Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File:                     HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier:          8jJw70PX00dOrtyYhgacscEHzrAn/xe1r4D4EBwTzVs=
Subject key identifier:   FA:6C:AB:76:87:1F:3F:5B:02:7D:B8:96:F6:5C:EB:D6:3A:DA:CE:12
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer:       /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial:       01901E58E2F36B4CA20AFF325EE9970FD707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number:          0CE6
Signing time:             Sun 16 Jun 2024 00:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:00 +0000
Files and hashes:         1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: v0ml7ZKELvT1dthxoZdRyL4r0sUjK1eQV6VgBXfABeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e2:f3:6b:4c:a2:0a:ff:32:5e:e9:97:0f:d7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
        Validity
            Not Before: Jun 16 00:01:00 2024 GMT
            Not After : Jun 17 00:01:00 2024 GMT
        Subject: CN=fa6cab76871f3f5b027db896f65cebd63adace12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:e3:b8:30:aa:f0:43:84:28:a2:41:e4:22:
                    b8:9f:73:b0:6a:d7:ff:a0:5b:6c:41:91:fb:f1:15:
                    e8:9d:b0:27:33:f4:19:90:84:51:33:b6:a0:2c:01:
                    ea:6a:e7:27:e5:ac:1d:47:74:f8:c4:22:ae:f7:d1:
                    f5:75:9a:75:c9:fb:06:4d:8c:04:0b:36:59:23:4f:
                    78:8e:11:c0:16:0f:a5:d5:02:89:bf:77:35:83:aa:
                    cb:58:42:ca:87:f9:b0:f5:65:c5:82:f3:86:5a:7f:
                    ae:17:72:10:9d:cc:ac:b0:84:02:46:2f:15:16:11:
                    0c:13:5a:1c:7b:e1:83:a3:d7:45:5f:c2:3c:64:d0:
                    1a:c6:89:49:9f:70:3f:6f:cb:72:b5:e2:ff:b9:b0:
                    22:02:c1:bb:f1:0f:0e:1e:ff:32:55:a5:06:a9:bd:
                    47:e0:cd:6d:20:42:d6:76:da:66:d5:da:db:39:d9:
                    33:01:30:4b:00:84:bb:e0:e9:f0:ee:ba:1e:40:38:
                    ff:74:e0:83:f8:98:c9:07:21:09:8e:01:8e:89:da:
                    28:e8:97:d0:86:57:bf:b4:fd:76:a6:5f:a7:3d:fa:
                    f5:a2:b2:e1:f5:4a:23:67:81:ed:cf:a7:00:3e:5c:
                    7c:2b:1a:a3:c6:c5:1e:79:45:83:bc:0c:fc:e0:21:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6C:AB:76:87:1F:3F:5B:02:7D:B8:96:F6:5C:EB:D6:3A:DA:CE:12
            X509v3 Authority Key Identifier:
                keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:64:70:e6:7c:05:f0:fd:e1:09:b5:71:c9:21:fb:57:df:3f:
         38:cb:f4:04:8c:22:de:fc:b0:e9:e7:f9:6a:cf:80:d5:f3:de:
         3b:8f:5c:c1:b6:51:6e:d3:ce:e2:bc:2f:18:39:dc:0d:91:15:
         06:7c:3d:d2:08:ef:37:9c:96:3a:f7:24:25:11:1d:99:bc:fe:
         b9:69:19:6d:a6:71:47:77:4b:dd:c6:06:3c:e8:ee:3b:2c:e0:
         2e:9b:cd:06:d7:01:25:3b:53:99:1e:66:92:b0:05:48:8c:a3:
         4d:36:c3:ac:48:26:2e:a5:28:36:89:7a:2b:dd:ef:85:8c:0c:
         8b:be:7d:6b:d0:24:ac:92:7a:82:c2:d6:51:91:a7:76:d2:a0:
         87:2e:83:85:07:ab:c6:84:0d:ef:f2:59:8a:02:6d:89:f5:2e:
         b5:64:59:85:98:32:32:6f:a0:56:87:8e:4f:97:37:e7:3b:2b:
         0a:3f:a5:78:23:c5:09:26:da:42:d1:a2:08:96:02:ae:0e:cc:
         40:98:b9:9c:94:e6:ef:72:ad:56:76:3a:f6:0a:6b:38:fc:0d:
         94:26:73:8e:b4:c8:f5:36:86:c1:4c:4c:14:05:26:78:9f:4e:
         57:b8:e5:f0:a8:2c:80:db:70:8c:ca:4d:55:39:cb:1d:6d:38:
         8a:d9:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:12:41 2024 by rpki-client on console-ams.rpki-client.org