Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File:                     Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier:          JK2it2tcDAylSDZ+J1iVZOdedhPJvx1Dts45r+ZHdPo=
Subject key identifier:   03:18:6C:18:30:33:6C:8B:0E:CA:16:D6:51:27:47:91:14:90:77:B1
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer:       /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial:       018F43B2626D3B00C902FBCC80283E88AD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number:          0919
Signing time:             Sat 04 May 2024 13:01:55 +0000
Manifest this update:     Sat 04 May 2024 13:01:55 +0000
Manifest next update:     Sun 05 May 2024 13:01:55 +0000
Files and hashes:         1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: 5thPqCI7PzayQTx4v+uCR+rXIRbv1qzr766SfQa/AyU=)
                          2: pU3narhAMburvDgJ3DQBpodY-QM.roa (hash: 4KpT4dX22LEg95vBBkB3sNul9flJzyzHVXA5rJ1BotE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:62:6d:3b:00:c9:02:fb:cc:80:28:3e:88:ad:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
        Validity
            Not Before: May  4 13:01:55 2024 GMT
            Not After : May  5 13:01:55 2024 GMT
        Subject: CN=03186c1830336c8b0eca16d651274791149077b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:69:e5:d9:34:41:26:3a:3c:68:f8:70:23:
                    1c:11:2e:dd:54:cd:d7:14:f0:c4:28:69:a2:25:d7:
                    16:0a:5e:1f:56:10:19:58:42:c4:c7:e7:0a:81:23:
                    2e:f9:12:b2:b4:a8:96:54:69:3b:78:e7:fc:6e:3f:
                    11:b4:3f:be:85:1c:4d:3c:25:1c:dd:58:ec:69:3e:
                    6d:fb:5a:a1:9c:3b:61:e2:82:69:7c:ff:63:00:a4:
                    25:6c:3d:85:2c:86:39:9b:02:fd:fd:27:ce:67:73:
                    73:fc:b5:b4:fc:25:90:c1:b6:db:fd:e9:0b:b7:f0:
                    8b:13:6a:92:b3:83:99:ba:57:99:8a:3a:e1:e0:9d:
                    e8:e7:86:e4:ab:fc:b4:45:d1:21:78:86:35:15:9c:
                    40:3b:7b:08:7a:ec:3e:38:83:ae:da:e7:eb:fd:04:
                    4b:65:23:e5:86:78:0e:e0:b0:18:32:42:fb:03:12:
                    5c:14:1a:fb:c2:a8:82:98:1e:d6:38:18:0f:0e:42:
                    ee:ca:cc:ff:1e:1f:e5:cd:0c:66:8a:c3:26:5c:49:
                    55:0e:63:79:cf:7d:aa:59:18:63:11:52:6e:14:0a:
                    19:2d:c6:e2:f7:25:a9:51:22:d1:81:93:70:0d:2e:
                    ac:03:82:e7:a8:cb:22:06:24:92:92:a5:77:22:47:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:18:6C:18:30:33:6C:8B:0E:CA:16:D6:51:27:47:91:14:90:77:B1
            X509v3 Authority Key Identifier:
                keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:a8:35:40:31:c5:f4:86:81:c5:60:48:c0:da:11:28:32:
         93:3a:8a:fe:19:08:4c:63:09:10:3c:cc:7e:0b:e6:b3:f0:65:
         06:45:83:13:56:85:f6:71:bb:cd:0f:de:d4:d9:76:51:01:75:
         e7:1b:73:1b:36:f4:85:b2:25:d1:19:08:8a:32:f0:61:be:04:
         d0:e3:e4:3b:4b:32:3c:c0:44:ce:86:8f:1c:7b:2a:32:ff:c9:
         9a:35:b1:7d:d0:cd:da:42:19:31:5c:64:dc:97:80:5e:0f:6c:
         2d:8f:bc:1c:e2:cb:9c:1a:e4:ad:b0:be:cf:b4:2e:37:7e:d7:
         8d:0c:1d:f7:9b:42:9a:06:ed:58:b1:24:db:80:1a:be:d6:3b:
         f8:ac:58:26:7f:29:cc:e0:41:81:07:f6:3e:4e:3d:69:5a:16:
         28:46:00:cc:56:4b:99:39:91:2f:c2:fb:46:e1:f5:b9:09:de:
         4c:2e:ff:ac:e7:c6:5a:f0:13:04:5d:0b:81:73:54:58:ac:3b:
         6b:ab:87:44:37:b9:67:e4:d1:66:96:02:08:b9:ba:82:8f:ef:
         af:49:41:c0:f7:a8:13:a9:90:7a:f4:cf:86:17:8a:f2:4d:0d:
         42:a1:32:b9:d8:01:13:a9:7b:29:d7:49:69:ed:39:66:40:f2:
         de:84:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:48:30 2024 by rpki-client on console-fra.rpki-client.org