Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File:                     hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier:          SlhqixU2Mb7M78xY6uViCg0fvipsimoKM+bR7+mEYFU=
Subject key identifier:   6F:37:81:3B:89:71:84:DF:B1:A6:37:2F:9C:B1:67:86:CA:13:C5:82
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       018E86A69695CB25633C456778FA22539E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number:          0EB1
Signing time:             Thu 28 Mar 2024 20:00:48 +0000
Manifest this update:     Thu 28 Mar 2024 20:00:48 +0000
Manifest next update:     Fri 29 Mar 2024 20:00:48 +0000
Files and hashes:         1: 4Mt58Xq4qYulMxngf2Cbba1xle0.roa (hash: clyMZnG6HcPZlEr496HgttwR9wR8IxzDiMa4yR/OEyY=)
                          2: DJBN3BLlvNM7Bt2epMDGMpyF4vI.roa (hash: kUudPzQ0LE1yyGEVIuzF5qd67JnaLYx+kdElqCvtlWU=)
                          3: Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa (hash: b9HpcfCWpDPkPycAk/wdOcXKXR6Tzczg+Nafv7LlJpY=)
                          4: HLmW5v4h3vgk-OjCvbw20Sq1Jyk.roa (hash: /ZuuEJWeOgHM1FRsa5kRsH1kNlEakNsle77vgsfcKvo=)
                          5: cne6Tiuegg21jELm7CXKBc_NeIs.roa (hash: whB4R7sT7MpYlSpIKL1GureVbW0TS4IrCy50UABdCJE=)
                          6: fUGWYm8pleQaDVpR7AYySJX4B-4.roa (hash: iBpWW8xQFwTc1AXjXKxFIEWI5L4mDOiArYB1zPaTahQ=)
                          7: hQFhZOGWpvUxkIHdnZ0Itvn5Dao.roa (hash: O+8m+scHsy0kI/tw6e+l8XoDWHLnpIeagX4loY1NAV8=)
                          8: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: NnXI3B1bSADdDfWgklQW6DRFSKc7igIwkAdtVQ41RPg=)
                          9: q-1CGXCjNgF_zVPCrcV95wdn27U.roa (hash: 7/JtQdIBudRL+Q4ggE1jjYxnGHIiqz48gC6xlapyn7U=)
                          10: qENt31C6sYEBe37Kcj9ZTDXVT2g.roa (hash: oBob7biI5f9KIj4TqcLhqhRGUotrMnriO87CVDu3pjY=)
                          11: t40IvNPN6mJJp6QnqnktRm4wjQg.roa (hash: smWA2utvT5IfmsgjF3NcjGw2apxwiK57oxZ/baQFXIU=)
                          12: vBYhdNRSgNfg5JSifzUOLHQQTOc.roa (hash: nYgbiJTCs1MOp/zFKOyWVi5A+20SmEq3aSSbeG4DvAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 18:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:86:a6:96:95:cb:25:63:3c:45:67:78:fa:22:53:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Mar 28 20:00:48 2024 GMT
            Not After : Mar 29 20:00:48 2024 GMT
        Subject: CN=6f37813b897184dfb1a6372f9cb16786ca13c582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:f2:91:bb:01:9c:c8:ab:8b:2e:94:6f:3a:
                    b8:3e:a9:12:c0:a6:80:36:5c:e7:0c:0d:de:72:e8:
                    9f:5f:1e:a6:c1:f9:f7:4a:4f:8d:57:35:f2:61:5a:
                    d6:9e:dc:78:08:75:dd:c3:1e:a9:9c:2d:f0:06:a6:
                    38:ac:34:b9:8b:7d:43:dd:36:26:3f:b4:24:5e:86:
                    90:e3:06:8d:b1:2d:4f:d6:02:02:fe:0b:ca:38:e7:
                    ae:b0:c7:1b:67:15:d0:23:c0:3e:7a:45:4c:5d:2c:
                    ec:9a:75:b0:19:3b:73:99:da:c4:36:17:65:f9:19:
                    09:ce:c0:bf:7e:30:3e:94:10:ed:a4:32:07:ea:16:
                    b9:dc:ed:77:20:78:e0:bd:45:a7:f7:98:0c:78:2c:
                    04:c7:39:a0:86:4c:d0:2a:ab:6f:43:44:bc:a1:1c:
                    e0:9b:e7:10:32:bb:bd:58:8a:8a:76:ab:4e:39:65:
                    00:df:7d:6d:54:70:fe:d2:bf:5c:78:82:d7:e2:46:
                    a9:61:8c:ea:6e:d6:cd:b1:23:f6:15:af:6e:c1:79:
                    c3:b2:1b:d7:5e:95:43:f5:c9:e8:ce:5e:c6:66:11:
                    f1:43:60:db:b4:d0:51:13:cd:78:a1:63:36:42:53:
                    67:87:c8:7a:67:c4:af:17:13:0a:f5:f4:ee:53:fa:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:81:3B:89:71:84:DF:B1:A6:37:2F:9C:B1:67:86:CA:13:C5:82
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:40:ca:22:99:3a:96:a5:2f:f0:45:b1:eb:a4:1a:7a:fe:6a:
         c5:78:00:33:e0:2e:c3:57:41:b9:a8:1a:0d:5e:eb:f9:13:4c:
         71:31:c5:c4:a6:9c:05:58:49:6f:40:5f:75:2c:e8:32:9e:53:
         93:78:e7:a2:44:fe:0a:58:61:60:79:60:df:63:ab:c9:33:6a:
         7f:46:7f:35:fc:06:17:a2:68:59:91:7d:13:c8:91:06:d2:77:
         1a:1b:23:fa:d2:e2:dd:6f:21:af:d5:2b:b7:46:57:e4:d7:0b:
         d9:92:67:05:c6:07:73:a4:73:c9:fb:3e:90:79:a2:28:49:88:
         08:d4:e3:c2:ec:5a:2f:65:46:90:0b:04:82:5d:12:a6:f6:04:
         4e:db:24:31:08:8f:8c:ca:db:4d:bd:54:67:bb:21:20:53:0e:
         53:43:0d:de:dc:ae:27:f6:4e:52:06:df:a9:83:9b:12:21:52:
         f1:8f:f5:0e:15:92:f0:8f:27:e1:4d:13:79:38:60:56:e1:fc:
         25:ad:b4:d9:3e:fc:dd:f2:61:4a:33:7e:25:84:c1:a8:5d:20:
         cb:16:da:9e:d7:a0:66:12:d3:a9:df:a1:c2:59:d5:77:21:42:
         09:a5:37:92:42:e6:d6:fe:e8:fd:2c:66:23:01:d3:96:30:da:
         5d:b8:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:29:17 2024 by rpki-client on console-fra.rpki-client.org