Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File:                     HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier:          ZCtJWVL0Y1YIaGGLAUe3zlffxSNUBsyG6PiUs7ioLWs=
Subject key identifier:   87:D0:8D:94:39:20:2F:3B:69:4A:1E:A9:DE:1A:45:C1:A0:C9:80:0A
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer:       /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial:       018F20496D85B6EFA01FF9C87D115D2F7302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number:          08C5
Signing time:             Sat 27 Apr 2024 16:00:33 +0000
Manifest this update:     Sat 27 Apr 2024 16:00:33 +0000
Manifest next update:     Sun 28 Apr 2024 16:00:33 +0000
Files and hashes:         1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: TY1b3qs7JHiH9rssaJWVkwSKYBAjPWq437ksPRQZCbY=)
                          2: J8dLljl_bsbsufnOhRDWomz6G0I.roa (hash: q2aOL0SgCO0ILmQpFDG7nQLv+lUg8XfvImaPKn6Sl/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:49:6d:85:b6:ef:a0:1f:f9:c8:7d:11:5d:2f:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
        Validity
            Not Before: Apr 27 16:00:33 2024 GMT
            Not After : Apr 28 16:00:33 2024 GMT
        Subject: CN=87d08d9439202f3b694a1ea9de1a45c1a0c9800a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:cf:96:3e:0b:46:38:0a:37:cc:76:72:a7:
                    9f:3d:9e:1b:f8:03:01:69:60:70:ab:9a:ea:9f:9b:
                    ef:63:f6:e1:05:94:b4:42:3c:4a:11:ec:1d:3e:db:
                    08:0d:a5:3c:0e:8b:de:14:be:e2:e6:e2:c4:82:00:
                    ae:ad:2c:2a:f3:8c:1d:a3:6c:80:49:98:53:d2:da:
                    11:38:c7:fb:a7:11:31:74:17:83:0c:56:91:12:3a:
                    99:2d:d8:4e:65:4f:3d:7c:99:66:20:55:fc:39:e0:
                    91:6a:51:89:de:d0:73:0d:07:21:a0:d2:67:04:62:
                    4c:30:2c:2c:e9:5d:4a:ab:1e:d5:68:36:a0:8c:12:
                    bc:c1:64:ab:af:c6:22:56:3e:5c:59:cd:af:27:0b:
                    eb:d8:95:9b:54:0d:1c:a1:b3:e0:50:19:9a:37:1e:
                    83:dd:e5:24:6d:5c:1d:2c:6a:b0:e0:e1:33:99:4b:
                    c5:ae:47:a6:2b:cd:da:37:cf:bc:04:90:9a:0f:78:
                    77:41:01:20:a6:c4:29:d9:83:c2:94:1d:d9:ba:cd:
                    e5:d7:0f:a7:97:52:c9:91:d9:d5:39:9e:f8:56:b2:
                    61:50:ba:b0:3c:f1:e9:53:23:dc:9c:75:7c:72:ef:
                    7f:05:1b:26:03:ef:51:c9:e1:0b:99:b2:e7:0d:48:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D0:8D:94:39:20:2F:3B:69:4A:1E:A9:DE:1A:45:C1:A0:C9:80:0A
            X509v3 Authority Key Identifier:
                keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:9a:e8:4f:8c:b2:48:78:31:43:67:71:86:8c:ed:95:8b:
         ed:f4:20:70:28:05:a9:9e:c0:5b:34:00:9c:f7:d0:ab:a1:d9:
         61:36:c9:b1:21:0b:c0:34:9d:4b:a2:1d:d7:77:a7:d0:64:01:
         f7:88:e2:85:48:b5:e9:24:b9:8a:fb:57:ea:c9:21:3c:a3:a5:
         55:5d:5f:f6:8c:d6:85:26:4b:b3:c0:6b:db:65:27:27:35:76:
         94:de:74:32:d3:00:c3:12:b5:99:f7:90:92:84:4d:84:27:53:
         1a:39:69:9a:48:ea:8e:92:75:82:66:0b:95:80:a2:32:bf:9d:
         df:de:81:07:ed:6e:b4:28:f0:a9:4b:2a:5a:af:c3:6c:58:fb:
         41:91:b4:9f:9c:a8:d5:e4:92:eb:4b:c6:34:28:ba:52:53:e9:
         aa:7e:92:b0:9e:38:1c:24:df:6a:ef:4c:f1:3c:ba:fd:b2:9f:
         e9:1f:e9:b6:8c:3e:59:5a:9e:f9:7b:6f:88:74:ba:47:ca:7d:
         3d:2e:d8:a1:b3:c6:53:7e:6e:14:f0:80:5f:c8:70:af:24:24:
         04:47:52:e4:3e:af:8f:d6:ad:c4:26:9d:40:48:a9:b9:db:06:
         68:f8:17:e2:a3:0b:8e:a7:f7:45:1e:2a:58:ba:b8:45:41:da:
         5c:bc:0b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8gSW2Ftu+gH/nIfRFdL3MCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjQwNDI3MTYwMDMzWhcNMjQwNDI4MTYwMDMzWjAzMTEwLwYDVQQD
Eyg4N2QwOGQ5NDM5MjAyZjNiNjk0YTFlYTlkZTFhNDVjMWEwYzk4MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteHPlj4LRjgKN8x2cqefPZ4b+AMB
aWBwq5rqn5vvY/bhBZS0QjxKEewdPtsIDaU8DoveFL7i5uLEggCurSwq84wdo2yA
SZhT0toROMf7pxExdBeDDFaREjqZLdhOZU89fJlmIFX8OeCRalGJ3tBzDQchoNJn
BGJMMCws6V1Kqx7VaDagjBK8wWSrr8YiVj5cWc2vJwvr2JWbVA0cobPgUBmaNx6D
3eUkbVwdLGqw4OEzmUvFrkemK83aN8+8BJCaD3h3QQEgpsQp2YPClB3Zus3l1w+n
l1LJkdnVOZ74VrJhULqwPPHpUyPcnHV8cu9/BRsmA+9RyeELmbLnDUgWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfQjZQ5IC87aUoeqd4aRcGgyYAKMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Wa6E+M
skh4MUNncYaM7ZWL7fQgcCgFqZ7AWzQAnPfQq6HZYTbJsSELwDSdS6Id13en0GQB
94jihUi16SS5ivtX6skhPKOlVV1f9ozWhSZLs8Br22UnJzV2lN50MtMAwxK1mfeQ
koRNhCdTGjlpmkjqjpJ1gmYLlYCiMr+d396BB+1utCjwqUsqWq/DbFj7QZG0n5yo
1eSS60vGNCi6UlPpqn6SsJ44HCTfau9M8Ty6/bKf6R/ptow+WVqe+XtviHS6R8p9
PS7YobPGU35uFPCAX8hwryQkBEdS5D6vj9atxCadQEipudsGaPgX4qMLjqf3RR4q
WLq4RUHaXLwLvw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 18:03:44 2024 by rpki-client on console-ams.rpki-client.org