Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File:                     HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier:          QgRPzZhRrxsHOVGjJTrW+CbmiU/rPyVxBOKqFNuQyyI=
Subject key identifier:   9C:E8:02:F4:C3:E2:D5:38:17:AE:01:BD:1C:A3:04:2E:19:F5:17:32
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer:       /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial:       019352076EBB3956E131CC2ED4935CCABA98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number:          11D7
Signing time:             Fri 22 Nov 2024 04:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:39 +0000
Files and hashes:         1: 86LUIezq1-8nXyeCCPFhTsbnpE4.roa (hash: 5qJC9xEu9Zxg6jOeB/HxaeGKmxNs/vLcGZbdb6ATMJc=)
                          2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: MrpvG7ZMa5nlfTTcV0ltKGnBoTqPCUWnMp2PEyWRv+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:6e:bb:39:56:e1:31:cc:2e:d4:93:5c:ca:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
        Validity
            Not Before: Nov 22 04:00:39 2024 GMT
            Not After : Nov 23 04:00:39 2024 GMT
        Subject: CN=9ce802f4c3e2d53817ae01bd1ca3042e19f51732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:18:82:b7:1a:68:a2:82:e2:ad:ba:bb:29:
                    ea:15:8f:d3:ab:c5:54:e9:78:1c:c2:bb:25:0d:9f:
                    e2:33:3a:c1:d9:cc:2f:5e:3f:c4:26:b3:cb:96:85:
                    25:06:3d:4e:74:27:a2:87:da:02:1c:54:a7:b7:40:
                    2e:8e:c5:e4:4f:90:ab:d7:61:87:50:b3:6f:e6:4c:
                    be:84:83:23:92:37:e6:84:98:ac:1f:6d:5f:2a:b8:
                    8e:ba:df:5a:fe:ca:b2:fc:c6:ac:0b:c2:a4:36:6d:
                    64:50:b3:6b:34:3a:f5:a8:9b:8f:b8:da:1f:46:ff:
                    71:cc:b7:b7:9c:28:67:6b:4a:63:87:b1:80:16:8e:
                    4f:cb:13:bc:43:a7:b7:5a:1d:63:64:8a:5f:4e:01:
                    07:4c:0f:99:e2:e4:73:7d:dc:3d:78:ad:b0:ca:95:
                    50:08:91:ea:41:f3:44:7f:71:33:de:56:92:13:6b:
                    9a:03:1a:6f:a2:88:69:6c:88:12:25:3d:07:63:ac:
                    b2:5a:48:0b:66:95:0a:0b:75:01:15:e4:45:3b:b2:
                    a4:0b:60:97:fc:d5:e8:4b:2c:cd:47:9a:97:7e:fd:
                    90:e8:2b:2f:1e:24:40:a6:b9:29:23:5d:0e:e7:7b:
                    8c:29:51:d9:41:fa:2f:49:ad:22:dc:cf:ec:be:e1:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:02:F4:C3:E2:D5:38:17:AE:01:BD:1C:A3:04:2E:19:F5:17:32
            X509v3 Authority Key Identifier:
                keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:1e:a2:44:54:e6:c1:d9:e5:e5:4c:8a:7e:3a:eb:ae:82:04:
         81:19:4c:25:38:d4:1f:4e:c4:e5:8d:4c:32:4d:c1:23:92:95:
         49:35:dd:6c:a3:e4:97:42:9d:3a:e2:a2:58:b9:0d:ad:ed:d6:
         82:d0:5c:81:b3:98:03:9d:e7:64:a7:b6:43:c4:2b:77:8d:d4:
         06:01:8a:2e:a5:e7:62:e1:ab:d4:7c:6e:16:f9:c8:7b:3f:9e:
         4f:01:e0:44:50:b8:d7:3d:8f:46:e2:90:10:e5:74:30:08:12:
         d5:c3:74:50:be:12:be:ea:55:a3:0d:b6:a0:25:c9:d0:46:77:
         c1:33:ea:55:e4:94:ba:dc:0e:36:9e:50:a5:91:3f:14:db:95:
         69:a5:e3:72:97:72:ad:15:1c:76:2e:f0:3f:31:29:81:69:2d:
         14:33:1b:a1:c2:10:6d:54:76:ea:58:b2:1c:47:40:7f:56:f4:
         c5:70:f9:a7:d4:0e:a5:4f:48:26:92:66:d6:49:65:ef:15:8d:
         a8:7b:d5:c1:78:ac:2e:c2:c0:3d:3f:5d:bd:46:ef:ab:7d:fd:
         bb:28:bf:b7:0e:83:5f:b4:cc:20:90:fa:f7:39:ee:3b:4c:a9:
         9f:c5:e5:c0:dc:7f:be:3c:c9:97:35:2d:27:1d:7b:d7:24:dc:
         64:2f:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:31 2024 by rpki-client on console-fra.rpki-client.org