Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.mft
File:                     HUQEyDkugtS3Aptpy27ikLm0LAA.mft (raw, json)
Hash identifier:          T15HArajwshLm1OKboCnGbh0I7oF5o5mozW+0RH4V1k=
Subject key identifier:   EA:F4:E3:90:49:9E:00:C7:A7:9F:F6:A4:3E:C6:88:C5:F4:70:3F:E2
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Certificate issuer:       /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial:       018F57DDB05526E9D7DA1B0C27D9AC4F0247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.mft
Manifest number:          1162
Signing time:             Wed 08 May 2024 11:01:37 +0000
Manifest this update:     Wed 08 May 2024 11:01:37 +0000
Manifest next update:     Thu 09 May 2024 11:01:37 +0000
Files and hashes:         1: 68Kdvq0S1kkfJF90gZdYmcg8aNQ.roa (hash: ymrF1FjN8h7eIxNUo3eszbdi1bzu3hYN5YHybFiIDCw=)
                          2: HUQEyDkugtS3Aptpy27ikLm0LAA.crl (hash: z4w9tGNhYJWpPAgjiCMMpyyvk2PHVEx+1Ek2sQWZtdM=)
                          3: lMNSPFx5IifFukHjNNHEqp7_bFU.roa (hash: mNC2HIKb09Q0GusKPoWYv/gvA7QsOtK0q9v7wmm+WPM=)
                          4: mxX7ISPRikzbfG6XHtQTCsB26UI.roa (hash: 6cyw3AynFswcEuJgGo0G+s83pNytFwRINU7SjOjEV6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:b0:55:26:e9:d7:da:1b:0c:27:d9:ac:4f:02:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
        Validity
            Not Before: May  8 11:01:37 2024 GMT
            Not After : May  9 11:01:37 2024 GMT
        Subject: CN=eaf4e390499e00c7a79ff6a43ec688c5f4703fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:d2:6d:c5:d9:37:8e:f5:ac:8c:ff:5b:0b:
                    a3:ef:85:60:a8:db:dc:b0:41:6f:45:20:47:e4:f2:
                    22:18:cf:18:ed:13:b3:01:ed:86:6c:cd:43:15:56:
                    ff:fa:ac:0f:aa:62:ce:72:71:8a:6e:5e:e3:ba:83:
                    92:f3:6e:61:bf:55:dd:80:66:86:10:d6:46:b4:c5:
                    ae:2c:9e:75:7e:1b:e6:62:51:00:04:88:91:f0:98:
                    2f:72:68:8a:77:db:6c:79:1d:7f:a7:d5:50:24:50:
                    b1:68:bc:b5:55:7a:53:72:68:b1:d7:f3:4a:8b:b9:
                    6e:92:7e:61:7f:6d:3d:48:8f:d8:8a:b4:7e:d8:7c:
                    cb:44:9c:f3:f5:28:dd:a5:68:b0:73:15:8d:b7:24:
                    8b:11:78:05:9a:9c:c5:59:41:ea:4a:01:3e:2c:5b:
                    78:71:8c:8c:bc:62:06:3f:ba:87:3b:79:d0:cf:4e:
                    ff:e3:6e:5b:a4:49:1d:b1:3d:a2:b8:cf:7e:5a:2b:
                    0b:9e:4a:04:a5:26:be:dd:28:20:b2:16:0f:b0:dd:
                    39:83:a1:52:68:15:7e:6e:68:fb:4b:ea:7b:7d:16:
                    ad:cf:05:dd:18:76:0e:4e:31:d2:9c:ac:6b:eb:50:
                    c2:2a:2c:dc:09:9f:d1:c9:1c:76:a0:b4:44:62:9f:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:E3:90:49:9E:00:C7:A7:9F:F6:A4:3E:C6:88:C5:F4:70:3F:E2
