Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File:                     HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier:          B97NMdvRe1F1q0Tdf3novQtYVUavCyzVdoUMTLzxk5c=
Subject key identifier:   07:22:D6:1E:CC:6B:19:7A:19:AC:BE:5D:3B:EE:D3:68:52:9C:E2:61
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer:       /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial:       018F4D5A51F9B6463D1CF92FEA2749D97F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 10:01:55 +0000
Manifest this update:     Mon 06 May 2024 10:01:55 +0000
Manifest next update:     Tue 07 May 2024 10:01:55 +0000
Files and hashes:         1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: FlsfqONRr4f0GUDyJMxkrnHv2T0kZzl0yg1xjXRrrVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:51:f9:b6:46:3d:1c:f9:2f:ea:27:49:d9:7f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
        Validity
            Not Before: May  6 10:01:55 2024 GMT
            Not After : May  7 10:01:55 2024 GMT
        Subject: CN=0722d61ecc6b197a19acbe5d3beed368529ce261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:35:d3:35:67:5b:a3:f4:85:85:46:04:8c:
                    0b:e5:f6:e0:d2:f5:1f:9d:35:a7:ba:f4:76:bd:1c:
                    ef:65:6d:ca:ee:01:15:b8:14:04:e4:b9:d6:fc:4a:
                    61:e7:cb:e4:c0:82:dc:f4:72:a7:76:5d:bc:69:a0:
                    b3:2a:b4:bb:54:1b:6e:8f:11:1a:2b:86:62:76:21:
                    57:42:9b:36:ef:fb:73:c8:74:66:c5:35:ec:3a:4f:
                    f8:1a:8e:be:78:b4:32:b5:3f:3f:79:bb:c9:25:47:
                    02:67:7e:ae:7f:e0:2a:88:9e:c2:b2:dd:52:2a:b4:
                    90:14:59:8d:88:a1:1b:7c:89:dd:be:e1:c5:33:f8:
                    49:f6:56:d0:9c:f0:27:86:0b:7e:ee:d3:2e:15:a1:
                    fe:fa:c7:78:f5:2a:bd:be:5d:08:68:19:fb:46:fb:
                    82:0f:e0:0c:df:10:53:8a:4d:1d:2f:be:5a:c3:f6:
                    39:73:f1:fb:39:23:16:4e:2c:ee:32:10:e9:b2:77:
                    38:17:97:0e:00:55:32:f3:cb:62:43:e5:42:11:e9:
                    b3:28:cf:a4:81:26:d1:36:11:c1:c3:40:b0:24:54:
                    f4:38:8c:5c:a3:3e:61:4a:f5:f1:7e:10:4d:d6:97:
                    50:01:17:7e:b1:c7:14:00:bd:cf:58:14:15:0e:c3:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:22:D6:1E:CC:6B:19:7A:19:AC:BE:5D:3B:EE:D3:68:52:9C:E2:61
            X509v3 Authority Key Identifier:
                keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:22:0f:ee:b2:c7:29:d1:83:b8:aa:03:f0:b9:6f:b4:aa:
         0c:05:ea:a9:11:1b:48:87:88:c8:bb:48:2b:8f:0e:6f:81:c9:
         ad:6e:69:1a:63:e2:b9:46:8e:1b:30:50:b6:63:7a:ec:c8:eb:
         5a:c6:4e:d9:73:f1:bf:c2:0b:5b:f2:0d:3d:23:96:84:a3:4a:
         06:62:86:61:44:5d:d9:47:ab:21:b5:da:d4:48:c1:7b:1d:33:
         89:59:8e:71:25:35:aa:e1:ff:df:22:4a:03:45:54:d6:a5:9a:
         15:43:da:a5:3c:34:21:b3:de:96:ae:5d:ae:4c:c0:37:30:fa:
         b2:61:b1:98:8e:28:95:ab:92:9a:d1:7f:9e:2e:f1:23:1f:d3:
         18:ed:d4:78:4a:97:9a:69:61:5e:b1:c2:d5:8f:f3:d1:94:18:
         f2:03:ea:88:67:1d:ef:fd:91:3f:51:77:1d:ad:48:d7:68:5f:
         35:aa:ac:f2:3c:dc:8d:3d:8f:53:8e:7e:b2:3c:76:96:32:2d:
         d5:b4:87:76:56:57:0d:bc:0d:7f:1f:6b:b2:7f:2d:dc:15:96:
         e5:30:15:43:9f:c0:17:64:d2:c7:86:02:b9:30:56:00:3b:37:
         43:9d:ec:32:98:50:85:2b:7c:7f:08:92:26:84:9a:d7:c6:33:
         a2:49:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:20:34 2024 by rpki-client on console-fra.rpki-client.org