Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
File:                     HAEKqEOKglpVQgE_G5DTSO2KAMY.mft (raw, json)
Hash identifier:          xgKS5GvSxp1C/aMx0c37tDkdKTJLfwoxDQ6rfDBNYO0=
Subject key identifier:   8F:1F:1F:CB:42:54:B6:BE:6B:DD:0A:70:43:B6:8F:08:9A:03:2C:FE
Authority key identifier: 1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
Certificate issuer:       /CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Certificate serial:       018F44FB35D57189CF03F5A140F1C5E13DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
Manifest number:          0836
Signing time:             Sat 04 May 2024 19:01:04 +0000
Manifest this update:     Sat 04 May 2024 19:01:04 +0000
Manifest next update:     Sun 05 May 2024 19:01:04 +0000
Files and hashes:         1: HAEKqEOKglpVQgE_G5DTSO2KAMY.crl (hash: USLmXiNVI6KoO0jwgpOTmhS5yLE2PwItpj2JW8wLyPs=)
                          2: WqciO0wM3a-hRegaXIDxCwj6DTs.roa (hash: 2f8Ra2i6rR7L/ms00UoiBbWxLAAABSwSxae0lrnw7j0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:35:d5:71:89:cf:03:f5:a1:40:f1:c5:e1:3d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
        Validity
            Not Before: May  4 19:01:04 2024 GMT
            Not After : May  5 19:01:04 2024 GMT
        Subject: CN=8f1f1fcb4254b6be6bdd0a7043b68f089a032cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:a5:23:31:12:c7:c7:e1:bb:82:ac:76:12:
                    79:20:16:32:9d:07:9a:fa:45:99:d7:c2:ae:96:d8:
                    d3:80:41:af:74:1d:6d:e3:2d:f3:95:94:ba:c4:48:
                    df:21:66:48:63:f4:3f:f7:bd:09:53:8e:7b:2b:1d:
                    80:66:bd:33:a1:4c:68:a3:42:9c:dc:09:17:4f:28:
                    a0:c1:2e:75:2e:ca:e9:2d:df:8e:ba:fa:62:e7:c2:
                    80:c1:5e:49:b7:8f:3b:b0:8f:c1:c4:33:af:ab:ce:
                    0b:c9:02:81:8c:f4:12:94:38:00:88:66:e0:15:1a:
                    b6:0b:f3:98:24:1c:09:b6:ab:04:83:6a:20:1f:1a:
                    e1:d5:63:33:90:9b:c6:38:1c:aa:f7:2b:b2:bc:41:
                    23:6a:6e:36:5a:51:fe:c6:5f:83:a6:f7:b8:ec:98:
                    38:e7:d1:60:08:b6:89:26:97:33:75:2e:57:dc:08:
                    74:6a:01:55:8e:fe:1c:ae:cf:f0:f1:06:97:01:a7:
                    09:05:0c:6f:a5:3d:76:70:d4:18:3a:0e:3a:94:b8:
                    b8:cb:9a:83:ce:32:33:33:92:82:ae:a0:92:36:b6:
                    ab:fd:e8:84:76:19:85:95:7d:d7:11:6d:6c:b8:3f:
                    3e:ca:49:d6:d5:cb:d0:55:c2:94:8f:d9:e9:74:7b:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:1F:CB:42:54:B6:BE:6B:DD:0A:70:43:B6:8F:08:9A:03:2C:FE
            X509v3 Authority Key Identifier:
                keyid:1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:14:71:0d:01:8a:cc:1e:a9:97:21:49:1f:b4:57:63:5f:70:
         8c:49:d7:af:5b:67:a0:3d:f4:74:cd:03:34:da:b6:08:07:85:
         18:b4:3a:7f:e7:16:f9:d7:0a:6d:ca:8a:c4:e5:f0:41:e6:e1:
         74:b4:2d:c2:41:06:08:01:2d:82:62:67:49:2a:a8:4c:f6:c1:
         40:6e:5a:59:49:aa:d2:13:92:99:0c:38:cb:94:7e:54:0a:7e:
         d3:b8:65:2e:b3:76:b0:f0:ae:a2:1e:a7:26:c9:fa:15:e3:ba:
         a2:ac:f1:5d:c5:1a:3f:ae:f3:bb:00:8d:3f:05:a5:f0:a7:7d:
         78:48:2f:d0:84:e9:26:e9:6a:b7:1f:10:42:02:34:93:14:c0:
         88:ff:62:3c:ab:75:52:86:55:81:59:4a:34:fa:f6:b8:d2:7d:
         05:97:07:86:c0:48:1b:0a:e0:85:64:fe:c1:4d:d9:c4:5d:52:
         34:f8:ed:e7:e8:47:64:24:77:5c:d4:66:bb:35:48:c9:8b:ce:
         b6:26:35:ef:43:d6:52:f2:dd:ec:ce:60:65:00:85:17:fd:87:
         62:76:db:3b:4f:db:10:98:43:15:8b:7c:82:d9:87:0c:53:65:
         b6:c8:81:87:e0:76:7a:79:b5:2d:c3:a9:da:e2:68:64:ae:e4:
         53:97:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:14:44 2024 by rpki-client on console-ams.rpki-client.org