Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File:                     HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier:          snO6pN2VxiD9rAjwNKD70M2S7MHhlfdxZvXQdiVvNZ8=
Subject key identifier:   06:C7:11:26:9A:D2:D2:22:5D:69:48:8A:4D:1E:CC:83:0C:AD:BD:7A
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer:       /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial:       018F3A78251C3A180F3A16AF75A838964EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number:          0DDC
Signing time:             Thu 02 May 2024 18:01:43 +0000
Manifest this update:     Thu 02 May 2024 18:01:43 +0000
Manifest next update:     Fri 03 May 2024 18:01:43 +0000
Files and hashes:         1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: VjXBk0PiHwaDAM0STD75Hrjw+jmYYUnqX6QydoB9Pzo=)
                          2: LY72hTym_i-h6VQDPFU3MVpUSTo.roa (hash: dCNS80yMe0l2ZVBjhFakL5OG6ADM6Iib4JOlI5eeJhY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:78:25:1c:3a:18:0f:3a:16:af:75:a8:38:96:4e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
        Validity
            Not Before: May  2 18:01:43 2024 GMT
            Not After : May  3 18:01:43 2024 GMT
        Subject: CN=06c711269ad2d2225d69488a4d1ecc830cadbd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:4e:17:8b:85:a5:3c:a9:34:c9:86:52:c9:
                    d3:55:f4:30:5f:9e:77:83:08:d8:78:28:51:24:bc:
                    bd:8b:fb:98:25:27:54:b4:31:35:2c:8e:ea:d8:6c:
                    fa:ef:17:df:c9:31:1b:7a:66:cc:40:b8:a5:3d:b6:
                    cf:7a:60:75:c6:2e:5e:46:25:d4:0c:99:0f:89:34:
                    3a:aa:2a:73:9a:31:82:e2:57:72:2a:71:c5:51:b6:
                    f5:9a:f5:90:df:52:92:0a:86:8b:11:9b:08:d5:7c:
                    15:42:cb:37:6d:bd:22:b6:26:18:d4:af:a4:94:97:
                    b9:61:54:90:ab:a5:1e:15:ee:6b:6e:23:62:2b:22:
                    d5:67:29:f3:cd:77:ed:0e:26:d8:35:dd:06:5b:c3:
                    10:9c:2d:a4:91:d1:64:4c:6e:11:f8:b7:db:79:cc:
                    c1:37:bf:2e:2f:08:a0:81:36:c5:7c:28:fe:37:51:
                    12:55:c4:ce:ee:4f:39:60:dc:ac:c7:d0:1b:72:9a:
                    59:a8:c2:5b:c8:f0:98:ac:4c:a3:80:be:86:77:5a:
                    f8:5a:90:71:23:e9:17:9f:8a:82:80:09:57:3c:82:
                    c6:e8:80:e9:ca:3f:28:28:49:85:3f:1e:f0:b0:73:
                    04:7d:d5:54:e2:07:91:02:4e:1d:d5:fe:08:97:16:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:11:26:9A:D2:D2:22:5D:69:48:8A:4D:1E:CC:83:0C:AD:BD:7A
            X509v3 Authority Key Identifier:
                keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:2a:49:00:18:16:93:09:82:dd:43:9a:e5:45:dc:32:91:
         2a:cb:ab:d7:21:84:2f:97:26:1f:85:35:0c:2f:75:8e:bd:0c:
         23:7a:3b:97:4d:60:e3:8f:3f:2a:ef:5f:bd:5e:f4:75:99:01:
         e0:93:5c:b2:a8:76:e0:77:0b:39:53:16:92:ca:d6:2d:0b:37:
         5c:74:05:9c:ec:7f:fa:6b:19:70:95:f5:df:05:85:de:d1:f9:
         cd:59:46:ca:fa:d9:d8:37:11:25:d9:34:1e:24:8a:a9:56:00:
         89:de:0d:e2:52:94:86:6b:b0:ad:e6:0c:5c:92:58:a2:46:17:
         aa:45:b6:3d:66:0f:3b:e0:7a:7b:55:7e:d4:ce:bd:3b:32:a3:
         51:96:41:1e:30:d7:df:67:2d:93:c9:4f:a9:29:fc:da:90:6f:
         f4:3e:97:b4:fd:b1:fe:4b:7a:19:84:ac:8f:ee:6b:ec:87:be:
         aa:53:b7:8e:2a:6b:b1:fd:bf:de:88:3b:f5:3c:c7:80:92:03:
         ea:92:b2:be:d2:fe:c6:90:63:e4:e0:98:54:cd:04:cc:f8:c8:
         ce:c4:94:bd:e5:d2:9b:d1:70:ad:2a:da:e8:a9:99:41:64:cd:
         78:7a:0e:c6:c3:00:a4:37:63:21:b6:64:c0:f3:96:6e:3f:32:
         20:1f:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:58:34 2024 by rpki-client on console-fra.rpki-client.org