Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File:                     HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier:          1WDhgpNTDxl1IGF2ZVRyuf5GSZO75lC5mHBpR2fu9QQ=
Subject key identifier:   26:AE:3A:93:8B:E2:51:D1:BB:82:FF:79:C5:EE:0A:B6:94:1A:45:D1
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer:       /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial:       019653B6F0FC944F14835D931BBDB18B0B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number:          02C2
Signing time:             Sun 20 Apr 2025 15:00:20 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:20 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:20 +0000
Files and hashes:         1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: fYGLAlrw5vJNZDdycDk52SSx1PUGMJZjd49trCBlrDg=)
                          2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b6:f0:fc:94:4f:14:83:5d:93:1b:bd:b1:8b:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
        Validity
            Not Before: Apr 20 15:00:20 2025 GMT
            Not After : Apr 21 15:00:20 2025 GMT
        Subject: CN=26ae3a938be251d1bb82ff79c5ee0ab6941a45d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:21:df:0a:9b:a8:61:75:38:46:d8:75:74:
                    89:2d:30:4e:c4:39:89:fe:55:f4:25:9d:ef:81:0a:
                    1c:bd:9d:51:9a:03:27:80:78:4f:ed:ca:24:b6:86:
                    df:db:d1:f8:69:85:ea:fd:15:43:1b:ad:8f:b0:7c:
                    29:4c:a6:4e:c4:fd:a6:93:bc:69:d3:25:0c:61:7d:
                    bd:03:5c:8f:44:d4:7e:a7:2f:a4:c2:4e:4f:c2:1e:
                    0e:1b:52:b0:7e:bd:e0:82:13:6f:45:cd:a7:30:65:
                    7c:c9:a0:da:00:4c:9e:3e:00:63:75:7f:5e:87:8a:
                    7e:56:4c:b7:42:9a:eb:36:ec:3d:6c:bd:d4:99:21:
                    f4:74:25:ee:f8:06:60:9f:ef:fe:bf:a3:21:f2:b4:
                    57:12:71:af:8b:13:2f:62:5a:73:e5:a9:c3:73:43:
                    88:d7:48:d2:0d:b7:ae:bb:c6:a2:c6:dc:8b:bb:00:
                    b1:84:20:96:ce:d7:83:c2:b9:73:d5:82:d5:5d:10:
                    bb:87:b5:8c:25:4a:7d:22:ed:ed:5b:fe:9a:56:2d:
                    2b:2e:d0:d5:a7:24:69:6d:f7:21:d7:c4:81:f0:04:
                    2e:cc:db:65:93:55:25:fb:7d:44:be:b0:31:c5:e8:
                    05:a8:9e:10:08:18:48:67:08:f6:20:0f:90:47:80:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:3A:93:8B:E2:51:D1:BB:82:FF:79:C5:EE:0A:B6:94:1A:45:D1
            X509v3 Authority Key Identifier:
                keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:62:0c:71:af:d4:b8:46:c0:30:64:f6:4d:68:0e:a8:fd:7e:
         cf:3b:cc:81:40:12:33:36:79:e8:98:eb:ce:19:68:fe:11:5f:
         79:c2:ca:ad:f8:df:f0:bc:fd:cb:27:23:7e:4f:ce:71:d1:aa:
         12:f7:91:4f:4a:92:3e:de:98:0e:a9:f2:9b:d6:fa:79:18:d6:
         a0:7e:c5:d9:13:2a:d7:c0:8b:cc:7b:7c:e2:2c:96:2a:4e:aa:
         3b:79:a5:9e:87:96:b1:a1:42:56:a0:22:b1:84:bc:30:12:d7:
         4c:7d:82:bc:41:c7:42:e4:f6:77:78:05:f1:61:e4:20:ac:7c:
         de:ce:fc:50:58:10:f8:a5:60:7f:82:d0:ec:ac:cd:81:bb:2f:
         53:b2:d7:6a:c7:65:ec:2f:23:c7:98:7c:04:67:ba:9d:56:a6:
         f3:f0:f5:55:a0:79:fe:5a:4f:07:7d:9a:7a:6e:5d:78:06:5f:
         55:6d:70:94:67:90:c1:46:f4:1c:73:cb:c2:48:9f:66:d0:91:
         97:cb:26:a9:de:6e:f2:f5:68:f4:26:fa:29:4a:64:8b:5a:88:
         cd:e6:1d:03:fb:3b:cf:f2:61:da:2e:d9:24:5f:4c:cf:af:dd:
         52:33:bf:3f:76:e9:df:84:77:21:43:c0:45:95:e8:13:24:11:
         de:dd:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:11:25 2025 by rpki-client