Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File:                     HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier:          AFYv3gmamVDAm64kYF+EXZu8jJ5sbM2c3sRzXep/PnM=
Subject key identifier:   E6:33:D3:59:9F:D2:E5:48:2C:AA:D7:6D:97:23:BA:2B:DC:A5:5B:19
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer:       /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial:       018F4F48D89715CE8E4A6B22038B894188D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 19:02:05 +0000
Manifest this update:     Mon 06 May 2024 19:02:05 +0000
Manifest next update:     Tue 07 May 2024 19:02:05 +0000
Files and hashes:         1: 0BzLCSdSq3NvQA0dFYCUXZyZ41o.roa (hash: t/N4o7TuYGaAQCpitOE8KO9OW0qOUoFwx9aHi0Kztv0=)
                          2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: o+/h20egX14avvTfMyNyeRW5SvS1E35yjoJuL094k1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:d8:97:15:ce:8e:4a:6b:22:03:8b:89:41:88:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
        Validity
            Not Before: May  6 19:02:05 2024 GMT
            Not After : May  7 19:02:05 2024 GMT
        Subject: CN=e633d3599fd2e5482caad76d9723ba2bdca55b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ee:01:4e:db:9d:6a:ca:04:43:a4:be:b2:17:
                    51:b6:0f:97:49:89:7a:70:95:9b:cc:f2:da:e0:7e:
                    6c:7e:e6:d9:ab:0f:fe:31:b1:de:f5:de:e7:2c:d2:
                    5c:de:5c:1f:8a:ac:75:06:e1:e7:a3:a8:16:a9:71:
                    5a:74:0d:a8:09:60:23:7f:15:6e:7a:ef:71:1b:dc:
                    39:93:07:17:eb:69:45:00:7a:41:b0:9e:b9:9b:03:
                    c5:24:17:e1:ec:78:2a:02:47:35:33:29:f2:da:f8:
                    40:1e:b0:b8:65:fa:e1:c3:46:bb:b2:f0:f4:84:55:
                    62:27:43:ba:ba:d1:ef:ee:72:d9:8e:f2:7e:8c:e7:
                    22:8a:97:a1:0d:7d:70:24:94:26:43:f7:be:cb:cc:
                    00:ed:ba:6c:27:11:4d:a3:db:ba:ce:98:7b:19:20:
                    6a:ba:bc:2f:50:ac:68:3b:61:35:5e:be:6b:68:26:
                    a3:ec:1e:29:0c:4e:75:9a:4a:35:6f:4b:e2:b7:5d:
                    da:e7:89:32:24:aa:94:a3:5f:7f:ae:14:27:28:68:
                    d7:32:40:f9:dc:3e:d9:69:c4:2c:3e:be:cb:32:6b:
                    3d:8c:23:e4:31:b7:ac:6f:b1:79:44:fb:d7:01:e2:
                    46:f8:55:cf:d2:f8:c2:34:8b:7a:9b:d0:20:f9:81:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:33:D3:59:9F:D2:E5:48:2C:AA:D7:6D:97:23:BA:2B:DC:A5:5B:19
            X509v3 Authority Key Identifier:
                keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2b:18:53:52:fb:f3:05:72:b3:83:7b:6d:37:db:4c:70:bf:
         b8:ef:24:1a:44:43:23:59:17:f2:20:69:b3:5d:3e:fc:14:0c:
         33:e3:f2:b4:a6:7b:9e:ca:67:4e:18:39:4d:ab:71:0f:8b:74:
         88:a3:f3:59:37:e6:a8:d1:0e:67:42:b9:ce:74:f0:05:0c:df:
         3f:09:8a:1c:87:da:1d:77:52:b9:09:71:5d:0e:7e:4a:cb:2b:
         f0:d4:6b:f7:2d:54:1a:ba:d6:6f:09:6e:c1:b7:ce:85:71:fd:
         ca:d8:ad:18:55:88:b7:ef:6d:e0:d5:e9:c7:16:a1:bd:51:ce:
         e9:70:fd:31:5b:a8:b7:3e:4a:22:d0:e0:2b:1c:d0:c5:a0:ec:
         6e:7f:c1:ea:e7:c4:75:e0:7a:0e:b1:3e:73:03:37:ee:cd:db:
         03:10:36:63:5b:b0:57:49:5c:28:28:6e:15:dc:54:01:a5:e1:
         04:7e:dd:43:2c:ff:93:3f:1f:4a:c8:ae:19:56:0b:bd:df:4f:
         be:cf:fe:e0:56:12:f0:d2:d8:c8:e0:21:25:ec:9d:3e:f0:31:
         97:48:22:35:75:e5:33:88:60:7b:a8:86:06:71:8f:d5:fe:b3:
         af:52:85:22:99:06:22:e0:05:1d:7c:28:3e:ae:c9:42:6e:b6:
         0b:64:06:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9PSNiXFc6OSmsiA4uJQYjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjQwNTA2MTkwMjA1WhcNMjQwNTA3MTkwMjA1WjAzMTEwLwYDVQQD
EyhlNjMzZDM1OTlmZDJlNTQ4MmNhYWQ3NmQ5NzIzYmEyYmRjYTU1YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu4BTtudasoEQ6S+shdRtg+XSYl6
cJWbzPLa4H5sfubZqw/+MbHe9d7nLNJc3lwfiqx1BuHno6gWqXFadA2oCWAjfxVu
eu9xG9w5kwcX62lFAHpBsJ65mwPFJBfh7HgqAkc1Myny2vhAHrC4Zfrhw0a7svD0
hFViJ0O6utHv7nLZjvJ+jOciipehDX1wJJQmQ/e+y8wA7bpsJxFNo9u6zph7GSBq
urwvUKxoO2E1Xr5raCaj7B4pDE51mko1b0vit13a54kyJKqUo19/rhQnKGjXMkD5
3D7ZacQsPr7LMms9jCPkMbesb7F5RPvXAeJG+FXP0vjCNIt6m9Ag+YE+cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYz01mf0uVILKrXbZcjuivcpVsZMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArysYU1L7
8wVys4N7bTfbTHC/uO8kGkRDI1kX8iBps10+/BQMM+PytKZ7nspnThg5TatxD4t0
iKPzWTfmqNEOZ0K5znTwBQzfPwmKHIfaHXdSuQlxXQ5+Sssr8NRr9y1UGrrWbwlu
wbfOhXH9ytitGFWIt+9t4NXpxxahvVHO6XD9MVuotz5KItDgKxzQxaDsbn/B6ufE
deB6DrE+cwM37s3bAxA2Y1uwV0lcKChuFdxUAaXhBH7dQyz/kz8fSsiuGVYLvd9P
vs/+4FYS8NLYyOAhJeydPvAxl0giNXXlM4hge6iGBnGP1f6zr1KFIpkGIuAFHXwo
Pq7JQm62C2QGFw==
-----END CERTIFICATE-----
Generated at Mon May 6 20:35:55 2024 by rpki-client on console-fra.rpki-client.org