Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File:                     HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier:          Ravf3C4NL/U54LB3ayw/cmR2xOZVeNF/ouUjS2NDWok=
Subject key identifier:   B4:AB:77:29:0A:7B:53:9F:53:1D:C2:F2:37:A3:14:3E:A6:AE:C2:F9
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer:       /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial:       018F43B335C51E4243257327A923B1AC8B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number:          0C07
Signing time:             Sat 04 May 2024 13:02:49 +0000
Manifest this update:     Sat 04 May 2024 13:02:49 +0000
Manifest next update:     Sun 05 May 2024 13:02:49 +0000
Files and hashes:         1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: foJwF+aHVR43IJsmAa9n6fPcGtOcxUNAVt2496VVadw=)
                          2: R15_h8RnWLAtbNM4wEJ057X6za8.roa (hash: W+915Zi687CRZKPQ5U00crOZq/qMs5OMDP75Hi0iKGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:35:c5:1e:42:43:25:73:27:a9:23:b1:ac:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
        Validity
            Not Before: May  4 13:02:49 2024 GMT
            Not After : May  5 13:02:49 2024 GMT
        Subject: CN=b4ab77290a7b539f531dc2f237a3143ea6aec2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:f3:d9:2a:79:e4:6c:d6:c8:d3:8c:1f:39:
                    26:d8:2d:59:74:7f:3d:fd:c8:62:3c:62:71:3e:f1:
                    c5:93:19:ec:14:c6:3a:28:9a:b5:6f:fd:19:1d:2d:
                    fa:25:db:9e:0a:d5:15:f9:eb:8c:72:ae:e3:38:47:
                    6c:09:05:70:e0:e5:b0:3d:69:10:5b:10:a8:49:60:
                    f4:4a:29:32:7d:d9:9b:25:31:66:a0:89:3f:66:ad:
                    85:b8:e5:66:0d:ec:99:11:10:5c:cc:cc:4f:9b:39:
                    fa:9b:72:9a:d0:f7:47:4d:0e:45:ad:f4:3c:a7:9f:
                    46:67:d4:48:55:82:5c:23:96:05:5c:66:1d:e4:4e:
                    3e:27:32:ff:8d:2d:e6:b6:62:d0:7a:55:ec:6c:bf:
                    48:81:80:77:a1:7b:f9:8e:8e:fe:f8:99:6d:b7:2c:
                    9c:d7:90:fe:8f:14:33:11:5c:cd:71:d6:6e:3d:af:
                    47:32:c4:ba:30:7f:e3:80:6f:ca:0e:04:1f:d4:55:
                    f4:ba:04:cf:cd:f6:97:d5:0f:c7:39:0c:ac:e8:36:
                    8d:8e:23:de:00:dc:70:ed:0f:df:9c:50:25:79:82:
                    03:f3:8f:bb:16:9e:33:0c:13:f2:d6:4c:f6:ff:f3:
                    50:a8:e8:ec:db:13:bf:7d:69:4b:80:8c:06:55:68:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:77:29:0A:7B:53:9F:53:1D:C2:F2:37:A3:14:3E:A6:AE:C2:F9
            X509v3 Authority Key Identifier:
                keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:17:82:90:e5:8b:5c:02:1d:c2:d2:ad:32:4a:dd:7d:33:35:
         71:fe:cd:08:e6:c3:67:fb:26:1f:9f:19:39:62:60:84:33:cf:
         01:40:24:8a:02:18:3b:3d:d0:e8:67:4e:67:62:84:9a:bd:60:
         06:a7:06:2f:a7:2d:8d:8c:73:4b:0c:5b:7a:07:95:4d:b3:71:
         2b:d9:07:01:5d:8d:59:7f:27:31:5b:0c:c7:2f:db:e0:f4:b3:
         27:ec:2e:2c:b9:4f:8b:2f:53:04:c2:a1:ea:16:5f:5c:0a:33:
         82:e6:d8:6b:d6:6a:65:2c:54:9f:65:c9:11:0c:4b:13:84:f6:
         0f:a0:07:79:4c:4f:ea:49:f7:fd:90:c1:0f:d6:db:79:23:d4:
         f8:75:4b:b0:1a:38:d3:5c:f9:c5:f3:03:fd:5a:38:23:d5:9e:
         70:bb:ef:cf:30:ec:74:12:24:3c:7a:71:6e:95:99:01:8e:1e:
         b6:43:97:a9:b0:a4:d6:96:8d:48:b5:8b:80:65:35:1f:8c:5b:
         4b:d9:f9:11:74:4a:61:f2:3d:7c:b3:62:63:21:25:41:a7:6c:
         ad:11:5c:94:7e:6f:2f:7c:96:71:40:6e:c8:03:d1:c7:80:3c:
         39:b5:67:82:dd:1b:84:44:1f:9e:1a:09:83:40:5f:61:5d:da:
         48:c3:82:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DszXFHkJDJXMnqSOxrItaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWNiNzdlMjBiNzgxNDdkNDdmODM5NDI5NGYxMTdiNWM4
NGVmNWUwHhcNMjQwNTA0MTMwMjQ5WhcNMjQwNTA1MTMwMjQ5WjAzMTEwLwYDVQQD
EyhiNGFiNzcyOTBhN2I1MzlmNTMxZGMyZjIzN2EzMTQzZWE2YWVjMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hHz2Sp55GzWyNOMHzkm2C1ZdH89
/chiPGJxPvHFkxnsFMY6KJq1b/0ZHS36JdueCtUV+euMcq7jOEdsCQVw4OWwPWkQ
WxCoSWD0SikyfdmbJTFmoIk/Zq2FuOVmDeyZERBczMxPmzn6m3Ka0PdHTQ5FrfQ8
p59GZ9RIVYJcI5YFXGYd5E4+JzL/jS3mtmLQelXsbL9IgYB3oXv5jo7++Jlttyyc
15D+jxQzEVzNcdZuPa9HMsS6MH/jgG/KDgQf1FX0ugTPzfaX1Q/HOQys6DaNjiPe
ANxw7Q/fnFAleYID84+7Fp4zDBPy1kz2//NQqOjs2xO/fWlLgIwGVWhDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSrdykKe1OfUx3C8jejFD6mrsL5MB8GA1UdIwQY
MBaAFByst34gt4FH1H+DlClPEXtchO9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgt
NTMyNWE1MjAwYmE5LzEvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgtNTMyNWE1MjAwYmE5
LzEvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuheCkOWL
XAIdwtKtMkrdfTM1cf7NCObDZ/smH58ZOWJghDPPAUAkigIYOz3Q6GdOZ2KEmr1g
BqcGL6ctjYxzSwxbegeVTbNxK9kHAV2NWX8nMVsMxy/b4PSzJ+wuLLlPiy9TBMKh
6hZfXAozgubYa9ZqZSxUn2XJEQxLE4T2D6AHeUxP6kn3/ZDBD9bbeSPU+HVLsBo4
01z5xfMD/Vo4I9WecLvvzzDsdBIkPHpxbpWZAY4etkOXqbCk1paNSLWLgGU1H4xb
S9n5EXRKYfI9fLNiYyElQadsrRFclH5vL3yWcUBuyAPRx4A8ObVngt0bhEQfnhoJ
g0BfYV3aSMOCeg==
-----END CERTIFICATE-----
Generated at Sat May 4 13:50:16 2024 by rpki-client on console-ams.rpki-client.org