Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
File:                     hpNlUyawRyyGbFyZMC4rLXjL3fc.mft (raw, json)
Hash identifier:          t4FsnGLRptHJmX9pXa/wekSS4IBBKjhHYKgyBwsTkS8=
Subject key identifier:   C9:7C:35:E3:E1:21:D5:6E:23:7C:A9:8C:6C:63:12:D5:5B:63:DB:25
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Certificate issuer:       /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial:       018F94CF493A229774DB708044F20731A25A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
Manifest number:          0A56
Signing time:             Mon 20 May 2024 07:02:43 +0000
Manifest this update:     Mon 20 May 2024 07:02:43 +0000
Manifest next update:     Tue 21 May 2024 07:02:43 +0000
Files and hashes:         1: hpNlUyawRyyGbFyZMC4rLXjL3fc.crl (hash: lDTGW1xWlJYMsamWc7me55pIWXwmS4DuExALO4M3nEc=)
                          2: ix58f4LcXxkW-msHnWNlR6Z649Q.roa (hash: po0wmR4YORbEOi20CNHVH8fn0F8/D1/68FXgwvnd6RQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cf:49:3a:22:97:74:db:70:80:44:f2:07:31:a2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
        Validity
            Not Before: May 20 07:02:43 2024 GMT
            Not After : May 21 07:02:43 2024 GMT
        Subject: CN=c97c35e3e121d56e237ca98c6c6312d55b63db25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:49:57:3f:e7:c6:ac:7c:88:f7:ca:38:26:
                    3d:f4:1f:7a:fe:51:85:93:7f:7c:2c:bf:02:3b:45:
                    a8:f2:1b:14:bb:bd:a4:1b:7a:ee:f7:dd:77:ce:0e:
                    14:6b:2f:2d:93:9d:f0:1e:6c:0c:4c:f7:5d:58:63:
                    7f:fb:90:9e:89:3a:6b:9f:3b:dc:9d:f8:da:ac:95:
                    31:46:8f:d0:02:2c:a8:62:b6:a2:0b:29:17:9d:75:
                    d0:53:b4:a7:04:a7:47:b1:38:9b:ae:9e:63:43:4d:
                    74:ed:08:29:b4:2e:11:08:23:47:fb:35:79:7e:83:
                    0a:88:b2:20:53:71:2a:45:50:e5:59:2a:bd:80:5a:
                    fc:b6:da:23:5c:4f:a2:1b:70:a7:26:5c:69:df:fd:
                    39:86:68:10:72:20:97:2a:aa:4f:c3:9d:81:69:0b:
                    e0:87:e5:3b:7d:5d:07:21:60:df:d7:0e:8a:7b:19:
                    82:96:97:68:97:d5:14:f9:f4:1e:97:10:f6:b2:2e:
                    16:e5:da:62:b3:4c:7c:05:23:eb:f6:81:6d:ef:63:
                    6a:83:67:5d:89:73:97:f1:c5:f6:b0:19:50:3b:94:
                    bc:dc:fa:cf:a6:09:00:f3:e7:19:68:c0:bc:b5:2b:
                    4e:d4:c0:6d:a1:83:74:fa:27:5c:66:cd:91:ff:67:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:35:E3:E1:21:D5:6E:23:7C:A9:8C:6C:63:12:D5:5B:63:DB:25
            X509v3 Authority Key Identifier:
                keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:da:de:49:1d:36:04:70:d3:f7:1f:5e:95:33:61:59:79:54:
         76:d5:cb:1c:15:43:7b:9f:a2:8f:1c:20:8c:62:22:ff:d8:9f:
         f5:b0:f1:a8:6b:9b:f2:ca:d3:44:6d:4f:66:25:15:72:ff:f0:
         a4:80:53:a6:ba:d7:29:38:24:59:74:86:24:bc:37:93:2e:ca:
         7c:e4:fd:9b:14:b4:8d:af:96:97:40:15:6b:19:18:1e:17:4a:
         34:10:76:a9:1b:18:c5:aa:d1:6d:a2:67:86:55:8a:74:60:89:
         af:77:a3:e8:b2:fa:4d:45:f6:2a:36:75:9f:73:66:a1:89:49:
         fa:d0:25:e9:05:15:90:5e:c1:56:c2:b3:3e:5c:35:eb:23:a1:
         79:c9:0c:e9:96:a0:82:fd:5e:3a:15:d5:33:4b:af:ff:fd:05:
         7c:93:9f:d3:84:fb:cd:ce:8d:33:0d:0f:ea:cc:aa:a4:5b:26:
         6d:c9:c3:76:af:57:df:76:3c:f9:a6:9b:20:1e:d3:75:cb:65:
         f4:0f:eb:02:b5:48:d2:eb:3b:56:42:f4:0c:a9:34:90:de:e6:
         ac:0c:25:86:bb:93:76:64:7f:cc:63:28:8d:f8:5b:79:00:69:
         6b:b1:79:5a:bc:9b:c0:ca:fa:24:85:9d:2c:c8:54:3a:0d:92:
         bb:2c:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:33:33 2024 by rpki-client on console-fra.rpki-client.org