Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File:                     h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier:          cmWB6ckExWpy6rCz9w0KNzw6Cc7AN95IbJ8Z+kMqD9s=
Subject key identifier:   95:59:82:DF:DC:FF:33:F1:A5:BE:91:25:E4:76:E9:35:89:24:D6:E1
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer:       /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial:       018F8749F72B52D7C978A4630E1FBB652C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number:          0B5D
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: vusNgLStVyzsCJkrVTjPKNeHTNafLg/iNHAEayy8v18=)
                          2: t6qZqDeZ09MWSDzZVr-GI1Z6wQo.roa (hash: ah2Npyzk1rVjwuMIZVDAAzPOq/jKihWbyGuGXoQgmJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f7:2b:52:d7:c9:78:a4:63:0e:1f:bb:65:2c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=955982dfdcff33f1a5be9125e476e9358924d6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:ac:7d:8f:45:91:6c:d9:1c:f6:65:8c:76:
                    b2:5a:05:72:0b:2f:64:bc:a4:a7:ac:72:0f:a9:b2:
                    5a:a6:d4:cc:40:92:ec:c3:db:da:3c:e3:75:6f:f6:
                    f1:1e:c8:d5:3a:70:5f:d4:fe:65:d3:3d:82:0e:6b:
                    82:0a:88:72:ed:14:5d:e8:24:6f:83:f6:d3:2a:fd:
                    75:47:5e:b5:89:27:b6:b1:dd:bf:d4:ae:a6:b2:0c:
                    0c:0c:d6:52:1a:cd:39:01:d4:60:73:cd:13:2f:26:
                    b4:ef:bb:72:f9:57:6a:d0:a7:ff:da:9d:8e:0f:9e:
                    e8:5e:26:57:54:83:ab:0c:48:be:60:b1:5b:13:4b:
                    75:dc:2c:1f:1c:e1:79:46:9f:8b:74:1d:d3:b0:96:
                    cc:f6:08:86:2b:bc:fe:67:d4:ea:64:dc:2d:0c:a6:
                    ec:ff:50:53:89:69:f9:70:0c:40:d8:5c:ed:c8:ac:
                    d2:0d:30:1f:c1:7f:3a:81:cb:cf:6b:36:98:23:c7:
                    aa:f4:36:d7:b9:38:cc:b8:30:43:b9:74:12:af:8b:
                    28:73:e7:8c:c5:c2:5c:3c:3d:96:61:cd:3a:38:80:
                    67:19:23:6d:3a:ef:ff:ff:b4:c5:c3:91:25:ba:9a:
                    82:e4:f6:a6:d5:48:a9:93:77:0e:7e:09:6d:12:6a:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:82:DF:DC:FF:33:F1:A5:BE:91:25:E4:76:E9:35:89:24:D6:E1
            X509v3 Authority Key Identifier:
                keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:44:4f:91:5e:1a:8b:9f:e6:69:95:35:f7:3b:d9:58:19:
         c5:a0:9f:29:5b:a1:c0:9d:81:dc:e1:97:a1:09:c8:56:c7:87:
         ae:76:eb:64:80:2d:3e:c1:ba:37:85:c4:d6:48:d3:dc:4b:55:
         82:c3:ca:f4:33:ad:5d:96:43:53:b3:25:c3:9c:0b:29:f9:70:
         0a:99:88:28:ae:b9:00:4d:c2:d2:30:5a:a7:b5:e9:22:f6:bc:
         5d:b4:78:73:ca:60:f1:68:1c:1d:14:18:10:9b:36:0d:4f:95:
         7b:fe:4a:74:1f:cf:4c:86:11:a2:6b:06:ba:7c:c4:31:7a:15:
         53:37:d8:fd:07:08:09:46:26:f1:5b:7d:8d:cc:09:73:e0:8b:
         c2:1d:60:fe:93:47:bf:4e:b5:02:5a:c1:88:bd:1b:4d:04:84:
         4f:36:5d:2d:0a:57:ae:d6:72:2c:56:c3:4c:13:21:5d:c7:ac:
         26:6e:a0:22:97:c1:72:22:63:3d:98:24:26:e7:33:17:c5:97:
         97:29:d8:af:fd:1c:41:ef:6f:7f:ef:d5:93:43:51:8f:d4:7d:
         15:25:e7:07:9f:6f:f7:bf:5d:92:e5:d3:df:13:ab:a1:a6:54:
         1a:6c:74:ff:ff:b1:e1:56:20:51:72:17:b3:ec:c1:50:a5:3a:
         c7:18:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:55 2024 by rpki-client on console-ams.rpki-client.org