Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft
File:                     hvF8Pifporj-ad119Im_cgr30qo.mft (raw, json)
Hash identifier:          b5HvZXYeipxVxHA4ZQxVUZWfT86afHSy4jrm5FJely4=
Subject key identifier:   11:63:CA:47:5F:08:25:B7:F4:BF:BF:2D:A0:3F:07:37:42:B5:F7:57
Authority key identifier: 86:F1:7C:3E:27:E9:A2:B8:FE:69:DD:75:F4:89:BF:72:0A:F7:D2:AA
Certificate issuer:       /CN=86f17c3e27e9a2b8fe69dd75f489bf720af7d2aa
Certificate serial:       0190478BF61C4DC41ABACDDB3C77809656C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvF8Pifporj-ad119Im_cgr30qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft
Manifest number:          0CD1
Signing time:             Mon 24 Jun 2024 00:01:13 +0000
Manifest this update:     Mon 24 Jun 2024 00:01:13 +0000
Manifest next update:     Tue 25 Jun 2024 00:01:13 +0000
Files and hashes:         1: SoN5qze0Y-CytCsKp_ragC3n8p0.roa (hash: QTjBPTcvilstGzal9E3QA+637DjK5fwcDKj3l4D5IH4=)
                          2: hvF8Pifporj-ad119Im_cgr30qo.crl (hash: afJvtlzwlhxKJjUssVGr7plr+m3K7pb/4VkqrxYVrsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvF8Pifporj-ad119Im_cgr30qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:8b:f6:1c:4d:c4:1a:ba:cd:db:3c:77:80:96:56:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f17c3e27e9a2b8fe69dd75f489bf720af7d2aa
        Validity
            Not Before: Jun 24 00:01:13 2024 GMT
            Not After : Jun 25 00:01:13 2024 GMT
        Subject: CN=1163ca475f0825b7f4bfbf2da03f073742b5f757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:d1:89:08:03:c2:e3:46:3b:e3:52:f5:cd:
                    33:2b:3b:30:f4:63:cb:7a:68:a3:e5:dd:74:4c:b8:
                    79:c5:17:eb:e4:1f:15:76:24:32:69:72:57:48:37:
                    48:34:25:22:8f:ac:ac:93:1a:11:88:a8:66:c9:db:
                    6c:7a:3a:d2:fe:d3:72:c2:6f:6e:f3:69:94:d4:a4:
                    51:03:c3:e4:eb:50:38:69:68:e7:ec:51:85:63:30:
                    0c:c1:95:b8:29:72:e8:89:43:bb:0b:60:ac:35:b0:
                    26:ef:96:1f:cf:49:9c:8f:a1:9d:b8:74:36:e2:29:
                    76:7b:9f:ee:89:48:0f:26:eb:a2:5e:f1:07:0b:7f:
                    03:74:3b:34:08:88:bd:1a:c0:c0:4e:ff:87:84:0a:
                    4b:0c:bc:df:7b:91:65:73:51:0b:60:ac:80:95:d7:
                    95:87:a4:ee:f1:2c:b4:56:67:d9:d3:1e:ba:97:c8:
                    ee:9b:8e:4f:32:96:1e:88:b9:06:62:04:05:42:60:
                    b7:b8:9a:25:e9:32:90:c5:8d:2e:a5:bf:6d:d7:4f:
                    a7:f4:91:c5:2c:80:88:1a:23:71:3d:89:93:f4:28:
                    5e:7a:a3:b8:be:36:5e:a7:cc:32:1a:82:78:3b:66:
                    36:30:e0:ac:01:ff:49:f0:7f:0c:d7:86:b3:87:87:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:CA:47:5F:08:25:B7:F4:BF:BF:2D:A0:3F:07:37:42:B5:F7:57
            X509v3 Authority Key Identifier:
                keyid:86:F1:7C:3E:27:E9:A2:B8:FE:69:DD:75:F4:89:BF:72:0A:F7:D2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvF8Pifporj-ad119Im_cgr30qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:f6:2a:18:2e:69:ce:a9:94:97:9e:b6:00:99:60:23:d9:
         4a:f8:1d:fd:66:0c:ff:52:30:bb:f9:26:7e:a6:05:f3:7e:15:
         50:89:43:a8:a0:46:4d:7a:a4:8c:16:58:ef:05:47:89:d8:55:
         76:45:70:a2:6d:f3:c7:8f:ea:e4:b4:bd:28:3a:58:35:77:b3:
         b9:60:18:71:ad:8f:c4:7b:6d:fe:e2:54:1f:4e:f8:e6:fd:ef:
         0d:68:9d:95:3e:21:2e:09:9b:96:1c:58:ae:6e:ff:10:6d:79:
         90:5b:bc:6e:e1:97:b7:3d:23:cd:97:4d:d9:6f:cb:04:b1:69:
         6e:77:9b:56:d5:ba:99:8e:5f:57:e7:d5:c8:0a:f6:8e:91:58:
         43:db:d9:a3:60:18:64:51:5a:15:2e:e1:5a:8c:94:92:14:56:
         57:7b:c9:83:26:24:8c:fe:71:56:cf:b3:b7:00:b8:56:62:e4:
         81:02:b0:5a:f4:42:72:15:4e:e4:ee:ce:bb:44:c3:c6:ca:a0:
         f2:f8:50:f5:e9:f2:7a:60:a5:05:ca:cd:36:73:6c:db:2c:00:
         49:8d:88:90:07:57:13:d3:72:f5:54:d6:39:14:07:6c:76:72:
         58:7f:82:63:b9:78:93:45:0d:ae:c5:0c:3b:a7:04:a9:6b:a5:
         58:cc:64:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:15:21 2024 by rpki-client on console-ams.rpki-client.org