Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File:                     HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier:          BVDV0zf4mReNTd1rxm+Dd820R0gpgF/THJK60j3YzuM=
Subject key identifier:   43:04:85:96:33:85:13:25:98:91:B9:83:19:3A:4F:7D:EB:33:08:33
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer:       /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial:       018F3B5383B533D88298C9482B1E8C435E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number:          0FB9
Signing time:             Thu 02 May 2024 22:01:19 +0000
Manifest this update:     Thu 02 May 2024 22:01:19 +0000
Manifest next update:     Fri 03 May 2024 22:01:19 +0000
Files and hashes:         1: 86LUIezq1-8nXyeCCPFhTsbnpE4.roa (hash: 5qJC9xEu9Zxg6jOeB/HxaeGKmxNs/vLcGZbdb6ATMJc=)
                          2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: tcUZM6mJeBiWr0mo+OXMDcejdDvAbWK/XoI2Wz34d+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:83:b5:33:d8:82:98:c9:48:2b:1e:8c:43:5e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
        Validity
            Not Before: May  2 22:01:19 2024 GMT
            Not After : May  3 22:01:19 2024 GMT
        Subject: CN=43048596338513259891b983193a4f7deb330833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:d5:04:61:20:c5:cb:72:82:de:c6:a1:b0:
                    b3:0c:9d:c9:e7:79:1a:0a:da:52:34:c9:a1:38:4a:
                    91:b8:a8:18:a5:01:ee:1a:6c:8d:27:35:d1:74:1d:
                    8f:5c:c2:f8:be:da:d1:ec:5e:c4:52:2b:c1:92:2b:
                    ab:77:7a:59:78:a7:15:8b:73:e7:0a:54:7a:6f:e1:
                    87:4f:26:a4:5e:7e:6d:e7:22:2a:18:1b:9c:3f:60:
                    2c:5a:6a:da:ca:09:b3:fa:33:25:b5:6a:f2:6a:45:
                    3e:c5:57:ec:9b:9e:6e:4e:ba:ac:da:8b:b8:72:2f:
                    eb:d2:41:ef:07:65:d1:f1:bc:94:4c:07:9c:a0:e3:
                    a1:ea:64:13:9a:73:d5:4a:22:d8:6d:a3:e6:31:c1:
                    45:f0:1f:a1:2c:43:5f:22:4c:a5:a0:e8:ee:77:98:
                    47:13:c6:0c:3a:f6:ca:0a:1e:46:18:aa:ba:92:d0:
                    e1:ea:67:af:0e:11:ff:c0:46:32:b8:1a:87:7e:2b:
                    49:23:95:24:ed:0b:33:71:11:0a:0d:57:17:93:13:
                    f8:f4:70:61:05:72:22:e7:18:b0:c8:1d:55:1f:f0:
                    00:12:73:5d:64:69:dc:bd:36:34:3d:bb:7b:1a:34:
                    3f:39:31:dd:3a:a5:d8:20:5f:35:58:87:be:c0:01:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:04:85:96:33:85:13:25:98:91:B9:83:19:3A:4F:7D:EB:33:08:33
            X509v3 Authority Key Identifier:
                keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b9:7f:6e:62:76:cf:c8:80:05:e5:38:e1:b5:eb:f5:43:af:
         4c:6f:0d:20:9a:09:69:0c:e6:c4:5f:e0:c1:8a:4c:9e:8e:4b:
         57:76:29:14:2e:6b:7f:4a:c5:a6:3c:8f:eb:68:50:a6:eb:b7:
         8b:90:f2:76:4a:a9:e3:43:10:2e:a9:bd:f8:92:a0:04:26:d3:
         67:c1:a8:5d:55:41:44:20:f1:ad:95:cd:18:f5:4f:c0:ae:dc:
         b6:b1:79:c0:a9:51:6c:92:bf:4a:fc:65:43:b1:f5:54:97:0d:
         93:26:be:f7:2c:e9:67:bc:95:aa:0a:01:0f:64:ee:f9:03:4c:
         d0:4b:58:7d:c5:b6:ce:7a:34:b9:e7:12:a9:b9:a5:0e:a9:a1:
         1b:98:d9:32:94:33:f9:f3:c0:36:3a:77:00:82:aa:2e:f6:0e:
         52:45:4c:8d:06:71:f4:ef:e5:aa:c3:44:fa:72:46:21:70:d0:
         bd:58:ce:bf:73:cc:d8:88:8f:21:55:1c:d6:ba:40:72:d1:9c:
         69:df:22:40:25:36:65:63:e1:1e:24:ac:00:5c:2b:ba:c1:58:
         0f:30:6f:ab:b2:c4:14:22:4e:c5:b7:42:5f:df:0f:d2:a6:4c:
         46:9e:b3:77:d4:41:2b:71:d8:49:06:09:2c:0d:bb:8a:20:27:
         7e:2b:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:16:30 2024 by rpki-client on console-ams.rpki-client.org