Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File:                     HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier:          A+DG4A7m5l5jijhn9ab7FCstaIyX5KPaxKbkQ9ccUrA=
Subject key identifier:   12:A1:E4:FB:24:EB:3E:A2:3E:0D:6B:F6:6F:24:95:68:A9:73:66:1B
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer:       /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial:       018FB1C7993F53BCC97AA9C3ECF8458D2D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number:          026A
Signing time:             Sat 25 May 2024 22:03:19 +0000
Manifest this update:     Sat 25 May 2024 22:03:19 +0000
Manifest next update:     Sun 26 May 2024 22:03:19 +0000
Files and hashes:         1: 53EbTN65wPXCJOivHixndKHBOPo.roa (hash: fADBiJ6EYGfhJureuwDV1GqhbW0CdMKucNR+Cwe7La4=)
                          2: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: ttoudwyxXYQACrZQIJsOOBXpkz21pQBAD8n5XibjrrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c7:99:3f:53:bc:c9:7a:a9:c3:ec:f8:45:8d:2d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
        Validity
            Not Before: May 25 22:03:19 2024 GMT
            Not After : May 26 22:03:19 2024 GMT
        Subject: CN=12a1e4fb24eb3ea23e0d6bf66f249568a973661b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:f5:5b:dd:ac:89:4a:f3:db:45:89:3d:de:
                    a3:c7:bd:ae:66:03:3e:58:bb:fc:6a:d4:7c:fe:aa:
                    37:8a:fb:04:5e:57:77:ce:32:26:7b:97:46:c4:55:
                    ed:e4:51:da:d3:c6:f0:79:f5:84:6b:30:7c:b4:c4:
                    d6:23:ec:2a:6f:c1:6d:3a:20:f8:1d:65:f7:f0:53:
                    a9:80:0f:a9:df:5d:36:dc:0d:2a:f0:c0:c3:f4:2d:
                    43:5f:76:ad:f9:8a:c6:4e:7a:27:f7:ed:32:86:0b:
                    30:e0:26:11:09:75:81:35:a8:a1:56:2b:aa:4b:9e:
                    1b:2b:0a:8e:6c:84:d5:3b:fe:b1:17:f6:ee:cf:ad:
                    8e:00:1a:88:d4:38:6a:b8:37:4b:50:d9:57:bd:f6:
                    f1:8a:59:77:11:e5:ac:bf:67:92:34:69:af:7a:43:
                    07:bf:0d:7a:38:c8:30:2a:76:d2:3a:6d:3e:cd:71:
                    4c:83:7c:68:f6:e0:82:99:27:c3:9e:0a:12:51:e5:
                    e8:b3:ba:59:17:c8:69:a6:88:c2:6c:70:09:0d:18:
                    4a:6b:a1:4e:89:f2:72:9e:36:e9:f3:4b:78:e2:52:
                    09:ac:f2:d7:2f:98:71:91:57:68:69:ed:47:f4:2e:
                    7e:ee:25:31:66:92:2d:3d:91:e5:15:ae:ab:1a:57:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:E4:FB:24:EB:3E:A2:3E:0D:6B:F6:6F:24:95:68:A9:73:66:1B
            X509v3 Authority Key Identifier:
                keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:19:8e:47:3d:00:ec:97:63:b5:dc:67:73:ec:6d:01:e0:47:
         e2:12:13:fc:11:5a:db:d7:70:6c:c6:29:d9:0e:d0:a5:8d:33:
         40:ba:b5:cb:47:28:08:c4:ff:e0:8d:a5:e5:25:99:8f:36:73:
         8b:67:2e:a1:6c:cd:ce:5b:53:cb:87:0e:2f:27:61:41:3f:87:
         5f:de:d5:5f:88:95:88:42:89:5a:28:be:9d:93:ad:02:92:bd:
         0e:83:1d:38:41:53:67:d7:61:97:10:a8:39:a6:06:66:6e:98:
         af:ae:58:90:bc:13:99:5f:2e:fd:db:e9:6f:6b:c8:f3:1c:8c:
         05:84:28:ae:f4:78:74:cd:f1:e4:33:8f:bf:22:05:b7:84:a4:
         e0:04:c8:f2:19:48:d4:b2:ae:5b:01:53:db:81:e1:b1:d9:b2:
         1d:d2:0c:64:35:5d:93:d2:18:64:be:8f:c3:c7:37:cb:08:b4:
         d1:8a:de:9a:5b:4b:c2:7c:72:65:de:22:d0:25:55:44:a5:eb:
         ee:f0:4a:64:e2:62:66:c0:5c:cf:1c:41:04:8d:cd:9a:3b:74:
         5a:ea:ce:30:81:51:de:a4:f8:1e:24:0b:8f:21:59:ed:3e:7a:
         ce:b8:12:b6:c5:a0:27:ed:4b:ca:27:13:f5:64:07:64:36:1f:
         73:71:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:10:13 2024 by rpki-client on console-ams.rpki-client.org