            X509v3 Authority Key Identifier:
                keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:7c:b1:55:36:47:4a:93:9e:a5:a2:d7:b0:41:95:d8:ee:
         61:7e:e5:1a:d0:83:5a:97:1b:5b:b5:41:2f:68:1c:25:78:73:
         67:81:70:93:64:fd:ea:15:07:2f:e8:71:8d:20:df:ae:b8:ef:
         d6:2f:24:6d:a1:91:8a:9a:ed:cb:db:c8:2e:69:c8:fe:c3:7b:
         59:0e:cb:87:1e:30:57:48:c6:05:56:6b:bb:73:f8:35:f5:c0:
         ac:37:ab:4e:06:09:de:72:7a:36:7d:0d:24:63:17:cc:77:69:
         ff:7d:25:50:8f:46:60:56:f8:50:cb:fc:3c:c2:0f:39:96:38:
         31:db:eb:eb:8d:20:06:15:33:c1:58:f8:49:78:5b:69:ac:06:
         cf:1c:94:38:ff:99:49:c3:cf:cb:f3:f2:f3:79:a5:5f:f2:de:
         ad:63:9a:f8:ca:0f:ee:68:7f:1b:a8:f1:83:fe:7f:18:13:8e:
         f6:84:a7:99:45:e3:ec:74:7c:c2:63:74:45:84:25:57:90:e5:
         06:62:95:40:5b:ca:8c:83:ae:a5:8b:8f:b0:de:1f:33:57:f8:
         af:17:35:c7:52:ec:08:73:71:65:09:40:d1:17:f4:b6:a7:c1:
         54:e5:d1:0e:d4:87:6b:c7:20:2b:33:60:c3:04:26:5c:c2:3d:
         cf:54:09:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9X3bBVJunX2hsMJ9msTwJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDQwNGM4MzkyZTgyZDRiNzAyOWI2OWNiNmVlMjkwYjli
NDJjMDAwHhcNMjQwNTA4MTEwMTM3WhcNMjQwNTA5MTEwMTM3WjAzMTEwLwYDVQQD
EyhlYWY0ZTM5MDQ5OWUwMGM3YTc5ZmY2YTQzZWM2ODhjNWY0NzAzZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPSbcXZN471rIz/Wwuj74VgqNvc
sEFvRSBH5PIiGM8Y7ROzAe2GbM1DFVb/+qwPqmLOcnGKbl7juoOS825hv1XdgGaG
ENZGtMWuLJ51fhvmYlEABIiR8JgvcmiKd9tseR1/p9VQJFCxaLy1VXpTcmix1/NK
i7lukn5hf209SI/YirR+2HzLRJzz9SjdpWiwcxWNtySLEXgFmpzFWUHqSgE+LFt4
cYyMvGIGP7qHO3nQz07/425bpEkdsT2iuM9+WisLnkoEpSa+3SggshYPsN05g6FS
aBV+bmj7S+p7fRatzwXdGHYOTjHSnKxr61DCKizcCZ/RyRx2oLREYp/5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr045BJngDHp5/2pD7GiMX0cD/iMB8GA1UdIwQY
MBaAFB1EBMg5LoLUtwKbactu4pC5tCwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVRRXlEa3VndFMzQXB0cHkyN2lrTG0wTEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI4MzUtZjViNS00NzA0LWFlOTct
YzI2MzI4NTYxMDMwLzEvSFVRRXlEa3VndFMzQXB0cHkyN2lrTG0wTEFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI4MzUtZjViNS00NzA0LWFlOTctYzI2MzI4NTYxMDMw
LzEvSFVRRXlEa3VndFMzQXB0cHkyN2lrTG0wTEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTN8sVU2
R0qTnqWi17BBldjuYX7lGtCDWpcbW7VBL2gcJXhzZ4Fwk2T96hUHL+hxjSDfrrjv
1i8kbaGRiprty9vILmnI/sN7WQ7Lhx4wV0jGBVZru3P4NfXArDerTgYJ3nJ6Nn0N
JGMXzHdp/30lUI9GYFb4UMv8PMIPOZY4Mdvr640gBhUzwVj4SXhbaawGzxyUOP+Z
ScPPy/Py83mlX/LerWOa+MoP7mh/G6jxg/5/GBOO9oSnmUXj7HR8wmN0RYQlV5Dl
BmKVQFvKjIOupYuPsN4fM1f4rxc1x1LsCHNxZQlA0Rf0tqfBVOXRDtSHa8cgKzNg
wwQmXMI9z1QJUQ==
-----END CERTIFICATE-----
Generated at Wed May 8 20:48:34 2024 by rpki-client on console-ams.rpki-client.org