Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File:                     HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier:          5iqskBlJ+G9RjLPpMNrxVmVJn7Bz0ZFXodpmI5Q0xRs=
Subject key identifier:   9E:70:7A:E2:39:37:2C:A6:C8:C0:26:E0:68:37:83:79:3A:2F:A4:62
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer:       /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial:       019044F8D70A81BC8DD3D9031CBE8BD1B45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number:          0CFA
Signing time:             Sun 23 Jun 2024 12:01:16 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:16 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:16 +0000
Files and hashes:         1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: +WkpZluP12CEIscRU90G3PqmcmuwNNTTb+6AH95LXWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:d7:0a:81:bc:8d:d3:d9:03:1c:be:8b:d1:b4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
        Validity
            Not Before: Jun 23 12:01:16 2024 GMT
            Not After : Jun 24 12:01:16 2024 GMT
        Subject: CN=9e707ae239372ca6c8c026e0683783793a2fa462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:4b:cf:43:6a:9c:10:9f:15:64:f1:c8:7e:
                    89:ee:7b:65:59:6d:32:89:d1:f3:34:04:19:35:fb:
                    17:be:2e:af:cb:b5:70:fc:97:9a:16:e2:b8:ba:5a:
                    d9:19:80:35:de:72:97:d7:26:bf:ba:44:46:ec:7f:
                    78:6c:47:ff:ce:8b:f1:d7:a7:85:ea:d4:70:0b:fb:
                    6e:1d:45:9b:2e:33:35:5c:89:c0:e8:84:7f:54:8c:
                    7a:fe:8d:6c:9f:f7:88:ff:ec:64:a4:af:c4:68:9a:
                    6e:1a:40:c6:1b:c5:a9:17:91:7e:b8:b2:f2:2a:88:
                    13:68:68:74:bf:63:62:08:36:74:d7:67:f2:d2:7d:
                    06:fe:80:fb:0b:9d:3b:2a:76:2b:a8:e5:53:6e:73:
                    09:27:50:c2:52:67:53:f8:c2:48:de:55:f2:bd:99:
                    31:6c:6a:3f:1b:e0:f0:94:77:c8:b9:09:dd:80:5e:
                    0f:aa:94:92:fd:36:93:95:8a:71:82:4f:34:fd:c1:
                    ab:0b:00:e6:b9:6b:21:5b:0c:27:16:d5:d5:7b:18:
                    52:14:fa:37:99:d2:d9:11:f0:65:dd:1e:9c:fe:e2:
                    68:48:12:0f:bc:17:f2:2f:77:16:bc:63:57:85:71:
                    e7:bd:7b:e9:d2:f3:14:92:51:e3:db:c0:d2:aa:5c:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:7A:E2:39:37:2C:A6:C8:C0:26:E0:68:37:83:79:3A:2F:A4:62
            X509v3 Authority Key Identifier:
                keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:be:be:37:bc:b5:75:af:e6:7e:49:2a:c8:44:d3:7c:96:42:
         c6:91:ed:ab:40:09:3c:17:49:e9:00:96:b0:82:d1:ab:c0:85:
         e8:88:73:de:2d:a3:d8:1d:47:0b:0c:8b:df:67:1c:f3:ce:44:
         69:dc:c2:d4:3a:4c:66:40:e7:29:52:9f:5d:52:75:47:05:61:
         33:b5:57:81:d2:76:c9:64:71:17:39:59:e3:f9:f7:52:6d:fb:
         11:84:a5:37:ee:c1:b5:0e:24:18:22:d0:22:74:55:04:d2:f3:
         6e:57:14:d3:39:41:bb:8e:5e:c6:ef:dd:ea:5a:2e:6b:6d:7f:
         0c:5e:74:8a:96:5f:7a:c7:97:b0:cb:bd:82:56:a3:2b:02:15:
         e3:67:24:86:c9:82:fc:1c:57:e0:16:df:d3:61:91:f1:99:d6:
         1b:b6:1b:85:ea:9c:1f:e5:5b:a8:d4:9b:fd:2d:3e:cb:b6:da:
         bf:23:da:86:ff:56:23:07:72:a2:29:81:de:d7:b4:a2:c4:f9:
         b9:7f:b0:78:47:3b:9a:a8:00:39:50:53:c6:fb:c1:99:9b:46:
         45:7d:17:29:1f:fa:13:15:b8:d6:86:67:39:9d:9a:02:67:e1:
         e0:98:b2:b0:c6:90:52:3c:ef:d6:9e:e3:e0:a2:f2:f6:75:2d:
         2c:1f:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:11:05 2024 by rpki-client on console-fra.rpki-client.org