Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File:                     hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier:          JtXCMUbzfWdK+z10ciuEe7yrP+RJE+ji8LjAZBWHdvA=
Subject key identifier:   C3:1E:D7:25:0C:E5:BF:FA:A8:68:2A:F6:18:E3:4C:89:0C:AC:ED:DC
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer:       /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial:       018F89368E6B2BDF781ECA774AC9FB6B9318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number:          0B54
Signing time:             Sat 18 May 2024 01:00:04 +0000
Manifest this update:     Sat 18 May 2024 01:00:04 +0000
Manifest next update:     Sun 19 May 2024 01:00:04 +0000
Files and hashes:         1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: jGthdel3PmupS3ALi89/6gSzNgGUUUdDdEm4C92lhZQ=)
                          2: t8ykx25TKUWmrFeCiH3TZwokDCQ.roa (hash: 2QZAvzskcWX+Qat5M6L43i4RnJo1H1cuT9jowaNe+Hc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:8e:6b:2b:df:78:1e:ca:77:4a:c9:fb:6b:93:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
        Validity
            Not Before: May 18 01:00:04 2024 GMT
            Not After : May 19 01:00:04 2024 GMT
        Subject: CN=c31ed7250ce5bffaa8682af618e34c890caceddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:10:b5:ef:46:d2:30:e4:e2:27:cd:a3:2d:
                    cb:ef:08:2d:33:c6:bb:93:1a:17:ec:a8:47:1f:88:
                    67:e1:a6:84:d7:1a:7a:81:c8:4c:c4:74:31:b6:d4:
                    b6:be:61:fa:fe:3d:fd:18:41:23:3a:2d:7a:77:e3:
                    f4:96:dd:6a:8b:ce:a2:bf:1d:f1:76:3b:05:63:d7:
                    96:80:0e:14:85:83:ed:3b:1f:b6:cd:b9:ee:26:b3:
                    fc:29:ab:4d:8c:57:61:4a:e8:47:27:de:9b:2e:de:
                    29:d3:ea:cd:3a:86:05:d8:98:bd:90:58:08:07:b6:
                    06:e5:ea:83:5b:e6:45:89:b7:4e:7f:f2:87:69:59:
                    9a:84:c8:e0:2b:98:d9:73:01:6c:90:07:f0:c2:3a:
                    c8:a0:0d:7c:3d:11:49:c1:4e:e0:d1:e6:d3:9d:f7:
                    d0:64:74:66:a1:ff:90:be:a1:cd:c5:da:16:50:52:
                    93:af:ec:73:c9:cd:22:0a:7c:46:cd:0c:0d:24:d8:
                    a4:ad:37:3d:88:95:7c:97:f7:f6:84:f4:95:22:e1:
                    c5:13:9d:7e:09:f9:24:57:60:60:d8:18:bd:92:a5:
                    7f:c7:0b:23:e0:e1:31:e7:64:11:c4:59:74:75:b5:
                    ea:d7:88:a1:37:ca:d5:a8:c8:9c:09:4d:19:df:57:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:D7:25:0C:E5:BF:FA:A8:68:2A:F6:18:E3:4C:89:0C:AC:ED:DC
            X509v3 Authority Key Identifier:
                keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:d1:d9:24:6d:8d:88:ea:8d:68:ba:bb:c8:20:cd:08:4f:
         ca:dc:5a:1f:07:f5:e8:84:4f:e1:c8:b1:08:a0:1e:e7:38:03:
         db:f9:e9:6e:68:f4:cd:c7:d3:e6:bc:e6:a3:7a:15:41:d6:76:
         a7:4b:27:49:07:3f:70:e9:7c:26:2a:6a:d4:0e:32:fc:bb:d6:
         f9:58:c6:d0:22:b0:65:f7:c8:7f:6c:17:d9:57:4d:f8:e5:7f:
         cd:5d:56:b3:d2:3a:df:ea:f7:5a:ee:e5:a0:31:88:9d:37:dc:
         52:ec:9d:5f:52:70:9e:d2:b6:73:40:c0:36:8a:d8:5b:0c:2e:
         10:d1:b2:3d:1a:7f:c4:57:49:f4:30:f8:d4:db:f4:ea:db:c6:
         8d:1e:3e:b3:f1:7c:a9:3b:35:97:0a:92:5b:b8:e0:a1:98:d8:
         5a:ec:b0:a6:2a:56:c9:7d:3e:28:e8:cd:1d:8f:b6:c6:ec:e8:
         57:56:f0:8d:21:4b:5c:d3:8b:d7:9e:63:4f:e5:8d:8e:05:bb:
         a8:8f:40:eb:e2:7e:47:85:b9:c3:e6:02:b8:e0:1e:be:71:bb:
         c6:8f:a7:2e:55:4a:17:41:72:e2:1b:90:44:99:31:d7:b8:57:
         ba:b0:8d:3d:90:af:8e:00:43:22:af:bf:f7:06:31:68:20:d7:
         59:ce:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:00 2024 by rpki-client on console-fra.rpki-client.org