Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File:                     Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier:          WFhruEbFz6soErbQQhsivB9GcP/F88ZouSa6b1tAeGY=
Subject key identifier:   9C:C3:49:B5:25:F4:47:8E:2F:8A:86:49:B1:F2:15:B3:00:B4:64:90
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       01901BFC9F2275BA8400BB28E48EB88EEBE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number:          0A0E
Signing time:             Sat 15 Jun 2024 13:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:58 +0000
Files and hashes:         1: GfdcBrGrAhWmMY3fhmfjZQNFlZ4.roa (hash: yOJ0V5ED0IE2VQocEkBGt98PvSkTcsdM+7cGupmSOtU=)
                          2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: GLE+B6qn2nCKFTTyVXxC2/nPE1GGv2vz/1gkO7xznIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:9f:22:75:ba:84:00:bb:28:e4:8e:b8:8e:eb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: Jun 15 13:00:58 2024 GMT
            Not After : Jun 16 13:00:58 2024 GMT
        Subject: CN=9cc349b525f4478e2f8a8649b1f215b300b46490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:50:15:33:08:d3:ef:54:a0:3e:90:24:dc:
                    e2:fb:0b:b8:d9:44:ef:5f:d0:5f:d4:a6:c7:c2:40:
                    38:6c:f3:97:2b:1f:14:45:f0:a2:67:b2:71:47:a0:
                    25:0b:aa:23:68:03:64:3c:39:94:f5:6b:7f:19:ef:
                    9c:69:4f:f5:e9:2a:79:6e:82:fa:4b:51:3f:43:70:
                    58:3c:e2:c8:29:64:38:8d:35:80:ca:d1:eb:6e:f9:
                    bb:95:8f:cd:a7:7f:d3:85:92:a3:59:20:50:d7:78:
                    89:94:b3:ce:57:42:03:98:95:39:32:9f:23:ff:49:
                    79:a0:66:3d:47:f5:f5:40:5e:da:e1:73:d7:fe:ee:
                    d9:99:32:42:a8:4f:12:84:cd:a2:c4:a5:f5:31:27:
                    7c:84:a0:7f:f5:02:75:93:bf:da:76:4a:1d:08:08:
                    e6:31:4a:95:d9:46:b3:6f:d7:4f:22:6c:a6:b7:04:
                    a0:b4:69:7f:75:63:5d:2b:d7:d0:19:67:8a:ce:44:
                    7c:25:db:19:62:b9:52:b1:bb:03:bb:27:ad:31:36:
                    8b:05:66:8b:de:1e:5b:6e:e1:0c:bf:a5:66:61:f0:
                    07:4f:62:cf:05:dd:8a:6a:bb:15:82:04:7e:60:c2:
                    31:a7:ce:99:7f:c0:85:5f:e5:fc:21:8f:2d:98:26:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:49:B5:25:F4:47:8E:2F:8A:86:49:B1:F2:15:B3:00:B4:64:90
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:aa:4b:fe:12:da:ed:20:3c:29:18:de:e3:cc:1b:c6:bc:
         78:63:8c:00:66:2e:ef:46:e0:4d:6a:5a:34:9e:61:50:aa:4e:
         b4:8c:c8:db:d9:ac:00:a3:2b:2c:8f:0d:04:0e:c3:7c:58:d0:
         75:22:2d:27:ea:7b:07:93:9b:98:54:59:87:c0:35:c0:6c:fe:
         7b:aa:19:c6:80:51:78:39:a1:65:37:96:13:d4:23:bb:28:45:
         3d:18:ff:dc:c7:b5:91:35:91:34:95:e5:cf:81:16:8f:a8:ee:
         6c:c3:52:55:56:8f:89:ff:7e:f5:52:b4:ee:f0:01:8c:8f:b7:
         f7:70:8d:30:6b:5c:9b:5d:d2:37:88:38:0c:49:17:68:17:a0:
         e6:fe:c6:87:f9:29:ea:b6:aa:0e:84:25:50:89:9e:f1:25:39:
         f2:66:88:e9:61:86:8b:6d:a8:1e:40:8c:69:86:8f:5b:07:6a:
         f5:bf:17:e4:8d:38:74:d3:d0:12:d8:05:ef:76:4f:cd:79:bf:
         4b:10:54:9f:ab:bb:c2:3b:ab:40:a9:fd:51:7e:8a:98:c6:05:
         d5:32:01:73:41:34:dd:98:ae:25:13:6b:9d:5c:d0:01:31:dd:
         57:d9:bf:5d:b1:15:4b:20:ee:41:b3:88:9d:a6:a1:69:b7:19:
         46:dd:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:38:30 2024 by rpki-client on console-fra.rpki-client.org