Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File:                     HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier:          ZTMOmXsmXbAiCT4LwhiFmV5kMWnk0Uz5XlqOPd+C5sI=
Subject key identifier:   0B:C2:D7:EF:3D:39:AE:38:A2:31:CC:20:DB:BA:09:F4:8A:01:D1:80
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer:       /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial:       018F4456F09BAAAC5C03E8E73B90024DF57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 16:01:39 +0000
Manifest this update:     Sat 04 May 2024 16:01:39 +0000
Manifest next update:     Sun 05 May 2024 16:01:39 +0000
Files and hashes:         1: AjMhZ1IOEWzTMXzl8qMwRFNqLy4.roa (hash: udphLrplCGN19WYihOsssOOt+zaDjRwIq+toXD7iHBQ=)
                          2: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: CO3OxqN1dXWCClRry+05619hoNMiC1mbM8gHCzNS5CU=)
                          3: P9xfvowjwUTJ1BeBZWftNJoTRTY.roa (hash: PCS3CVpHKLNPd59/He1D9rndMZygMly1wpKkhCi7M84=)
                          4: ZAOyjloMoilTGC3cc5ONiDQ2iyk.roa (hash: uhFQey8M5AHbP7wPLMsGw3U7IFHe6AZRHY7KF6OhOzw=)
                          5: sCAfZlaxrSgzwfCw6tKV5eiKrpU.roa (hash: ZalRWsrsecaukS+UbCuHZN7n1IDYm2r2cOKAwhXt76o=)
                          6: sYtFPAvnPTUKtkFq69zdSG2DFYs.roa (hash: nwwr9C17f2Z/tRH5yYTZMkrt1TS4H1uJqzUl2+2oJ9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:f0:9b:aa:ac:5c:03:e8:e7:3b:90:02:4d:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
        Validity
            Not Before: May  4 16:01:39 2024 GMT
            Not After : May  5 16:01:39 2024 GMT
        Subject: CN=0bc2d7ef3d39ae38a231cc20dbba09f48a01d180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:55:39:57:56:ec:6c:f5:07:06:ca:67:22:
                    06:1e:21:34:25:26:55:1d:78:6b:71:7b:80:a7:82:
                    cf:88:a1:5f:df:ae:e9:74:52:6f:b5:cd:7e:4d:8b:
                    25:4c:7f:82:00:2e:c0:a4:81:81:27:8b:44:0c:0c:
                    b1:18:b0:9e:f9:a8:87:8f:7a:1d:05:72:5f:27:d4:
                    09:db:05:ed:32:c7:83:a0:f5:a9:91:ba:5e:1f:ca:
                    7d:d8:73:49:9c:d7:44:00:78:9d:af:c4:57:2d:35:
                    10:5b:56:9d:42:53:8f:88:aa:44:9a:aa:15:40:ae:
                    08:c5:b6:5f:e9:77:13:15:0a:7d:c1:db:ca:b9:81:
                    70:41:db:f5:d8:dc:e6:74:08:49:3f:08:94:16:bf:
                    b7:5b:a9:d7:6b:df:d8:1b:3c:ca:56:83:0b:47:ba:
                    ff:71:43:cc:f2:4b:d2:68:65:9f:13:d9:f7:f0:80:
                    23:a3:6e:4e:20:44:70:44:17:bc:0b:3c:ae:34:b3:
                    f5:ea:0a:1f:74:3e:6d:88:28:a3:0f:87:03:a3:b7:
                    26:1e:c3:b9:d1:6b:82:e3:f6:28:3b:56:20:5e:b5:
                    e8:4a:48:f4:a1:d4:a0:72:e7:4e:d5:7b:a1:88:87:
                    61:6d:ad:b2:a2:34:4c:e5:3f:dc:03:f7:03:7c:fd:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:D7:EF:3D:39:AE:38:A2:31:CC:20:DB:BA:09:F4:8A:01:D1:80
            X509v3 Authority Key Identifier:
                keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:58:52:c9:a9:2e:eb:0f:98:26:f2:86:58:4d:52:a3:84:
         ca:da:d4:8e:2d:22:b2:75:28:0f:79:d1:5e:17:f9:71:38:56:
         7a:89:30:0c:92:60:ab:d9:18:52:44:f7:cb:84:5f:7a:2c:d8:
         59:7b:3a:d7:e5:91:dc:fb:f4:c2:fa:eb:21:9b:34:ab:a9:52:
         19:d6:82:23:bd:bc:d3:19:64:1a:8e:da:d5:6b:c7:07:a3:a3:
         f1:26:3b:d5:f7:13:b5:13:1b:20:5f:3b:00:03:70:38:a4:a8:
         ff:94:29:0e:7d:4d:3b:ec:bc:9a:5e:a4:c0:1d:7e:36:1b:e3:
         28:57:00:02:e8:3b:ea:ed:2d:93:f0:b6:27:90:34:32:97:f8:
         a7:2f:ee:2a:a4:86:f5:8e:ac:b6:78:9d:eb:7e:54:73:f6:b5:
         9c:1f:29:e7:80:cb:25:16:5b:96:8a:4d:7a:a9:5b:dc:0f:39:
         42:30:85:cb:09:61:f9:b2:0e:30:bc:1c:2a:79:67:a7:ed:f8:
         67:1b:d7:75:0d:a7:d7:0c:f0:1c:0e:c3:61:b0:cb:ff:b1:dc:
         79:7a:84:f3:31:c2:4f:53:fb:ed:f3:db:20:f5:f7:d2:59:1c:
         ed:7c:78:c9:ce:84:bf:c5:98:b2:b8:34:49:78:49:37:0f:76:
         1d:9b:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:48:49 2024 by rpki-client on console-fra.rpki-client.org