Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File:                     Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier:          Ri2VczFLfp+mafj3WOMlTLAfUtDBYKUX4ylWt3sLz9E=
Subject key identifier:   B8:81:B8:25:3D:35:3F:92:CE:DD:BE:AF:AA:1F:B4:71:58:E1:69:2D
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       018F4BD9D0761A108419780C1361DF18C709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number:          10EB
Signing time:             Mon 06 May 2024 03:01:56 +0000
Manifest this update:     Mon 06 May 2024 03:01:56 +0000
Manifest next update:     Tue 07 May 2024 03:01:56 +0000
Files and hashes:         1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: YAFKx2rgeFCYOy+mAfgyM4URthDv18IQsSKIIC/PkU4=)
                          2: dJm3DcgZQ5d5Oh1rhBj_XzA_Kes.roa (hash: xDI20gCOT33dVOcukXVWh7EiXlpSpA6eEaAAxDitWL0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:d0:76:1a:10:84:19:78:0c:13:61:df:18:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: May  6 03:01:56 2024 GMT
            Not After : May  7 03:01:56 2024 GMT
        Subject: CN=b881b8253d353f92ceddbeafaa1fb47158e1692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:83:7a:86:eb:cf:1a:17:f9:a2:3b:d1:67:
                    86:3d:14:b7:d8:fd:af:ab:d2:b6:ab:38:8e:19:1d:
                    32:88:4f:d8:b3:70:6c:61:9e:95:92:88:11:5d:6a:
                    3c:d7:bc:6c:58:18:3c:3f:59:05:2b:ce:ce:31:93:
                    26:3d:4a:81:06:2f:8a:29:6d:f5:42:55:95:7e:f1:
                    fe:9b:46:2f:46:ab:93:83:02:a3:cc:47:26:ba:52:
                    26:b5:58:f3:05:eb:89:f1:0f:64:76:8f:00:cb:b2:
                    0c:93:65:aa:06:28:38:f4:4f:5b:05:41:a5:3a:55:
                    a6:dc:e1:38:ff:84:6a:a9:06:8e:28:1a:52:a5:90:
                    13:1c:07:f3:86:3c:d3:b7:0d:8d:6f:05:78:dc:b9:
                    4e:08:df:c1:cc:da:b7:24:1d:71:6d:ed:f1:da:41:
                    f9:b0:8b:9c:82:9e:43:d9:86:13:d0:be:ac:b4:64:
                    57:c5:fe:bb:de:8d:7a:d5:a0:4f:6d:a5:81:76:75:
                    7b:56:58:01:63:81:f7:f6:22:c2:03:95:d5:4c:d4:
                    6f:d5:d7:67:0b:39:09:ab:94:92:2b:a1:80:33:76:
                    70:41:e3:6d:33:9a:ff:e5:b6:a9:e3:da:1a:91:74:
                    a1:7f:e2:24:80:d4:2c:8e:a4:0c:ec:36:72:cc:e7:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:81:B8:25:3D:35:3F:92:CE:DD:BE:AF:AA:1F:B4:71:58:E1:69:2D
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:ed:c2:26:1e:e2:01:e9:cf:ae:8d:16:30:cd:45:3d:bb:
         be:a6:5b:b0:7a:0a:5b:0f:00:b5:f4:aa:32:d5:95:cd:74:e4:
         bf:39:1c:09:6d:01:4c:80:cf:99:0e:a1:ff:b5:dc:86:6a:0a:
         33:9f:a3:93:d6:ec:ab:47:54:c7:01:88:e9:f7:24:a6:9b:b8:
         14:bd:49:62:7c:67:fa:45:d6:ed:7b:5a:ad:3d:bd:2e:ac:3b:
         a4:ea:63:5d:e8:b6:1b:d6:17:04:e8:7b:d0:76:d4:cf:f6:31:
         80:87:5d:e5:0a:84:0c:f3:dc:50:53:ad:ae:b6:96:3b:ea:e3:
         d2:45:2b:d1:f2:33:21:60:46:18:cb:75:fa:bc:0e:98:0f:aa:
         b0:e7:22:03:fe:f6:c4:fe:86:c6:76:cd:ae:96:c7:fe:72:97:
         d8:98:0a:4f:63:b4:8f:ad:71:a8:df:45:6e:ed:b8:a0:cb:dc:
         1a:21:39:3a:8b:10:03:af:c9:e9:16:c6:a9:c3:cd:a5:10:a7:
         f1:58:10:8b:dc:07:9a:13:20:8d:dc:b8:c7:ac:55:0f:e8:7a:
         97:f3:79:23:d0:0b:00:1c:a0:09:fb:6a:18:ae:89:76:3a:ac:
         7b:0f:50:63:c2:e6:a2:c2:9c:a4:95:4a:bf:81:b1:44:db:1d:
         b5:9c:fa:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9L2dB2GhCEGXgME2HfGMcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNmIzZTE3ZjliOWQwYzMxM2QwNTMwMjM0MjUyNzViMjc0
NWZjODMwHhcNMjQwNTA2MDMwMTU2WhcNMjQwNTA3MDMwMTU2WjAzMTEwLwYDVQQD
EyhiODgxYjgyNTNkMzUzZjkyY2VkZGJlYWZhYTFmYjQ3MTU4ZTE2OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0yDeobrzxoX+aI70WeGPRS32P2v
q9K2qziOGR0yiE/Ys3BsYZ6VkogRXWo817xsWBg8P1kFK87OMZMmPUqBBi+KKW31
QlWVfvH+m0YvRquTgwKjzEcmulImtVjzBeuJ8Q9kdo8Ay7IMk2WqBig49E9bBUGl
OlWm3OE4/4RqqQaOKBpSpZATHAfzhjzTtw2NbwV43LlOCN/BzNq3JB1xbe3x2kH5
sIucgp5D2YYT0L6stGRXxf673o161aBPbaWBdnV7VlgBY4H39iLCA5XVTNRv1ddn
CzkJq5SSK6GAM3ZwQeNtM5r/5bap49oakXShf+IkgNQsjqQM7DZyzOf3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiBuCU9NT+Szt2+r6oftHFY4WktMB8GA1UdIwQY
MBaAFB5rPhf5udDDE9BTAjQlJ1snRfyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1Yzgt
ODdkM2UxODFlNTk0LzEvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1YzgtODdkM2UxODFlNTk0
LzEvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPDtwiYe
4gHpz66NFjDNRT27vqZbsHoKWw8AtfSqMtWVzXTkvzkcCW0BTIDPmQ6h/7XchmoK
M5+jk9bsq0dUxwGI6fckppu4FL1JYnxn+kXW7XtarT29Lqw7pOpjXei2G9YXBOh7
0HbUz/YxgIdd5QqEDPPcUFOtrraWO+rj0kUr0fIzIWBGGMt1+rwOmA+qsOciA/72
xP6GxnbNrpbH/nKX2JgKT2O0j61xqN9Fbu24oMvcGiE5OosQA6/J6RbGqcPNpRCn
8VgQi9wHmhMgjdy4x6xVD+h6l/N5I9ALABygCftqGK6Jdjqsew9QY8LmosKcpJVK
v4GxRNsdtZz6uA==
-----END CERTIFICATE-----
Generated at Mon May 6 06:08:01 2024 by rpki-client on console-ams.rpki-client.org