Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File:                     HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier:          E8r4VgTPI8e+17OubKvngIVxLRk7FASAnjWZ2mowqWs=
Subject key identifier:   D1:94:F2:16:F8:58:6A:08:E0:B7:54:F8:34:CE:74:01:CF:42:C7:EF
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       018F4BD9A6891BCA73C1BAB6FEE85763A641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number:          0C85
Signing time:             Mon 06 May 2024 03:01:46 +0000
Manifest this update:     Mon 06 May 2024 03:01:46 +0000
Manifest next update:     Tue 07 May 2024 03:01:46 +0000
Files and hashes:         1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: +pnMwYPL3/MdQYEiIZPxqNMSfSRXwSKmLBeIHoDP27E=)
                          2: uLsg9UXwAn_Cp3aP5uxRgIyJYsI.roa (hash: GKSpFc1+b3n/nUm6q6kMrbne1DA8/pKHgQ+wOQRSRpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:a6:89:1b:ca:73:c1:ba:b6:fe:e8:57:63:a6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: May  6 03:01:46 2024 GMT
            Not After : May  7 03:01:46 2024 GMT
        Subject: CN=d194f216f8586a08e0b754f834ce7401cf42c7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:bf:fb:a7:b5:b2:d9:e7:3e:3a:ef:55:f2:
                    cb:b4:db:52:54:d7:0e:67:9c:62:87:4e:d4:ea:9a:
                    ee:b7:36:6d:8c:09:ac:67:33:dd:6f:08:1a:cf:95:
                    ae:c1:b1:02:3b:68:34:01:6f:25:3b:4d:cf:3b:8d:
                    43:4a:e7:18:8f:e0:20:b1:21:ad:3d:b9:ad:bb:b6:
                    66:2a:bc:12:c6:14:fb:05:11:3a:27:de:b0:c8:4c:
                    f7:b1:c9:be:e1:87:56:38:16:df:03:b1:8a:a0:31:
                    cd:32:f2:c2:d0:01:af:cd:46:ee:92:1f:fc:22:d2:
                    7f:20:04:50:f0:47:17:84:fa:6a:06:ed:aa:e0:f2:
                    81:98:ab:7d:91:85:9f:0b:3f:79:fb:f2:81:61:1f:
                    2d:4b:b5:c8:44:d7:f0:d6:b7:8c:e4:60:e5:a9:f5:
                    ea:de:e2:14:ac:e0:b4:b1:cc:23:c7:62:70:5b:61:
                    58:b9:a2:3d:2e:61:2f:00:2d:67:82:a3:45:f5:36:
                    0e:2a:ee:5d:ea:ab:ff:26:fa:46:df:77:78:40:af:
                    1d:ec:85:3f:02:d2:a1:09:5b:4f:0b:e6:4f:21:3f:
                    37:44:c9:1f:1d:67:4c:88:49:34:e7:6c:fe:ef:40:
                    c1:f3:10:3c:1c:63:63:df:1b:73:0a:6b:dc:01:ba:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:94:F2:16:F8:58:6A:08:E0:B7:54:F8:34:CE:74:01:CF:42:C7:EF
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:82:19:d1:c9:5f:e7:d7:4f:d2:f5:cb:4d:c6:21:29:e5:f5:
         6e:82:37:c6:dd:8f:4d:b9:7c:19:3d:e3:24:e5:e9:8f:be:16:
         ff:e2:de:d5:da:f1:d1:21:49:35:c8:1c:59:32:f0:d8:ba:96:
         88:d8:e8:52:ee:4c:74:61:e6:ef:fe:00:10:e1:c9:6e:48:66:
         35:f4:33:09:d4:39:a9:a8:3d:2d:54:5e:79:6b:53:0f:54:91:
         ef:23:00:38:b0:b2:6a:3d:0c:88:7c:df:65:eb:56:b3:61:9e:
         3e:9f:ec:bd:de:ae:88:69:87:62:0a:d7:cd:97:47:f8:8b:e0:
         e2:7f:c2:ec:8b:ab:26:60:ac:4c:1e:4f:1f:d4:6b:a2:ac:1d:
         97:9b:48:bd:1f:c0:d3:3c:00:f2:46:b8:2e:6c:82:c3:80:7d:
         3c:1d:b7:df:ca:72:cf:7e:5d:b2:2b:4e:ee:d9:48:78:cb:89:
         1c:9d:2e:69:17:23:a9:fb:cf:22:b4:9b:f6:e1:c2:b1:c5:93:
         df:96:1e:38:f9:72:81:6b:d6:bd:72:c1:ff:24:58:fc:a5:32:
         18:a6:f0:be:49:58:a0:77:58:0d:7a:8a:f6:d9:f8:9b:cc:a3:
         78:46:4a:92:25:f7:49:eb:2c:4a:68:eb:ee:93:36:44:06:5d:
         e8:60:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:57:34 2024 by rpki-client on console-fra.rpki-client.org