Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File:                     HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier:          ZD7MtmaZSAj1TWGRCM/5gjq+0XdZMjEEEhwZl/Knhvk=
Subject key identifier:   60:1C:C7:F9:79:25:07:81:74:0B:38:6B:92:8F:B6:2A:E9:89:28:01
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       018F373FC2B0383A1F1B82970D61C152C838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number:          0C19
Signing time:             Thu 02 May 2024 03:01:16 +0000
Manifest this update:     Thu 02 May 2024 03:01:16 +0000
Manifest next update:     Fri 03 May 2024 03:01:16 +0000
Files and hashes:         1: 3IN_KcQkQkawBzjl_3EaxURfiQY.roa (hash: N6q28fuWasCIH8rLZ6SmhhBpiwVXiG9y64ZFap3gqww=)
                          2: FO9wlKOPjB1-PITRsYWImwdD-0k.roa (hash: oOXJ+6RNLiUtuhQZikUx5B9MyvGpy5fIxYXCx372oB4=)
                          3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: qURUB+T32Ma6L9xaRrXeOJYCFUZdpXmplr/GVi9HyOQ=)
                          4: IfEgbzid4NxF4c2lrfmcVFiaRw8.roa (hash: HsNZRdKC61R+lmjFS6dVDOvhW/iWJ7QiVr7zSatBi1U=)
                          5: QW76TIJpCXZgXAMOJZ4y2W2vnlY.roa (hash: MXsMfNc22+CfVyGR9NF4tU0kekT23c1FpznYkp4i4uc=)
                          6: YinXRIziqAYbf-y_hPCSKIQTXGI.roa (hash: rsHv8bEyjr+2BKH8q4kpEfVYdRCLF2EaGy5vCpIhbVU=)
                          7: r_Z3MRBLC8wyKuC00hHV52EQN70.roa (hash: sy4sT3bDvQ4o4J4l3vNJsjZ26lxVFBZ5u4w9pk9JYfY=)
                          8: ul54Q_5lWkG2iUKOs-S9GIYQ9sY.roa (hash: Thav4iljklT8sH8oasougZcSfXbun5GuFhNrImEvsFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:3f:c2:b0:38:3a:1f:1b:82:97:0d:61:c1:52:c8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: May  2 03:01:16 2024 GMT
            Not After : May  3 03:01:16 2024 GMT
        Subject: CN=601cc7f979250781740b386b928fb62ae9892801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:c3:34:a7:4a:78:19:ef:73:7f:8d:c0:f0:
                    22:c7:5e:0b:9e:dd:b3:0a:a3:1c:78:e4:3f:e7:2b:
                    ea:74:18:c9:f5:b0:d7:5c:2c:ef:f3:59:34:b3:44:
                    af:51:16:4f:d4:d9:92:60:3d:7b:dd:9a:d0:86:d0:
                    b0:f7:e1:4e:5c:fd:fe:ea:53:eb:b3:d5:0d:04:ef:
                    3f:89:d4:0f:91:85:ab:54:f9:b5:51:a0:a2:1b:6d:
                    68:7d:51:46:8c:25:4f:86:35:af:94:93:63:ff:50:
                    83:d6:31:93:13:78:14:78:45:9b:ac:a1:24:f2:d4:
                    87:2f:d6:ad:2b:26:78:6a:38:1b:9f:73:78:0d:41:
                    67:56:3d:28:3b:c3:05:8f:0f:8f:d7:71:4f:16:3d:
                    fa:1b:4d:c2:38:de:51:d1:14:27:7b:29:21:43:35:
                    a3:66:dc:a4:74:f1:70:28:8f:b2:2c:d4:27:a4:82:
                    75:e3:4b:ec:52:18:19:46:5a:02:44:9a:ed:ba:d0:
                    4e:d1:78:94:09:7a:8a:25:1e:f6:62:23:09:06:c4:
                    9e:32:dd:6c:de:ac:62:f6:a0:34:ae:55:b2:2b:cf:
                    cc:a9:4f:62:83:e1:d4:d4:2a:df:b2:25:a9:df:09:
                    e4:52:fa:a5:aa:bd:f3:51:b2:1d:c7:bf:a6:73:4e:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1C:C7:F9:79:25:07:81:74:0B:38:6B:92:8F:B6:2A:E9:89:28:01
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:12:03:1b:b8:46:5d:bf:2c:81:ab:9e:0e:c8:c5:30:ce:b7:
         d1:92:7e:ac:86:85:9d:8e:af:5b:30:58:3a:c2:cc:39:7b:bb:
         fd:3a:19:a3:34:dc:3d:43:4f:5d:ab:27:61:b9:fa:ae:91:e0:
         a9:0b:a1:42:23:93:e7:ab:83:7b:cf:1f:a3:e8:37:f6:6a:35:
         f0:ae:6a:90:d3:45:d1:cd:64:51:cf:71:dd:df:1b:5d:a0:c0:
         84:14:46:df:75:73:6d:13:fd:6f:e6:4f:8b:97:1f:99:ae:0b:
         f9:8d:7f:24:85:3f:b8:04:ec:1a:d5:29:46:fe:43:9a:75:43:
         3d:52:9b:3d:f9:7d:e1:42:d2:b6:a5:31:ad:19:d4:2c:ae:46:
         0e:7a:b0:39:89:62:0d:f3:dd:13:ab:b1:ff:6d:e6:aa:19:c9:
         86:f6:d1:d0:18:18:dc:10:c9:a7:d6:50:8b:b1:24:5b:7e:83:
         e8:0d:aa:0e:0a:a6:71:e4:a8:84:c1:40:53:ad:ba:86:25:f6:
         06:31:85:f7:da:f1:fe:62:df:04:0b:a2:f5:ca:d4:62:ae:dd:
         30:2e:a6:84:50:a1:49:39:c2:08:61:c7:a5:d3:36:22:b2:b9:
         42:6c:98:03:f7:04:80:df:dd:43:52:a5:0e:07:18:ae:81:ff:
         2a:14:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:14:35 2024 by rpki-client on console-fra.rpki-client.org