Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File:                     HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier:          jH9H0fd/6Yiwb9a1ODTq3sJfPweo2xaWKqqBug/Y7dQ=
Subject key identifier:   44:FF:45:61:77:F0:A4:34:3C:06:A8:0F:D1:9C:CD:96:34:37:28:74
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       01901BFDC8802823C5A4F62E2578C6B26A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number:          09D9
Signing time:             Sat 15 Jun 2024 13:02:14 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:14 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:14 +0000
Files and hashes:         1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: UX1+bB+KB6ha8bpJzRbQ6MKAKdaTzuS6DOhZ71sz8Ng=)
                          2: cKvsVtbysPkFqXTULAtcr0gAFJ8.roa (hash: VF3uI847bhCzvw8ySFVKbv6DzJFxkCViZ+MhlEEnWTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:c8:80:28:23:c5:a4:f6:2e:25:78:c6:b2:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: Jun 15 13:02:14 2024 GMT
            Not After : Jun 16 13:02:14 2024 GMT
        Subject: CN=44ff456177f0a4343c06a80fd19ccd9634372874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:38:67:13:f5:10:b8:37:65:15:bf:71:91:
                    12:09:a6:95:77:f5:04:3f:8a:e7:ca:7c:c6:7f:e7:
                    e3:e0:73:68:e4:26:da:d8:38:1d:81:5f:11:dd:78:
                    38:5a:76:b9:74:4a:5d:65:ca:1d:ee:3b:63:63:d6:
                    a2:ed:47:f6:05:c3:ca:bf:bb:a5:ad:34:51:f8:09:
                    76:a6:48:5a:2b:49:e5:ba:4d:3a:7f:7a:70:63:56:
                    be:b1:e2:85:ab:53:f3:03:c2:85:7f:7a:fe:75:1f:
                    03:25:a0:38:9d:c3:69:b7:12:e9:c7:e0:8a:bf:1c:
                    cf:c3:e0:63:fb:0e:7c:e6:ea:55:7f:4b:cc:d6:e5:
                    94:19:04:bc:b4:1c:af:f1:c3:b0:7d:6f:53:eb:ef:
                    ac:a3:13:5c:3c:a6:97:e5:90:cd:a7:31:78:f0:da:
                    d0:5c:12:81:bd:b8:54:43:cf:6e:f5:0d:2d:d7:49:
                    6e:f4:87:c0:85:61:52:8d:a5:70:bb:8b:f8:35:48:
                    15:e1:a0:5f:a2:e9:ed:ef:e1:71:1e:15:45:15:63:
                    5a:ae:18:af:96:09:74:88:d0:45:8e:68:bc:6f:05:
                    0a:92:16:47:10:90:48:7c:9a:42:f9:89:51:83:79:
                    3f:8b:da:ef:ea:b4:9b:07:20:59:14:26:23:76:48:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FF:45:61:77:F0:A4:34:3C:06:A8:0F:D1:9C:CD:96:34:37:28:74
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:72:02:0f:0e:c4:7a:99:e1:dd:cc:4a:4e:9b:3d:f6:a6:e3:
         61:02:c1:75:d5:7c:41:3f:c3:db:e1:fd:7b:28:79:a0:90:06:
         e5:3a:bb:fc:b3:2d:fd:b9:82:e2:73:71:84:96:73:a1:f3:23:
         6b:4f:4b:2f:87:18:e3:dd:9e:7e:94:fd:bf:19:26:1b:20:27:
         af:a7:48:a2:b6:7d:2d:09:6f:e0:54:cb:db:11:ed:47:f1:8a:
         36:5e:86:d4:d5:a0:35:60:d7:df:fc:05:63:db:ba:44:b9:90:
         9f:75:e2:d5:65:9d:23:a0:7e:cf:d3:46:57:98:d0:25:9a:84:
         e4:3f:d3:2b:17:9f:9f:a0:e8:83:f4:4b:74:5a:65:47:3e:93:
         5b:96:38:ae:8f:b0:c1:84:b2:f3:30:b2:82:e8:12:e4:80:a8:
         70:b3:ee:a6:f8:da:65:95:99:20:6e:a7:a3:a6:67:39:b0:dd:
         67:b0:fd:b5:b7:d5:05:e2:ce:a9:a5:da:d8:f3:f8:7b:6c:b2:
         bd:82:59:a2:55:ec:d4:93:cd:bc:43:f3:82:53:00:d2:ce:86:
         0d:10:d1:89:97:e8:fd:76:70:05:e5:df:18:80:83:f8:5b:0c:
         2f:c9:92:2d:ed:73:ca:7b:7d:83:60:4d:36:ac:9f:7b:ae:1e:
         27:90:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:10:00 2024 by rpki-client on console-ams.rpki-client.org