Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File:                     Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier:          hFPb7U2H1pJqDeWfqAcu4BWFHmy0mu6P8wJmW65buI0=
Subject key identifier:   ED:63:D2:EA:7D:C4:88:71:2B:02:36:CB:EA:1B:7E:66:1A:30:9F:35
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer:       /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial:       018F3D41CE7D83357A28907E0DF5BF622D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number:          1064
Signing time:             Fri 03 May 2024 07:01:13 +0000
Manifest this update:     Fri 03 May 2024 07:01:13 +0000
Manifest next update:     Sat 04 May 2024 07:01:13 +0000
Files and hashes:         1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: rVT/R0Vji/usD8DQ6HcYBY2tIx4ZqlO7ET7hmGTdeoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:ce:7d:83:35:7a:28:90:7e:0d:f5:bf:62:2d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
        Validity
            Not Before: May  3 07:01:13 2024 GMT
            Not After : May  4 07:01:13 2024 GMT
        Subject: CN=ed63d2ea7dc488712b0236cbea1b7e661a309f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:ad:a6:21:be:6f:55:ba:fc:b7:f6:41:03:
                    8a:a0:6a:0e:a2:47:46:a0:48:8e:cb:d8:88:1c:70:
                    80:4f:97:b0:2d:01:24:36:44:c8:31:0e:68:bc:89:
                    86:d8:fe:c7:22:b7:f4:24:80:9f:81:6d:37:15:e9:
                    62:5a:73:71:db:b0:f8:a5:74:5d:ed:af:ee:5f:96:
                    d8:da:9e:db:68:08:41:62:e2:31:4d:60:13:66:6c:
                    b8:db:31:9c:9c:4b:25:42:c7:c3:bc:65:c5:31:ae:
                    3b:93:b7:8b:1c:6b:5d:c3:92:1a:c4:9e:ca:71:5e:
                    49:1c:17:49:7f:99:df:e6:b9:0f:ab:ec:36:39:f0:
                    42:28:1a:04:9f:1e:de:4c:59:84:f3:2c:4f:3a:23:
                    41:77:59:a9:75:8b:dd:7e:25:b1:e6:51:f2:a0:af:
                    40:bd:14:a4:04:5f:00:d5:a1:bd:5d:0a:a8:d1:25:
                    be:e1:e1:3f:38:da:06:08:89:20:b6:9b:e7:8d:c2:
                    62:b6:68:c1:8a:1f:f9:e8:de:b9:49:93:59:4d:2a:
                    66:8d:15:e0:78:ce:e6:ba:b8:0b:a9:0c:aa:a5:d2:
                    85:cf:d7:f4:03:d3:91:fa:1e:30:f5:f4:e7:e8:2c:
                    7e:78:bd:7e:53:ca:6d:ed:b6:ea:ac:de:04:03:c6:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:D2:EA:7D:C4:88:71:2B:02:36:CB:EA:1B:7E:66:1A:30:9F:35
            X509v3 Authority Key Identifier:
                keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:4d:96:d7:d2:25:99:f5:3f:ef:66:66:4e:69:82:b3:9c:
         a8:28:ec:3f:f3:05:66:18:dd:e3:9b:bc:fb:55:b9:7e:b8:9c:
         17:f0:b2:91:c3:fe:c4:83:c2:f6:8a:c7:8d:50:68:b4:2e:96:
         30:99:20:b4:ac:ad:b9:fe:6a:a5:56:43:3c:f8:25:c2:00:e0:
         4c:1d:ef:ca:f0:3d:d6:5d:65:f0:00:fd:0f:7e:66:ff:ca:df:
         d7:38:2a:d2:72:fb:fb:a3:fc:0e:20:79:66:c7:c7:c8:6a:f1:
         14:55:cb:b5:7f:fb:01:f1:c1:6a:a8:f8:b5:0a:e9:f3:38:50:
         e7:85:b4:0c:95:f7:8b:4a:8e:fa:16:db:17:55:7e:d4:04:20:
         32:41:03:c5:73:35:8e:fd:d4:4b:ae:62:f2:db:e3:f4:85:bf:
         73:32:e6:1c:06:7d:c5:7c:74:31:d2:c7:2a:a1:e2:bf:be:cd:
         dc:5a:65:15:3b:59:13:f5:bc:4f:9f:8e:7f:f3:64:6e:df:28:
         9e:72:60:36:dc:27:17:88:cf:92:f1:43:61:51:e4:26:eb:71:
         97:e6:e8:2b:b9:ac:70:2f:85:9f:e0:67:7e:a3:b7:02:21:88:
         83:d5:71:84:19:34:43:48:b0:16:81:2b:78:3e:c0:7e:9b:46:
         c3:16:2d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY89Qc59gzV6KJB+DfW/Yi1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZGMzYTk3ZjFjY2FlZjdmMTA4Njk5MWNmN2IxMGE0MTBj
ZTE5NDIwHhcNMjQwNTAzMDcwMTEzWhcNMjQwNTA0MDcwMTEzWjAzMTEwLwYDVQQD
EyhlZDYzZDJlYTdkYzQ4ODcxMmIwMjM2Y2JlYTFiN2U2NjFhMzA5ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWtpiG+b1W6/Lf2QQOKoGoOokdG
oEiOy9iIHHCAT5ewLQEkNkTIMQ5ovImG2P7HIrf0JICfgW03FeliWnNx27D4pXRd
7a/uX5bY2p7baAhBYuIxTWATZmy42zGcnEslQsfDvGXFMa47k7eLHGtdw5IaxJ7K
cV5JHBdJf5nf5rkPq+w2OfBCKBoEnx7eTFmE8yxPOiNBd1mpdYvdfiWx5lHyoK9A
vRSkBF8A1aG9XQqo0SW+4eE/ONoGCIkgtpvnjcJitmjBih/56N65SZNZTSpmjRXg
eM7murgLqQyqpdKFz9f0A9OR+h4w9fTn6Cx+eL1+U8pt7bbqrN4EA8btQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1j0up9xIhxKwI2y+obfmYaMJ81MB8GA1UdIwQY
MBaAFB7cOpfxzK738Qhpkc97EKQQzhlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wZDA3MjQtNTVmNS00NzU1LTk5YzIt
NjEyNjUxYWUzZWIzLzEvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wZDA3MjQtNTVmNS00NzU1LTk5YzItNjEyNjUxYWUzZWIz
LzEvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ9NltfS
JZn1P+9mZk5pgrOcqCjsP/MFZhjd45u8+1W5fricF/CykcP+xIPC9orHjVBotC6W
MJkgtKytuf5qpVZDPPglwgDgTB3vyvA91l1l8AD9D35m/8rf1zgq0nL7+6P8DiB5
ZsfHyGrxFFXLtX/7AfHBaqj4tQrp8zhQ54W0DJX3i0qO+hbbF1V+1AQgMkEDxXM1
jv3US65i8tvj9IW/czLmHAZ9xXx0MdLHKqHiv77N3FplFTtZE/W8T5+Of/Nkbt8o
nnJgNtwnF4jPkvFDYVHkJutxl+boK7mscC+Fn+BnfqO3AiGIg9VxhBk0Q0iwFoEr
eD7AfptGwxYtxw==
-----END CERTIFICATE-----
Generated at Fri May 3 10:54:09 2024 by rpki-client on console-ams.rpki-client.org