Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File:                     HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier:          JnvhCYdl+OgVvh3PkFOkt2KOoARaXzGt1/JAZCTkjRs=
Subject key identifier:   73:7B:08:E4:91:3D:F6:49:25:2C:52:A9:58:8D:F2:21:AC:4E:EE:94
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer:       /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial:       018FD977AAF38F3AFC1632DD7B7DB4A59FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number:          11AE
Signing time:             Sun 02 Jun 2024 15:00:49 +0000
Manifest this update:     Sun 02 Jun 2024 15:00:49 +0000
Manifest next update:     Mon 03 Jun 2024 15:00:49 +0000
Files and hashes:         1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: 1R4K3Gpx00+JKz0BJBshnwETKtsZO/zKStt3iBT9yO8=)
                          2: tvCNB8ybHduT-KKPn6p4R5UEM70.roa (hash: V1Elm8lopx/YZeMROXgpXOsg0vOUnchXki1jmpTSpvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d9:77:aa:f3:8f:3a:fc:16:32:dd:7b:7d:b4:a5:9f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
        Validity
            Not Before: Jun  2 15:00:49 2024 GMT
            Not After : Jun  3 15:00:49 2024 GMT
        Subject: CN=737b08e4913df649252c52a9588df221ac4eee94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:10:d2:fe:a7:d5:6e:02:33:09:d6:53:3d:
                    fa:64:a1:48:dc:36:1a:1b:66:af:d3:7d:d8:2f:89:
                    0b:1a:4b:c7:66:5c:30:cd:7d:03:49:bb:a9:b8:a4:
                    77:38:b3:14:0c:de:43:9d:4c:f1:1f:15:68:91:bb:
                    6f:c9:e3:0e:0c:20:ba:bc:01:c0:03:b4:1e:34:50:
                    f3:e4:41:97:07:f8:46:99:cb:a0:4a:a7:43:2e:a5:
                    4b:fd:48:8e:46:7d:7c:ed:3c:33:04:14:40:a3:1a:
                    ee:1c:8f:10:6b:03:ba:42:db:3d:bd:34:d3:38:7d:
                    56:85:1d:0b:34:d7:4a:9c:1b:41:60:62:75:52:02:
                    e5:f0:a4:91:f7:97:55:c4:1d:a4:ac:0b:15:01:73:
                    6c:ef:31:a1:20:0c:cf:89:57:9e:78:6c:84:48:7f:
                    68:a7:e8:84:95:b7:e2:e3:c6:35:6b:7c:82:f9:c3:
                    83:ed:d6:be:ac:d1:08:4c:5f:75:3b:5e:10:b5:4c:
                    35:e4:a9:d8:1a:f5:6e:b2:df:f6:43:6a:89:11:05:
                    81:db:45:83:25:44:08:60:17:d3:3b:92:c9:13:49:
                    8a:74:14:df:9b:fc:42:80:ed:f4:60:43:4b:20:d7:
                    39:0d:46:09:1c:d3:ca:80:38:21:2e:e1:42:1c:3b:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:08:E4:91:3D:F6:49:25:2C:52:A9:58:8D:F2:21:AC:4E:EE:94
            X509v3 Authority Key Identifier:
                keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1e:3d:25:41:4e:6b:36:e3:64:f2:3a:07:18:f4:a9:c3:19:
         55:92:e6:c2:cd:2f:06:af:06:8f:d5:34:db:0c:b1:4c:a5:8d:
         73:c4:79:79:69:c9:37:0c:cf:95:91:5b:eb:73:53:cb:0b:7c:
         f7:54:97:aa:f6:11:d9:9a:45:1a:9e:3b:a1:52:5b:b3:6c:4a:
         e5:d0:78:5d:38:6b:7d:62:e8:de:8d:bc:16:a9:c3:d7:a1:60:
         a2:f1:e1:59:bf:ca:e5:1d:51:8c:24:dd:15:aa:04:89:56:5f:
         c2:9a:1e:ba:87:24:24:5d:6e:92:c9:fb:75:32:bf:60:a5:e5:
         5e:26:d4:4e:8f:8e:5b:07:9f:f6:6e:c0:e6:9b:ec:8c:a6:71:
         06:8c:ea:50:d3:da:fc:eb:42:15:7f:37:c5:56:de:54:dc:03:
         1b:5e:f5:b1:08:68:55:99:38:f4:35:5d:92:ff:9e:6d:5e:f6:
         a3:d2:13:50:36:be:b3:64:c4:2a:ec:f9:18:a4:a5:83:ee:5b:
         c5:47:8d:62:e1:65:e5:f0:83:8f:bf:19:b3:e9:e8:35:0f:6c:
         9b:b9:61:84:76:5d:94:ab:cb:9d:e9:95:e5:1e:27:c9:5f:35:
         bf:a0:18:98:e3:5e:8d:ed:d4:74:60:b9:7f:39:15:8c:b1:91:
         da:65:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:11:44 2024 by rpki-client on console-fra.rpki-client.org