Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File:                     H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier:          6AsvERqaA8fA5OaEkGRETJYkyMVPlosO/fG9YTR9+ac=
Subject key identifier:   B4:7E:2D:D4:F5:72:77:D3:B0:FC:69:8D:C5:E6:61:F0:C8:82:8A:93
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer:       /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial:       018F343E458869D31EC70BBE35057A933151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number:          0DF7
Signing time:             Wed 01 May 2024 13:00:47 +0000
Manifest this update:     Wed 01 May 2024 13:00:47 +0000
Manifest next update:     Thu 02 May 2024 13:00:47 +0000
Files and hashes:         1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: hc2Y+04bIUnAv+Ge93teOE6Sh7VsO1PsFabLFzkHLQQ=)
                          2: YNJKIBf0DrKm27mQmXcEr7c53zs.roa (hash: mnPzaYubQwvx/iwDyiogrvUccFUKKOFYG9FRqxCuUTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3e:45:88:69:d3:1e:c7:0b:be:35:05:7a:93:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
        Validity
            Not Before: May  1 13:00:47 2024 GMT
            Not After : May  2 13:00:47 2024 GMT
        Subject: CN=b47e2dd4f57277d3b0fc698dc5e661f0c8828a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:7b:39:bb:12:e9:28:97:14:f2:de:06:51:
                    40:e7:b6:90:bf:4e:93:3b:e6:90:91:f8:03:4f:0d:
                    30:35:7b:b1:59:90:c5:59:a2:3e:0b:f7:59:32:57:
                    b1:12:44:af:6e:58:fb:a8:67:23:e6:e3:b4:1e:01:
                    95:96:54:a9:12:3b:51:f8:aa:7f:33:f4:5f:87:ac:
                    b3:91:7b:24:0d:21:4d:bd:34:cf:47:3a:26:90:a3:
                    b3:2e:cd:96:8d:f9:4f:02:fb:61:e4:00:ba:ed:15:
                    02:92:8d:6c:a2:dc:9c:23:d8:cb:f7:0f:c3:2c:31:
                    35:cd:e9:56:2e:29:65:8a:4d:4e:97:f6:9d:42:31:
                    e7:bd:a6:73:59:e6:c8:21:28:51:10:29:93:40:79:
                    21:3e:89:a9:b9:fc:7b:f5:65:1a:52:fc:ab:41:34:
                    c2:0e:69:8b:7f:0f:f7:67:ef:0d:5b:fa:4d:6a:17:
                    f1:c2:77:07:fc:51:9a:2d:57:c0:cc:7f:5d:47:0e:
                    3e:8d:36:68:4b:4e:ad:43:21:43:20:7c:8c:45:28:
                    0c:66:ae:4c:55:3f:8e:47:0a:72:b6:26:32:03:04:
                    89:4c:7b:15:89:57:48:d7:06:50:03:bf:0b:f8:c4:
                    39:0d:a5:aa:5d:0d:ca:92:b1:e7:43:90:b1:e2:d8:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7E:2D:D4:F5:72:77:D3:B0:FC:69:8D:C5:E6:61:F0:C8:82:8A:93
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:76:55:15:5d:bb:66:b1:d1:fb:3d:4e:47:87:ba:95:69:8f:
         e5:7d:d3:4b:6f:86:63:f2:c5:33:de:f6:60:e5:a4:e9:2a:b7:
         dc:20:f9:37:a0:58:8b:9f:c5:15:5a:78:0b:38:2a:33:a7:46:
         7c:a7:28:93:23:0b:d9:4b:74:af:8d:15:03:3e:6b:f1:8c:0f:
         a7:18:6a:d2:55:f7:e3:79:11:e6:52:35:61:1e:f7:3f:af:ee:
         1e:c4:1b:df:71:71:99:03:42:5d:06:ae:99:ec:e1:f6:c2:4f:
         26:18:2b:1b:4e:45:ac:fc:70:55:b7:05:11:c9:71:49:6d:6a:
         5d:3d:06:b0:28:88:9c:b2:c1:80:50:ce:a9:08:e3:ac:38:04:
         85:fb:0d:42:58:48:ec:4a:6a:5a:62:2c:86:58:4e:ab:cf:c3:
         a3:bd:94:74:c9:0a:dd:bf:26:fe:11:8e:bf:e2:91:7a:76:5f:
         26:33:78:1e:de:50:57:2d:a3:f1:76:2c:19:e4:a5:5a:70:72:
         cb:71:11:e6:88:4c:16:ce:32:01:99:57:de:d4:27:36:8a:d1:
         77:76:a1:b1:ef:44:44:01:0d:84:24:44:bd:7c:a8:cd:5a:58:
         44:9f:e6:55:9a:67:bd:d4:41:e0:67:5c:a4:fa:df:43:f3:d8:
         03:8f:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:57:38 2024 by rpki-client on console-fra.rpki-client.org