Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          fEntxlbxgqfvYwoodS9fsIFA/3/vD3fhEEXmSOLeXrs=
Subject key identifier:   E0:16:A0:BE:15:AA:2B:98:F0:6B:1E:9D:7D:D9:35:90:E5:0C:51:76
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       01901DEC73C991BD28CD9A4AB8A9DE831AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:33 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: ZQ0ZlQ3FyZnL/9GOAi/LiBUIHyxda4SzocbTiEplJZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:73:c9:91:bd:28:cd:9a:4a:b8:a9:de:83:1a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Jun 15 22:02:33 2024 GMT
            Not After : Jun 16 22:02:33 2024 GMT
        Subject: CN=e016a0be15aa2b98f06b1e9d7dd93590e50c5176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:41:af:4d:3c:77:70:66:74:22:59:2a:91:
                    90:df:bc:20:20:37:2c:f7:b6:47:62:97:8a:bc:ce:
                    59:58:7e:02:36:58:02:24:58:3a:6a:51:bd:80:18:
                    e1:7d:6d:41:a6:51:3c:d6:85:b4:e5:73:b3:62:d6:
                    48:5e:97:07:34:85:f3:57:d1:b6:ae:e2:c8:70:33:
                    5b:ee:16:c5:c1:19:47:28:75:17:6a:a4:a3:d8:86:
                    8a:66:94:ed:01:cf:b7:42:bd:c2:7f:19:79:92:05:
                    17:f9:3e:1c:38:d7:3c:e5:87:6f:bc:68:40:60:9e:
                    d4:07:d9:28:ce:08:ee:09:0a:a0:32:ab:f8:87:5b:
                    0f:e9:72:ee:62:2f:5e:30:9b:53:51:04:d4:62:24:
                    e6:8c:24:a2:fb:0c:42:73:53:a4:25:45:69:02:a8:
                    36:05:78:00:e8:81:51:b0:23:61:87:42:79:81:68:
                    c6:19:a3:a7:0f:b4:c3:ff:b3:8c:86:2b:c0:5b:14:
                    d3:f1:ac:6a:cc:2e:d8:8f:b8:2a:55:b7:ea:fd:61:
                    8b:91:b2:cd:66:96:65:02:9b:95:22:de:3e:ed:f7:
                    9c:5e:cf:04:12:e1:ef:d3:61:17:53:bb:d6:d9:93:
                    22:70:23:c9:3c:44:b8:8c:15:dc:3d:1b:f1:43:88:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:16:A0:BE:15:AA:2B:98:F0:6B:1E:9D:7D:D9:35:90:E5:0C:51:76
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:e1:2b:5a:39:07:06:1e:92:f7:36:08:c5:13:6d:b1:96:
         a1:87:5e:f9:4a:df:d8:6d:65:0d:06:89:b6:07:70:86:12:bf:
         a6:47:df:28:bf:0b:40:11:62:d9:33:1d:d4:df:45:c4:f9:97:
         bf:bb:4d:3d:21:22:c6:a9:b7:b1:25:6d:14:a7:83:0d:6b:93:
         46:e9:0e:d5:18:68:58:57:ae:d8:73:9a:c4:e1:2c:d9:76:fb:
         0b:e1:4d:cf:64:9d:74:12:6b:3b:f9:ca:bc:dd:ad:35:77:83:
         cb:14:f5:56:76:92:73:95:09:3d:68:41:a1:f5:6c:10:21:97:
         28:bf:d0:8c:c8:6f:e9:a8:64:59:2b:08:da:6b:ef:05:f1:3a:
         ea:52:3a:30:15:0d:c0:bd:85:cf:ee:ec:c7:84:12:67:5a:df:
         e2:12:07:89:70:ad:8e:da:dd:b8:3c:35:9f:a5:5c:1f:19:12:
         75:2a:84:b5:aa:02:c6:34:24:f0:57:07:24:f8:86:5e:b0:56:
         ff:2d:36:79:7d:cf:d6:32:45:fc:74:b3:0f:51:86:44:e3:5c:
         db:14:fa:6d:91:ed:74:5f:0f:5c:ef:d0:c9:27:ca:84:eb:a9:
         1f:38:72:d3:d5:87:cb:05:47:17:05:24:df:e9:f0:0a:fc:e9:
         6b:5c:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----