Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File:                     Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier:          RKltxquVNR+3Oylyh+rZl+UDP8K9ofUoWcpvXJQ2H0M=
Subject key identifier:   63:0E:90:34:9D:A8:33:2B:79:23:DB:4D:61:C8:AA:41:62:1D:03:CD
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer:       /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial:       01938C9CE790ABDB52F2E3F3522EFF3B7168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number:          0B51
Signing time:             Tue 03 Dec 2024 13:01:53 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:53 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:53 +0000
Files and hashes:         1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: O7WVHO71Bfo63OATWaZHZ2TeR6XMh1tcLUX/QpqN800=)
                          2: pU3narhAMburvDgJ3DQBpodY-QM.roa (hash: 4KpT4dX22LEg95vBBkB3sNul9flJzyzHVXA5rJ1BotE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:e7:90:ab:db:52:f2:e3:f3:52:2e:ff:3b:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
        Validity
            Not Before: Dec  3 13:01:53 2024 GMT
            Not After : Dec  4 13:01:53 2024 GMT
        Subject: CN=630e90349da8332b7923db4d61c8aa41621d03cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:c0:38:31:d5:34:80:bb:ba:ff:31:d0:34:
                    b9:1c:da:df:74:94:79:ce:03:07:58:a3:77:c5:d1:
                    1f:d5:a4:71:5e:87:c4:5e:a8:75:73:2d:08:bf:f3:
                    2f:e1:39:ce:58:7b:12:cf:d5:e1:37:f1:05:fb:44:
                    f7:31:4c:79:ff:a4:17:52:45:9c:73:90:5f:9c:19:
                    9d:f3:aa:d8:89:2b:db:e2:ad:89:7e:18:95:04:74:
                    b6:1d:1f:23:57:fd:3a:dc:ba:15:03:28:39:5b:59:
                    e7:c0:9a:69:72:ed:e5:0c:86:87:43:c1:33:33:c1:
                    c3:c1:fb:33:7a:65:1f:f2:2a:c1:ae:56:cc:db:2c:
                    c8:8f:a0:77:fe:14:63:d0:30:0b:ac:6a:6c:6c:31:
                    cc:69:de:07:6b:e2:b1:8d:57:1d:12:78:80:9b:36:
                    e6:eb:d3:a0:76:38:60:fe:e7:69:c8:e0:16:ee:9d:
                    82:5c:aa:ef:4f:ad:b5:10:e9:32:33:f6:c4:d7:10:
                    c3:ac:ce:8a:29:99:ac:b5:b0:82:f4:37:6d:28:2c:
                    c5:01:89:10:e6:c5:d2:1b:60:27:68:bb:1d:d4:21:
                    c6:38:68:5e:04:81:0a:b5:27:b0:cc:c5:7a:e2:a7:
                    c5:0c:07:f0:c4:d1:63:93:dd:13:b0:90:89:dc:03:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:90:34:9D:A8:33:2B:79:23:DB:4D:61:C8:AA:41:62:1D:03:CD
            X509v3 Authority Key Identifier:
                keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:72:69:84:8a:7a:d0:8f:62:f4:f0:8a:0a:88:89:18:2c:
         e3:0d:06:49:95:c9:1c:73:75:c0:ff:07:6c:a6:0e:1b:ad:2c:
         e4:44:ca:55:13:0a:32:25:66:39:de:ba:a6:89:82:49:c5:1f:
         88:82:66:9f:7c:8a:c1:68:17:4a:fc:2f:b7:f6:b2:de:38:a9:
         9f:c9:74:62:83:9a:81:d9:7c:80:f3:13:b8:39:db:79:a3:f2:
         ee:06:38:6c:25:32:6d:a0:a1:6a:95:f7:a1:5d:6a:99:5f:71:
         c1:46:76:a0:b5:48:07:98:bc:5d:4e:65:7f:c1:88:e9:88:a2:
         83:91:0f:c6:0d:bb:21:43:08:ad:0b:3c:99:49:44:19:ef:d2:
         47:6f:c2:11:32:4f:e4:6f:8a:b8:a8:60:6e:15:cf:a2:88:ea:
         44:f8:a8:18:b1:52:70:d0:31:44:ea:b8:4e:3a:99:80:67:3e:
         e1:c9:b9:e4:31:ca:d9:e7:25:01:2e:91:c8:02:cb:62:b0:9b:
         7d:33:e5:fa:0e:b6:2e:f7:e8:ea:e4:d6:10:1c:1c:0b:23:47:
         fb:59:4b:cf:ab:e8:5e:1e:1d:ca:3d:84:08:c9:e6:61:78:86:
         9a:b0:34:c4:37:c2:8a:03:1e:ff:26:83:ec:7d:29:23:13:25:
         65:a9:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:11:37 2024 by rpki-client on console-fra.rpki-client.org