Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File:                     HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier:          gXnVSLU3vt2LtepUVEyFcIHk9KbsD7jbqSqUQQB8Ugs=
Subject key identifier:   F8:E6:40:B3:50:AC:A0:82:33:8D:86:A1:9D:D3:67:84:E1:45:FF:87
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer:       /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial:       018F3777037C4F243AE6465241255530992A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number:          07BE
Signing time:             Thu 02 May 2024 04:01:37 +0000
Manifest this update:     Thu 02 May 2024 04:01:37 +0000
Manifest next update:     Fri 03 May 2024 04:01:37 +0000
Files and hashes:         1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: HSSOGFwbe6SC3xUcrkR/PLtDujbZFIxBvpH/5PSSono=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:77:03:7c:4f:24:3a:e6:46:52:41:25:55:30:99:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
        Validity
            Not Before: May  2 04:01:37 2024 GMT
            Not After : May  3 04:01:37 2024 GMT
        Subject: CN=f8e640b350aca082338d86a19dd36784e145ff87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:fd:dc:b8:37:a2:6a:ca:88:2e:40:15:4f:
                    c6:4a:a5:51:8a:17:45:a3:6d:4b:2d:42:63:49:a9:
                    b9:d3:a9:d0:79:ca:48:a4:02:a0:14:95:38:de:18:
                    91:30:5a:28:3e:7c:bb:1f:a4:f4:f7:b4:b1:2f:68:
                    ea:59:0c:0b:ca:5a:58:91:e5:f2:c0:04:8a:f7:67:
                    9f:8f:cc:5a:7b:b1:d7:96:7a:83:e7:c8:f9:3f:3e:
                    ca:ce:85:07:c1:b0:d5:43:33:93:a9:5c:cc:20:df:
                    0a:26:2d:a1:d6:90:3b:84:b2:99:72:dd:dd:5a:7f:
                    18:98:7d:eb:a7:07:08:06:99:93:20:08:47:e9:31:
                    63:58:db:a6:af:77:ba:5c:8b:01:c0:eb:22:ca:d7:
                    90:6a:a8:b7:d9:41:3c:04:b9:47:a2:d0:49:d3:34:
                    22:3e:33:fa:27:e8:72:46:94:7b:10:51:a4:6f:11:
                    75:e9:3f:d6:77:b4:63:c7:43:8a:cd:b9:f4:86:98:
                    b0:b4:c0:1d:bf:bd:bb:46:1f:d2:0d:a7:57:01:0f:
                    6f:c0:3f:d3:90:76:b7:b0:e0:57:29:24:1a:42:55:
                    fa:a4:33:1b:01:f4:fa:b6:5f:de:64:51:de:37:de:
                    b4:3a:ef:16:f2:b2:d0:f2:5d:c7:d5:75:34:65:fe:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:40:B3:50:AC:A0:82:33:8D:86:A1:9D:D3:67:84:E1:45:FF:87
            X509v3 Authority Key Identifier:
                keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:16:30:fa:93:a1:f5:db:8e:8b:e6:14:a1:5a:96:81:9c:
         1b:67:33:da:49:5d:a8:dc:84:57:c7:a0:45:7a:36:e9:99:45:
         8b:2c:f9:23:7a:ec:a2:36:e9:5f:4a:03:cd:55:be:7f:b6:09:
         bf:2e:13:0d:c4:2e:36:38:fa:16:c9:70:07:c6:c5:7c:7c:fb:
         2a:70:3a:db:34:43:2d:cc:66:f6:4b:c3:34:50:f6:b8:1a:fa:
         a5:63:d3:60:ba:78:21:71:8a:79:ed:47:2c:7d:ef:13:45:8b:
         a8:86:1a:8d:47:10:54:aa:89:69:e2:6e:1f:ed:b8:ad:14:aa:
         db:d9:b8:a0:bd:10:dc:a7:fc:f4:01:25:01:18:08:78:1c:17:
         17:9b:62:66:58:4d:c2:f5:a4:b5:76:d5:c4:f6:c8:37:df:48:
         d1:b5:a8:51:80:cc:a8:42:a0:0e:2c:98:de:53:21:31:19:2e:
         40:fc:50:09:e7:27:02:76:59:59:5b:20:3c:97:15:55:6f:19:
         2a:60:71:e0:b4:d6:71:ab:aa:3b:9f:e0:8c:0c:50:6b:4e:35:
         a2:f6:9d:9e:5f:08:7a:af:0c:e6:fc:9d:86:8b:e3:3b:40:97:
         00:7b:2a:77:5e:67:aa:99:4a:fd:6f:b0:2a:46:5d:ac:1d:a7:
         c7:e9:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:55:43 2024 by rpki-client on console-ams.rpki-client.org