Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File:                     hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier:          QR0rrDh5wyEuyq9dfGW395xcdYCcCCLpw0WGpLCs2cU=
Subject key identifier:   2D:94:55:F2:89:7C:71:73:B9:9B:38:DB:E1:44:24:78:59:CF:AF:30
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       018E53276BB8B65EE796C64F5846C7817EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number:          0E93
Signing time:             Mon 18 Mar 2024 20:01:16 +0000
Manifest this update:     Mon 18 Mar 2024 20:01:16 +0000
Manifest next update:     Tue 19 Mar 2024 20:01:16 +0000
Files and hashes:         1: 1-L06XOXXNiPAI75WO5p-su3K6kw.roa (hash: r11EOqogsBhaXEzOrHXxZpJ/xFhRwozl2ktz4b9z3F4=)
                          2: 4Mt58Xq4qYulMxngf2Cbba1xle0.roa (hash: clyMZnG6HcPZlEr496HgttwR9wR8IxzDiMa4yR/OEyY=)
                          3: DJBN3BLlvNM7Bt2epMDGMpyF4vI.roa (hash: kUudPzQ0LE1yyGEVIuzF5qd67JnaLYx+kdElqCvtlWU=)
                          4: Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa (hash: b9HpcfCWpDPkPycAk/wdOcXKXR6Tzczg+Nafv7LlJpY=)
                          5: cne6Tiuegg21jELm7CXKBc_NeIs.roa (hash: whB4R7sT7MpYlSpIKL1GureVbW0TS4IrCy50UABdCJE=)
                          6: fUGWYm8pleQaDVpR7AYySJX4B-4.roa (hash: iBpWW8xQFwTc1AXjXKxFIEWI5L4mDOiArYB1zPaTahQ=)
                          7: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 3nhPgvc9Vxv+qqGiNEe7giIeqDinZ++N6OtmrI2wOLo=)
                          8: lKgDYcJpTwCKi-Ub1RvlbtCQ5ug.roa (hash: KU9p+u5MhhyhZX0KgcxCy7wHxrCbw6Tr7vTwkxjhqo4=)
                          9: pjppXT4RJ-M8wNSNJntX-q4GPpI.roa (hash: P4SBMKDXb5n9SMezTz6C+2SGOd72BAgDAUcnEykzClw=)
                          10: qENt31C6sYEBe37Kcj9ZTDXVT2g.roa (hash: oBob7biI5f9KIj4TqcLhqhRGUotrMnriO87CVDu3pjY=)
                          11: vBYhdNRSgNfg5JSifzUOLHQQTOc.roa (hash: nYgbiJTCs1MOp/zFKOyWVi5A+20SmEq3aSSbeG4DvAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 19 Mar 2024 17:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:53:27:6b:b8:b6:5e:e7:96:c6:4f:58:46:c7:81:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Mar 18 20:01:16 2024 GMT
            Not After : Mar 19 20:01:16 2024 GMT
        Subject: CN=2d9455f2897c7173b99b38dbe144247859cfaf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:35:9a:61:d3:21:ed:e5:88:f4:02:9b:cd:
                    68:80:be:79:7c:57:d5:3b:7c:d8:b0:e8:a6:dc:95:
                    aa:ab:9c:b4:49:60:d0:47:22:34:d0:6a:de:dc:d7:
                    2a:82:8d:61:8f:5e:2d:61:0b:0b:07:1d:cb:c6:2e:
                    bd:6b:b3:9c:80:ca:7a:41:e8:61:73:97:c1:ed:94:
                    7b:f2:89:5e:c7:76:f6:4d:9c:92:9b:8d:f7:3f:de:
                    b9:0d:ec:86:77:ef:ec:b5:6b:52:89:93:42:3a:f3:
                    2f:f2:0a:cb:55:dd:b5:e0:50:41:f6:e7:a4:cf:75:
                    94:88:43:83:86:16:50:a3:1d:39:92:d7:4d:6d:ef:
                    07:b6:2a:34:0f:42:2f:ce:6f:de:d3:40:ac:be:5c:
                    91:60:4d:81:d4:5b:ce:c2:a1:e3:3c:da:4f:9d:8d:
                    7a:5a:bf:47:86:6c:a9:a7:c8:74:e3:1d:bb:94:66:
                    66:aa:c0:77:b3:4b:7e:cd:10:79:c4:37:ce:35:f5:
                    e7:49:c9:db:c5:13:42:ea:68:90:94:86:a4:0e:4f:
                    53:af:e1:c5:15:18:a3:64:35:4e:a4:20:7b:d3:d7:
                    d4:bd:fd:c2:89:f6:e1:f2:d4:e9:e0:e6:aa:53:f8:
                    d8:26:ed:ec:72:7d:f7:14:2a:d6:02:67:26:18:39:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:94:55:F2:89:7C:71:73:B9:9B:38:DB:E1:44:24:78:59:CF:AF:30
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:cc:15:b9:ee:95:12:a1:ab:33:f8:85:f2:29:46:8f:e1:
         4f:34:a0:ec:98:ed:64:f7:e9:57:31:cb:4a:14:81:f0:24:15:
         67:e8:26:82:67:d0:b3:99:c3:2b:74:62:32:01:05:71:e9:a3:
         4c:5b:9b:5a:ca:e6:9c:0d:24:da:db:4f:bf:e1:04:5c:2c:5e:
         1f:f7:35:1e:93:3e:16:ba:f2:66:d9:7d:94:62:68:e9:65:a9:
         11:64:78:d8:a5:c3:b9:c5:16:a0:14:62:aa:f3:c7:f3:40:84:
         ee:0e:bf:3c:38:2a:09:b3:3e:07:5c:2f:0b:2c:dd:94:f3:d2:
         58:31:64:13:71:48:6d:7f:34:75:1f:4c:01:25:8b:82:67:1e:
         38:03:e1:c1:e2:d2:3b:88:14:69:26:f5:1a:5e:1b:b1:9a:9f:
         df:db:23:af:bd:bd:18:e6:f9:31:a1:68:ef:e0:16:a5:7b:31:
         78:9f:76:ab:09:7a:c7:ef:25:9f:fb:13:af:5d:dc:40:a0:5c:
         4b:d1:9d:64:4e:38:60:5f:d9:ed:7b:78:a3:07:4e:03:e1:b5:
         d0:5e:f9:c2:95:65:35:cf:8c:1f:83:f9:97:c1:ad:c5:29:79:
         ae:85:00:8b:1f:02:68:66:dd:a6:95:ff:d8:bc:cb:03:e5:47:
         09:09:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 02:13:13 2024 by rpki-client on console-ams.rpki-client.org