Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File:                     Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier:          Hh0Un+vF+T7V9O1yUGvJ9U/fy52BXlomV40B540r/CI=
Subject key identifier:   66:CD:55:0D:29:97:F8:86:33:F7:8F:12:53:E5:2B:66:49:C0:63:27
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer:       /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial:       018F88922AD73C99BBBA9F90043555679771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number:          C6
Signing time:             Fri 17 May 2024 22:00:31 +0000
Manifest this update:     Fri 17 May 2024 22:00:31 +0000
Manifest next update:     Sat 18 May 2024 22:00:31 +0000
Files and hashes:         1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: JXNU6wXtbK1VZltBeSthjYy/D1+DO/lcFti/S+RgYZw=)
                          2: iibkHCp-3UZG_SN11P5o52k9yeg.roa (hash: twGw3g55smPOegmJidXfhcxa/+3/Po2VBFSbQMGGUJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:2a:d7:3c:99:bb:ba:9f:90:04:35:55:67:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
        Validity
            Not Before: May 17 22:00:31 2024 GMT
            Not After : May 18 22:00:31 2024 GMT
        Subject: CN=66cd550d2997f88633f78f1253e52b6649c06327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:92:4f:51:9c:b9:16:40:c6:f3:91:e2:82:
                    4d:ad:2d:30:e2:08:33:fa:51:c4:7e:ae:b4:cf:72:
                    10:53:88:a3:45:b9:37:0f:54:85:bb:f4:78:33:fb:
                    57:9f:cb:de:00:aa:15:16:c6:d3:46:03:7d:f6:b6:
                    a3:9d:71:cd:d3:a1:5e:a1:5e:5f:69:31:67:3f:91:
                    fe:e1:72:1f:4d:e1:bb:e2:7f:0e:6c:11:bf:84:1b:
                    05:b7:e6:68:4b:14:92:5f:ee:a3:74:3f:df:ce:73:
                    cf:14:d4:9b:cc:1f:a1:c8:c1:c7:09:20:35:6a:c9:
                    f5:25:c9:55:c5:27:ed:56:02:70:c5:66:15:77:0e:
                    b7:ac:c3:ff:b3:0b:da:ef:de:9c:42:ab:25:ea:62:
                    35:18:6e:4c:d3:d9:85:15:da:e5:87:62:83:16:24:
                    90:39:b0:28:4c:31:00:09:56:af:9f:f1:77:62:91:
                    5c:c5:54:2d:a7:cf:1f:27:7e:4c:ab:e9:0a:9c:39:
                    85:5b:5d:f0:5e:f0:d9:0a:d4:d8:fc:b3:43:3c:37:
                    88:e8:08:79:09:04:f9:bc:46:78:df:2f:ab:8d:ac:
                    f5:d6:75:c3:fd:51:13:e0:64:ce:91:e6:23:95:79:
                    75:0f:a4:75:12:0a:42:8b:27:9e:ae:dd:17:0e:41:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:55:0D:29:97:F8:86:33:F7:8F:12:53:E5:2B:66:49:C0:63:27
            X509v3 Authority Key Identifier:
                keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e4:79:27:bc:5d:96:90:c7:b9:77:5e:9b:45:8c:e4:f5:b7:
         cc:87:b5:cc:76:3f:86:12:de:80:ea:72:bf:88:e7:5d:46:27:
         06:cf:eb:84:07:1e:66:0d:6c:98:37:c5:0f:ff:53:f0:3e:0b:
         a0:f2:08:bb:30:cb:73:d6:b7:89:ed:ee:ab:63:31:03:b7:cf:
         fb:7b:6c:8e:d5:d9:57:ff:52:c8:1a:39:15:51:11:3d:56:8f:
         c7:67:11:84:e2:4c:48:6c:f5:a8:02:99:ff:ac:c1:22:38:08:
         6f:7a:8e:af:95:7a:4c:81:63:fc:b4:84:a0:6f:e7:dc:bf:0d:
         d8:36:68:ff:71:ac:c7:27:6d:ca:b3:06:52:4f:99:bf:14:8f:
         e6:17:78:04:63:5f:2d:bf:a1:e2:74:16:09:4e:39:de:b6:32:
         9e:e5:96:55:63:30:8f:a4:a0:f2:18:0e:5f:fd:c2:90:89:66:
         d7:7e:15:1c:0d:8c:14:e6:96:c6:0d:c3:a3:e3:25:3a:3f:54:
         70:15:26:80:db:71:8a:b9:2b:97:31:1d:05:3b:6f:a8:f0:0c:
         f9:77:ff:5b:ee:0d:44:4f:1c:05:b0:af:6e:1b:7f:87:0e:53:
         a7:ed:a2:79:71:99:76:9b:d9:c9:d2:5d:14:7f:3f:7b:f5:66:
         d5:ed:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:01 2024 by rpki-client on console-fra.rpki-client.org