Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File:                     HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier:          K/CZYheUpfvJ8S+tFv5fQEUvte0TCWH9ZhTwImnFmg0=
Subject key identifier:   73:12:D4:6D:4E:60:18:5A:96:C3:C8:2B:C0:E4:18:99:63:AF:BD:5C
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer:       /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial:       018F3C6646306094BF2915F7292F18566E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number:          0BDF
Signing time:             Fri 03 May 2024 03:01:26 +0000
Manifest this update:     Fri 03 May 2024 03:01:26 +0000
Manifest next update:     Sat 04 May 2024 03:01:26 +0000
Files and hashes:         1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: 7VBXzsCsWTzm+eZ3q1uaHMVFW9rRBN8ky15FBpP4nvM=)
                          2: z2uQYpuGxVxuR1kW4K1ZWnhGF5o.roa (hash: 1lUMxnFhs0Jm31ZwfxvkR5pAD+4fsVXYcCK6nm9KVGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:46:30:60:94:bf:29:15:f7:29:2f:18:56:6e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
        Validity
            Not Before: May  3 03:01:26 2024 GMT
            Not After : May  4 03:01:26 2024 GMT
        Subject: CN=7312d46d4e60185a96c3c82bc0e4189963afbd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:ad:56:c8:7c:13:bf:6b:23:c4:2e:dd:9a:
                    90:3a:17:e2:54:fd:36:c8:19:f8:d9:6a:60:88:ff:
                    4b:eb:c1:60:a3:97:5d:5d:0d:51:5b:ed:b2:3a:7e:
                    3b:fd:e9:bc:20:89:88:1e:a7:b5:25:9f:16:5a:57:
                    7c:92:f2:fd:4d:b2:88:ef:35:a6:cc:17:5d:3c:63:
                    13:6f:30:80:cb:e9:6c:05:c1:e6:6c:8d:1e:28:a7:
                    97:92:74:6a:ea:52:34:b5:08:5e:7b:5a:d3:27:9a:
                    ba:28:59:c0:61:71:96:79:fd:ad:eb:75:a9:7c:15:
                    2c:2d:c9:be:3c:1f:82:ba:38:47:b3:42:1a:99:cc:
                    a8:4b:c1:98:ff:f3:be:c5:67:a0:90:97:bb:93:50:
                    f5:11:fd:40:b0:1a:e1:be:85:cd:b8:50:71:d0:a2:
                    1b:32:91:eb:74:c1:f3:47:db:33:9a:42:2f:da:53:
                    74:da:fd:3d:8a:9d:cc:e4:db:23:04:67:25:ec:39:
                    c7:27:1f:7b:f8:5e:68:78:fd:d9:8e:9c:c4:23:7f:
                    c8:e7:c7:0e:26:ca:d3:b9:a9:64:f4:9f:2f:0e:15:
                    05:a4:2a:e8:6c:cc:da:54:07:dc:6c:dd:47:5d:50:
                    66:33:7a:ff:f5:a4:43:d4:a9:bf:40:6d:8c:a6:15:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:D4:6D:4E:60:18:5A:96:C3:C8:2B:C0:E4:18:99:63:AF:BD:5C
            X509v3 Authority Key Identifier:
                keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:95:a2:d0:17:ca:66:72:a1:79:01:84:31:98:9c:a7:c5:
         fc:1a:eb:4a:5b:63:91:d3:a3:6a:8a:ca:d3:6a:21:8c:1a:de:
         66:a4:58:87:78:67:54:fe:dc:54:ad:8c:39:68:af:cb:f0:74:
         35:4c:2b:15:d6:2a:95:64:e7:30:bd:35:41:9f:41:e5:cf:c9:
         0c:7f:43:c0:26:9f:b3:88:1a:1e:bf:19:71:6d:b1:68:78:4a:
         c8:1a:98:9f:51:75:d3:94:05:5f:61:22:5c:43:aa:bf:17:93:
         0d:b5:6e:c2:fc:89:36:46:6c:5b:39:f5:87:dd:f5:da:18:de:
         d1:d3:38:5f:32:82:2e:c6:fa:f4:ad:8c:94:10:c2:24:86:03:
         c1:83:ab:f7:d1:80:24:15:23:6a:28:ed:7c:24:f5:a2:04:21:
         11:1d:fb:e7:c8:3e:3c:d7:f2:57:82:9e:4c:1c:59:d3:69:32:
         de:d5:a8:83:f8:ad:cf:b4:63:0e:71:2c:9a:57:f0:04:87:f8:
         09:e2:92:9a:45:18:58:fc:93:85:3a:2a:b5:3a:49:04:ad:b8:
         e5:f5:af:1a:69:48:c1:ed:64:a3:5c:b6:c3:4b:f8:01:0f:4e:
         bc:61:18:28:dd:a9:b9:69:74:72:1c:cf:ce:21:d2:ed:e2:2c:
         7f:a1:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:13:21 2024 by rpki-client on console-fra.rpki-client.org