Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
File:                     Hi7K7IpIZQRllMb38hCVIAFvDrc.mft (raw, json)
Hash identifier:          aftvEIZVBDAOMTPUfrfWm+iNkG6aMhQKc3ii1ZDUAtM=
Subject key identifier:   F8:7F:81:61:FD:3B:E5:AC:AB:36:21:86:39:62:AE:37:AE:E5:94:81
Authority key identifier: 1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
Certificate issuer:       /CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
Certificate serial:       018F3C9D68B53D9B54CDF614C53E86A7D2D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
Manifest number:          0E11
Signing time:             Fri 03 May 2024 04:01:39 +0000
Manifest this update:     Fri 03 May 2024 04:01:39 +0000
Manifest next update:     Sat 04 May 2024 04:01:39 +0000
Files and hashes:         1: Hi7K7IpIZQRllMb38hCVIAFvDrc.crl (hash: BIeHyvf7foTXHBXaatEIbRexqhP727ZNOXP+zBgbTTI=)
                          2: s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa (hash: Ofz8Uw5Px5XOSlB+a+MV+JRMGn3OTsBp4svcWGsJJ/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:68:b5:3d:9b:54:cd:f6:14:c5:3e:86:a7:d2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
        Validity
            Not Before: May  3 04:01:39 2024 GMT
            Not After : May  4 04:01:39 2024 GMT
        Subject: CN=f87f8161fd3be5acab3621863962ae37aee59481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:bd:71:8a:ad:36:7e:6b:52:b5:6b:35:c5:
                    a5:e7:29:8a:26:23:ff:11:50:35:b9:10:06:25:9a:
                    8d:e3:e4:6c:e7:18:75:6f:67:e6:42:c0:b8:3d:b4:
                    55:3b:e4:d9:45:fd:34:25:5b:f3:df:10:47:5a:bb:
                    ca:6f:e7:ad:4a:5f:2c:31:21:fa:92:f7:92:52:3f:
                    57:82:78:a6:cf:2e:26:df:01:3a:ce:92:d4:f5:71:
                    79:37:e0:96:9e:29:78:70:d7:da:f8:30:3a:af:99:
                    1f:4f:f2:b1:b6:ee:55:af:8c:2b:f9:1d:5a:28:2d:
                    03:de:e1:f3:a8:40:08:06:a2:b9:25:ff:da:cd:b1:
                    ce:64:e7:d1:ea:0a:c8:fa:d9:09:81:f9:45:55:5c:
                    bc:e0:4d:db:77:1a:83:71:34:19:e2:d7:2b:fa:b7:
                    1f:40:96:a6:b4:f5:8a:4f:6b:64:e7:56:2e:2d:b3:
                    64:e9:83:61:35:b5:db:8f:94:af:48:68:d7:2b:dc:
                    6d:37:b3:43:f7:0a:f8:90:0b:d4:6a:a6:e3:84:ba:
                    5f:56:6f:d7:9b:8b:40:56:5a:eb:94:5e:8b:18:22:
                    5a:9d:dd:b5:f6:47:00:ee:07:29:77:44:34:d8:fd:
                    b0:5a:a4:08:99:0c:31:c2:88:63:6c:60:83:3e:7b:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:81:61:FD:3B:E5:AC:AB:36:21:86:39:62:AE:37:AE:E5:94:81
            X509v3 Authority Key Identifier:
                keyid:1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:ba:43:42:9f:98:3e:f6:25:00:87:12:a9:b1:1c:0e:dd:
         f9:e4:46:2a:21:b7:17:b4:ba:bb:52:2d:87:64:cf:cc:d9:83:
         43:9b:85:20:8b:7f:75:b8:f6:b4:48:cf:fc:40:38:6e:d7:89:
         5d:f5:be:e6:f3:09:2c:a9:f1:22:8e:05:25:68:50:ac:76:64:
         3d:81:2c:22:bc:2d:b0:9a:e8:53:bf:f7:fe:da:41:03:8a:09:
         19:b4:d9:38:34:4f:1d:48:0b:47:f9:a0:04:c8:da:cc:2b:ff:
         a2:b0:b7:6d:be:b6:5b:c6:d8:a8:76:a6:ff:b4:33:4e:87:3b:
         2a:f7:df:2f:e2:39:6a:47:e4:c8:39:1b:90:de:a4:e3:e7:8c:
         6c:48:93:e1:45:a1:4f:4c:15:0f:ee:91:20:2d:9f:94:28:7f:
         96:f1:99:d1:e4:3d:dc:4a:d8:6d:5f:63:09:df:a3:91:41:c0:
         4e:99:8a:4a:8a:89:45:44:f9:c0:7b:86:b8:4d:8e:3f:ec:29:
         d0:e6:25:ae:dc:3e:20:2c:29:85:60:ac:95:0c:0d:e4:ac:d7:
         6f:65:14:d5:ff:a9:6a:87:7c:66:cd:ee:b5:58:08:de:bf:17:
         29:07:bd:5a:3d:50:df:84:a3:20:83:56:17:29:02:a4:23:62:
         93:67:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:16:21 2024 by rpki-client on console-fra.rpki-client.org