Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File:                     HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier:          L5JraP6TsvGbbhwxmKQSlO8ZPbQi3ZHqR8CsFJVdwBU=
Subject key identifier:   09:90:19:65:5E:DB:F9:71:37:2D:B8:65:6E:49:BC:85:8A:9F:49:C4
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer:       /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial:       0193640F1E2F6962EAFAE4D319E645611041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number:          0455
Signing time:             Mon 25 Nov 2024 16:02:12 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:12 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:12 +0000
Files and hashes:         1: 53EbTN65wPXCJOivHixndKHBOPo.roa (hash: fADBiJ6EYGfhJureuwDV1GqhbW0CdMKucNR+Cwe7La4=)
                          2: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: 9hEncbGgZjA++PVLnIv1gE0x3nEv243PjNpJoC8KHeI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:1e:2f:69:62:ea:fa:e4:d3:19:e6:45:61:10:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
        Validity
            Not Before: Nov 25 16:02:12 2024 GMT
            Not After : Nov 26 16:02:12 2024 GMT
        Subject: CN=099019655edbf971372db8656e49bc858a9f49c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:93:e2:cb:c8:64:7f:56:2e:d3:cc:19:47:
                    b2:a0:8d:c7:0a:1a:9c:58:87:de:fb:28:09:f2:01:
                    9a:36:9e:93:af:1b:5f:ab:73:8a:ed:10:05:b4:67:
                    e3:8b:f9:c7:92:a5:8c:18:93:52:f8:3e:91:73:af:
                    31:1c:de:f1:d7:88:b8:b7:30:19:11:27:32:fd:87:
                    d5:6d:11:91:1c:87:3d:36:86:db:43:68:c1:c5:dc:
                    99:13:f1:ed:d1:2b:ef:50:6f:2f:fa:e6:18:26:3f:
                    fa:20:15:f2:a7:a1:69:3c:6a:43:80:39:1f:1e:20:
                    33:ac:6c:f4:3c:77:90:38:1d:06:a6:2a:f8:0a:6e:
                    06:62:06:aa:93:7e:24:1b:76:10:6d:51:01:5c:da:
                    3c:73:e7:9d:31:38:48:b7:be:fc:8d:7f:8d:b7:08:
                    f7:61:6a:04:89:b5:57:43:aa:31:3a:f0:62:c2:a7:
                    3c:9e:63:26:30:42:b8:d4:90:d1:a4:bd:d7:37:0c:
                    56:03:3d:d1:46:ff:c3:7d:66:7f:41:07:7e:6f:aa:
                    18:0a:67:6d:95:a8:7a:d3:0b:99:ee:e3:85:6f:79:
                    43:6a:e7:15:73:23:73:e7:21:2b:c2:10:73:c3:01:
                    f1:c7:ed:27:a2:6d:2c:ca:cb:4d:a4:38:dc:d9:fb:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:19:65:5E:DB:F9:71:37:2D:B8:65:6E:49:BC:85:8A:9F:49:C4
            X509v3 Authority Key Identifier:
                keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:51:95:72:58:47:3f:b4:e0:80:40:95:4d:6c:00:a4:da:
         7a:ad:8a:c5:ab:21:cf:af:91:17:eb:b6:e7:26:99:ef:46:07:
         8b:da:9a:9f:b8:11:12:be:56:ca:bd:0f:6e:19:27:e5:72:8a:
         d8:1e:5f:ce:bd:e9:b3:02:16:57:c1:57:9c:ed:0c:9a:e4:c6:
         4f:df:a0:8b:af:cc:50:e9:77:e5:13:89:ed:d2:88:c7:c2:f6:
         a5:11:b5:67:19:1a:89:49:35:fa:eb:d0:27:06:8b:64:26:16:
         83:4b:b2:4b:44:77:e0:71:d9:0a:42:19:3f:a9:6a:38:a3:1c:
         66:33:21:dc:2a:aa:84:cc:3b:78:4c:68:13:4d:04:14:8a:98:
         5a:6f:44:4f:90:0f:80:13:81:21:35:5f:99:a3:dd:76:75:dc:
         eb:97:45:eb:fb:73:9a:45:49:eb:ff:bf:67:49:02:f4:da:f5:
         39:e0:bb:a9:d0:1a:69:e0:11:b8:86:18:18:e6:00:20:0e:c9:
         c8:50:d3:2b:b0:d5:d1:d5:ff:4d:ad:69:e2:3f:72:6a:07:65:
         3c:4d:bc:16:b8:6b:8e:a3:8f:e5:ed:08:76:97:c2:67:53:04:
         e3:3a:84:1e:80:b8:b8:6c:0f:a2:d5:dc:1f:97:ea:35:15:46:
         49:44:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:33:48 2024 by rpki-client on console-ams.rpki-client.org