Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          Ym5DS6c2lUZr3rfpJRK7ffXn85QegQBsho1z6MoG19A=
Subject key identifier:   3B:F9:8C:93:C9:8F:DB:A1:B8:7D:ED:C2:BB:5E:21:E7:1C:F9:45:5C
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       018F576FE3FD36EAFF083877985F4A02E819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          0EA1
Signing time:             Wed 08 May 2024 09:01:41 +0000
Manifest this update:     Wed 08 May 2024 09:01:41 +0000
Manifest next update:     Thu 09 May 2024 09:01:41 +0000
Files and hashes:         1: AowOtO1H6kaN3cJqp89CzccGR2U.roa (hash: Rd9fp9AjL5AHCt40XcUrljzPdfglDXiODmvDMo0P8+Y=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: fC/lKto3efMAFMGk05EvDkMib8hzMZQr9hBY+pYbr+c=)
                          3: dlv-naHwwybt8R3O-nXgjQLlKgA.roa (hash: MJmY1yz4Z+k2e4k6bqdDO4pQmNPRn86i3apCvU0JMAs=)
                          4: hJ-LD-rw40r7Ig_MPZhvIn-Q6T4.roa (hash: XYNREJQvCSJCtYhZ5Ppaw/vyoJcreYRERFNhuK+VGGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 09:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:e3:fd:36:ea:ff:08:38:77:98:5f:4a:02:e8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: May  8 09:01:41 2024 GMT
            Not After : May  9 09:01:41 2024 GMT
        Subject: CN=3bf98c93c98fdba1b87dedc2bb5e21e71cf9455c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:9a:92:ac:49:7a:29:b3:10:56:1e:50:8f:
                    37:6d:ed:6c:e4:29:b5:44:4b:9e:bc:04:a4:5e:b5:
                    a4:e4:69:ea:0f:16:46:e0:4c:ce:fb:80:00:d5:d2:
                    2e:bc:13:9d:b6:ff:30:7e:fe:e9:09:36:6f:54:ce:
                    60:d1:3f:43:ed:37:60:e3:95:ed:12:1a:40:7c:16:
                    0e:a6:c4:79:9c:a4:8f:70:59:de:71:fc:52:48:99:
                    e8:29:13:9e:f4:0e:3e:60:6f:6d:91:35:76:ad:a4:
                    59:2d:f5:47:24:6c:53:30:3b:e6:a0:ea:54:3a:d0:
                    6f:50:92:99:b3:63:34:a3:80:6e:be:8c:33:b0:a4:
                    97:84:0c:c7:c4:cc:00:e5:f5:6d:b1:99:cb:16:07:
                    50:21:66:a7:e0:7b:ef:d9:28:3d:59:6a:83:f5:42:
                    7e:51:70:5e:84:31:51:8c:2a:a3:9b:3d:89:8c:ec:
                    bb:2d:8d:43:00:98:82:58:7a:2d:20:11:0d:6f:dd:
                    11:f9:97:65:01:e8:3a:2d:4d:fd:c9:3b:a7:08:a3:
                    eb:d4:f9:fb:61:0c:3e:3d:d4:a1:e7:d3:65:9b:6d:
                    34:ca:24:1b:ac:9d:ee:a9:94:d3:41:63:2b:a9:5e:
                    c8:75:ef:e7:b5:01:61:50:ba:55:ef:7c:3a:cc:c9:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F9:8C:93:C9:8F:DB:A1:B8:7D:ED:C2:BB:5E:21:E7:1C:F9:45:5C
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:40:a5:83:a8:ce:41:9a:27:ed:b2:15:82:0a:4a:57:0c:
         7d:a6:ec:da:da:49:11:17:93:62:a7:bb:b4:5c:b1:3f:89:96:
         e6:19:96:53:01:7d:28:79:d2:00:e5:37:b9:a6:7d:66:95:a7:
         36:f6:53:aa:4a:22:2b:78:54:d9:d8:06:3e:b8:d7:ba:87:bb:
         54:91:47:50:d1:45:4b:75:4f:5b:e1:4d:31:1c:e8:cc:a8:a3:
         7a:96:6f:f5:81:d7:81:28:e6:ff:d6:d4:4e:e1:2e:59:d7:9e:
         a9:cd:b2:58:22:17:0b:37:8e:2d:40:3f:cc:10:44:9f:38:f9:
         4f:1b:bd:93:4e:70:e2:fd:03:a3:14:b8:3f:7c:e7:6b:30:79:
         38:32:24:95:12:2d:de:bd:67:c7:51:58:77:3f:1f:c9:fc:75:
         b4:39:9d:3d:6d:7c:b0:50:52:a4:bc:e3:5b:a2:b7:56:74:ad:
         4a:22:97:eb:a9:f5:20:ea:90:4f:4e:09:e9:86:58:6f:e6:ac:
         27:6f:2f:6b:8e:9b:96:f0:f4:8d:18:2e:a1:27:31:cc:a2:23:
         33:15:a7:8a:16:68:63:5f:e3:67:b2:35:36:01:19:98:d1:b0:
         cf:e3:87:64:18:ff:b3:8f:48:32:99:78:bb:ea:57:cc:b8:fe:
         26:97:5e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Xb+P9Nur/CDh3mF9KAugZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi
YTViMzMwHhcNMjQwNTA4MDkwMTQxWhcNMjQwNTA5MDkwMTQxWjAzMTEwLwYDVQQD
EygzYmY5OGM5M2M5OGZkYmExYjg3ZGVkYzJiYjVlMjFlNzFjZjk0NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t+akqxJeimzEFYeUI83be1s5Cm1
REuevASkXrWk5GnqDxZG4EzO+4AA1dIuvBOdtv8wfv7pCTZvVM5g0T9D7Tdg45Xt
EhpAfBYOpsR5nKSPcFnecfxSSJnoKROe9A4+YG9tkTV2raRZLfVHJGxTMDvmoOpU
OtBvUJKZs2M0o4BuvowzsKSXhAzHxMwA5fVtsZnLFgdQIWan4Hvv2Sg9WWqD9UJ+
UXBehDFRjCqjmz2JjOy7LY1DAJiCWHotIBENb90R+ZdlAeg6LU39yTunCKPr1Pn7
YQw+PdSh59Nlm200yiQbrJ3uqZTTQWMrqV7Ide/ntQFhULpV73w6zMlOGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv5jJPJj9uhuH3twrteIecc+UVcMB8GA1UdIwQY
MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt
ODE5MTdkZmZkY2Q3LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3
LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmxApYOo
zkGaJ+2yFYIKSlcMfabs2tpJEReTYqe7tFyxP4mW5hmWUwF9KHnSAOU3uaZ9ZpWn
NvZTqkoiK3hU2dgGPrjXuoe7VJFHUNFFS3VPW+FNMRzozKijepZv9YHXgSjm/9bU
TuEuWdeeqc2yWCIXCzeOLUA/zBBEnzj5Txu9k05w4v0DoxS4P3znazB5ODIklRIt
3r1nx1FYdz8fyfx1tDmdPW18sFBSpLzjW6K3VnStSiKX66n1IOqQT04J6YZYb+as
J28va46blvD0jRguoScxzKIjMxWnihZoY1/jZ7I1NgEZmNGwz+OHZBj/s49IMpl4
u+pXzLj+Jpde3A==
-----END CERTIFICATE-----
Generated at Wed May 8 18:00:58 2024 by rpki-client on console-ams.rpki-client.org