Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File:                     HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier:          w0Zg043lQ2EIMv8a9WAj1iWOvCXW5P/NxF1+3LVLaic=
Subject key identifier:   84:C0:FA:DC:0E:53:91:0A:CE:6C:3B:8F:0E:40:16:71:25:6A:70:35
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer:       /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial:       01901EFD86C6A2FC0CC8CEA84B7A3D856B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:49 +0000
Files and hashes:         1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: sBS4ILlt0oa6UYb6t2888uq41QtLZ4Xtl3+zCyW6/IQ=)
                          2: wcStVivXsm9-jA5xZI6Pob3tcuo.roa (hash: Xq6r3s4EFFQ/lOg5SQWBG4PGgk12DhDLKsfAIglZXGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:86:c6:a2:fc:0c:c8:ce:a8:4b:7a:3d:85:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
        Validity
            Not Before: Jun 16 03:00:49 2024 GMT
            Not After : Jun 17 03:00:49 2024 GMT
        Subject: CN=84c0fadc0e53910ace6c3b8f0e401671256a7035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:12:85:56:1a:81:a0:01:fb:72:a8:7b:36:
                    aa:75:04:0f:63:0d:cb:26:8a:fa:3f:e6:cf:a7:1f:
                    99:4c:2a:2b:b3:85:a6:b7:7b:06:18:5a:78:ad:98:
                    1b:aa:bc:88:cb:af:c6:7f:93:97:e8:99:5b:d0:fc:
                    41:44:e3:8b:9a:d5:f7:54:c5:8f:96:1f:1a:df:12:
                    c5:98:15:59:c2:e3:1f:e2:94:bc:79:93:db:ea:e9:
                    9f:a0:d5:54:01:a1:5b:15:24:d7:f6:c7:09:18:fd:
                    24:58:ad:37:ca:a5:4e:77:0a:04:d9:a4:48:ef:06:
                    a5:73:17:e3:27:ee:4e:2b:ee:32:a7:ef:21:c6:58:
                    b6:08:c6:61:a0:4d:15:f4:50:df:19:bc:ea:5d:50:
                    19:2d:2a:af:1c:4f:49:c1:d8:de:e3:76:24:34:ad:
                    74:a1:15:c1:3e:92:24:fc:a1:3c:79:b3:37:82:24:
                    7f:47:0a:a2:a0:0e:7b:c2:66:02:ad:35:f7:1f:29:
                    b0:4a:79:98:34:26:0e:34:14:60:c7:de:4c:5b:01:
                    57:bf:d7:71:6e:39:c8:e5:e7:3a:88:23:8d:1e:a8:
                    f5:2a:52:7f:d1:ce:e1:d0:b1:92:d3:b4:fa:61:86:
                    db:92:a8:72:b2:c0:35:e7:63:e9:a5:3f:01:80:ea:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:FA:DC:0E:53:91:0A:CE:6C:3B:8F:0E:40:16:71:25:6A:70:35
            X509v3 Authority Key Identifier:
                keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dd:de:09:ea:d0:50:36:c7:de:60:55:36:73:b3:ac:c1:f4:
         8e:27:60:4b:c3:b0:81:77:15:40:bb:db:ab:01:35:34:6d:6a:
         2d:4e:b9:bb:f7:c1:04:13:fb:95:b6:98:bc:74:fc:fd:d5:56:
         ef:06:ec:78:c4:eb:bd:6c:08:b6:31:34:41:16:0a:17:82:4a:
         8b:2a:64:2c:7b:e3:c3:5c:12:09:52:28:bf:a0:e0:78:bd:e3:
         c0:61:00:58:45:21:20:d6:c1:8c:5e:19:b0:32:9c:1a:92:5b:
         72:41:56:76:8e:a8:5a:eb:46:e9:1b:23:d2:a2:96:5e:5c:93:
         cd:e0:da:97:47:0b:2a:02:fb:8d:1b:3e:67:6b:88:33:86:8c:
         9e:cc:bc:65:1f:c1:32:0a:10:9d:50:18:64:30:b0:c5:09:72:
         85:b1:40:80:c4:46:01:9e:49:fa:b0:69:65:9b:ec:42:d8:39:
         b8:0b:c3:bd:5b:31:a6:69:ff:ee:9a:94:6f:36:e9:53:13:96:
         16:3a:d6:03:17:ff:12:45:05:f7:89:4c:c1:85:41:99:ba:a6:
         cc:43:1d:56:c6:54:24:ac:45:cb:a5:af:a9:97:bf:83:08:e1:
         0d:1a:d4:38:00:79:32:7f:72:a8:22:1c:23:e4:6c:6f:68:19:
         e4:3f:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:45 2024 by rpki-client on console-fra.rpki-client.org