Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File:                     HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier:          BiMyOeAzH84Mk6dgxI8h6V6eboztVsUVj0HDVFKNqVY=
Subject key identifier:   61:56:79:6A:C2:E7:25:80:09:2E:AD:76:FC:B3:DA:DB:3B:84:11:26
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer:       /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial:       01901DED2EAB50623FCD79388E16735498CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number:          06EB
Signing time:             Sat 15 Jun 2024 22:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:21 +0000
Files and hashes:         1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: 4pm7J1C5l577K3rHrHhPLoNwgU3adv457icWOhE80Hg=)
                          2: fQ8GGWabz6XOD-GzFh6FmgBxLUE.roa (hash: 2l3T6fuKivZ+iVxHzU6/EK2em1iBu64eoVxs9hwBDiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2e:ab:50:62:3f:cd:79:38:8e:16:73:54:98:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
        Validity
            Not Before: Jun 15 22:03:21 2024 GMT
            Not After : Jun 16 22:03:21 2024 GMT
        Subject: CN=6156796ac2e72580092ead76fcb3dadb3b841126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:92:2e:2c:5f:31:21:9b:a9:fd:17:76:ed:
                    c5:18:d5:57:2d:12:f5:97:97:85:3f:0b:8d:6e:b0:
                    a2:a8:95:41:bb:4c:90:83:29:c8:e8:1e:85:d2:54:
                    19:d2:48:ec:11:6d:ec:eb:22:a4:6c:8f:c1:09:08:
                    b6:14:23:a1:75:d0:30:08:51:6d:8f:40:25:4c:25:
                    f3:c2:ae:c5:1d:b9:e6:c1:5e:d2:29:1f:24:c0:9d:
                    c9:4b:bc:8d:b0:28:4d:06:17:11:02:c4:15:b7:1e:
                    0c:68:ab:c7:95:67:2e:f4:49:da:d2:2c:fd:3a:3b:
                    2b:56:ad:ec:c4:d2:0c:11:89:d4:3a:ce:85:5f:3f:
                    18:81:76:52:13:e5:fc:9a:32:30:46:d1:2f:46:bf:
                    95:54:e3:1d:1c:0d:e8:6a:e5:21:fc:c2:a7:b7:40:
                    61:16:96:ad:5d:12:d6:f0:73:09:66:f4:8a:88:e5:
                    b1:80:83:a3:ff:a1:fb:59:8a:5e:3c:e3:4f:4c:76:
                    5f:2e:20:73:eb:0d:2f:15:60:fc:28:f2:b2:ec:37:
                    88:b2:1b:82:96:e7:72:49:dd:15:72:2f:85:5e:30:
                    35:ab:fe:e4:fb:95:cf:6a:12:19:bd:27:08:64:c4:
                    d7:13:68:15:85:f5:33:a5:8b:7b:1d:73:66:11:90:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:79:6A:C2:E7:25:80:09:2E:AD:76:FC:B3:DA:DB:3B:84:11:26
            X509v3 Authority Key Identifier:
                keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:59:57:0e:d3:9c:07:73:b5:37:b3:86:9b:72:e0:a1:be:
         48:fb:76:ec:f8:f0:b6:94:4d:91:9f:f2:7d:34:b4:59:dd:9b:
         6b:b8:e1:ce:63:15:d7:51:79:28:2d:c2:97:2f:7f:95:60:97:
         1e:98:d6:f5:43:d7:2d:5a:8c:de:6e:fa:3d:2e:91:e6:21:9d:
         f4:1a:68:cb:ad:72:49:40:b5:45:4a:c5:4e:41:be:65:bb:05:
         c1:08:44:e7:15:a8:ca:bf:f5:c4:fe:f8:81:27:48:24:46:20:
         d9:7f:95:59:ab:b7:09:0c:84:c7:9e:7c:62:43:b1:4b:5a:d5:
         e5:1c:dc:c1:c4:e5:7a:70:41:1d:e9:98:14:0b:24:82:ac:f7:
         77:d5:0e:70:1b:0e:5d:62:2c:06:d5:aa:47:73:f9:06:83:4e:
         fe:62:cf:92:b3:50:b3:e6:94:82:9c:1b:cd:29:da:58:87:f0:
         01:e3:1c:2c:1d:5e:22:2c:02:35:17:82:14:a2:bf:15:fd:a5:
         00:d1:89:fd:fe:e8:20:8d:58:1f:8f:ef:1e:db:06:43:58:40:
         c8:e1:ce:93:91:9d:8b:fa:31:07:59:11:e4:bf:d6:99:c7:1e:
         44:b2:e3:9e:44:97:9e:fe:96:73:ed:2e:57:87:dc:0d:b5:2b:
         85:ad:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:13 2024 by rpki-client on console-fra.rpki-client.org