Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File:                     hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier:          MJSqcSigZYw5m2SKCP2B3aOshlvGTbJzmLxTQobgeX4=
Subject key identifier:   83:C2:94:99:63:05:01:81:E9:C1:B8:59:4F:D2:BE:2D:B0:EF:6C:18
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer:       /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial:       01901BFECCA19867767AE436976A469B4D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number:          0C65
Signing time:             Sat 15 Jun 2024 13:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:21 +0000
Files and hashes:         1: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: QLCAMdBmW4iaaIvq3vWXEor9SQXDzoi1aurSkQGd1Fk=)
                          2: mPYkjjpColp0vLV4f41sFfuQlQc.roa (hash: 1rniqqzdSwkCGZC1mzvx30gf+0DLDi01KMOwx70lisE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:cc:a1:98:67:76:7a:e4:36:97:6a:46:9b:4d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
        Validity
            Not Before: Jun 15 13:03:21 2024 GMT
            Not After : Jun 16 13:03:21 2024 GMT
        Subject: CN=83c2949963050181e9c1b8594fd2be2db0ef6c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:0a:7e:e8:b8:b1:3d:f3:69:b4:a4:fd:af:
                    94:72:5c:e4:ee:78:2c:95:45:6e:f2:7e:e4:bc:72:
                    1b:c6:6d:cb:90:53:1d:2e:2e:3e:e0:5a:30:a5:2a:
                    b9:ec:2d:82:0d:08:69:65:2a:5b:fe:4b:8f:50:4b:
                    11:64:ca:36:74:24:0e:f4:10:8b:44:45:d5:67:2b:
                    49:df:9c:91:c6:28:ce:0f:86:ca:3b:eb:74:0e:88:
                    36:40:19:b1:d9:82:c9:65:2c:41:38:14:ae:88:87:
                    4a:6f:5c:8a:5b:51:76:f2:c7:33:a9:3c:81:b7:8c:
                    70:92:56:8e:a3:1f:4a:73:e6:67:bb:44:cf:6d:9c:
                    03:17:bf:ec:f7:d4:7a:78:72:65:a4:e9:0a:ec:b6:
                    47:19:01:d1:22:cd:d6:c9:6f:16:0c:c0:7a:5c:44:
                    52:2e:8b:27:57:15:27:fa:54:43:95:84:8f:f3:7c:
                    45:66:09:1c:47:8c:2b:95:20:94:5c:cc:16:a7:65:
                    c5:e6:a0:fe:ab:9e:8e:e2:33:27:3c:59:71:03:b4:
                    1e:e5:cb:00:3d:c5:f4:1b:f4:05:93:28:40:c0:1a:
                    53:6e:87:ba:63:32:2a:76:d9:01:45:81:41:31:f6:
                    29:a1:9f:c9:46:17:29:17:a2:f4:3a:3d:61:a3:7f:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:94:99:63:05:01:81:E9:C1:B8:59:4F:D2:BE:2D:B0:EF:6C:18
            X509v3 Authority Key Identifier:
                keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c2:47:2c:24:ab:28:54:53:e2:b2:bd:bd:8e:9b:39:fc:97:
         78:0e:7b:87:cf:82:d5:8f:7a:c0:58:b7:fd:61:8d:02:c2:43:
         34:a9:52:33:96:8d:cc:c4:a1:64:8d:65:36:6a:2e:44:5f:15:
         40:5b:71:88:38:2b:af:36:78:a5:00:d4:11:82:79:b5:1e:0c:
         c1:ea:5e:3b:a3:a1:14:22:27:91:48:80:44:1d:1f:fd:00:1c:
         8f:73:07:77:bf:c2:ed:b8:83:58:84:32:7a:a9:43:14:95:d8:
         20:4f:8d:94:2f:b4:51:a3:56:15:5e:ac:41:67:39:5f:1e:40:
         52:ca:a5:94:75:71:b4:f2:a5:c9:74:4f:cd:d4:43:7c:1f:ec:
         5e:53:ba:6f:72:19:4c:35:67:74:d1:5b:04:f4:4e:58:5d:c0:
         11:e4:84:a4:e8:d8:02:d1:e2:bc:dc:da:18:e1:37:ba:23:ff:
         b8:19:1f:bf:4a:18:04:4c:f2:f0:82:a1:a0:67:94:35:f4:98:
         8f:e2:4d:59:23:ed:de:14:e5:b8:7a:6a:85:21:96:8a:39:85:
         72:36:8e:9a:8f:98:20:55:1e:53:64:0f:9d:db:9d:37:f0:0d:
         21:ba:47:c8:d3:12:02:57:0e:1c:cf:ab:f4:bb:c9:e4:5b:84:
         da:6c:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:47:27 2024 by rpki-client on console-ams.rpki-client.org