Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File:                     HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier:          OS0KFy1PQ9XHNuYlwIEIRgGmjmpk0MOhSIJ97q74TkY=
Subject key identifier:   A0:63:D4:2B:9A:AB:86:42:7B:C1:5E:78:7D:3C:E0:85:F2:E3:C5:51
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer:       /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial:       018F3AE5C3CB67F856467A586BBB6CDA44B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number:          0D6A
Signing time:             Thu 02 May 2024 20:01:27 +0000
Manifest this update:     Thu 02 May 2024 20:01:27 +0000
Manifest next update:     Fri 03 May 2024 20:01:27 +0000
Files and hashes:         1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: 9WbDL9PaSYK0uHVa+S4XnP22nZ15fnjTAdnmjqAUCI0=)
                          2: LxdR0ay93voHyK2dZ2o2Vy88n6k.roa (hash: jUu99hJQUNWDAXXDed98Rz0lamLhQPiTmkilBxr436U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:c3:cb:67:f8:56:46:7a:58:6b:bb:6c:da:44:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
        Validity
            Not Before: May  2 20:01:27 2024 GMT
            Not After : May  3 20:01:27 2024 GMT
        Subject: CN=a063d42b9aab86427bc15e787d3ce085f2e3c551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:78:ae:81:c9:49:16:3f:f4:3f:24:ed:4c:
                    2a:39:ba:b8:22:1c:42:0a:88:72:6d:91:00:62:81:
                    91:36:c8:57:76:1f:4b:ee:58:f3:c2:1f:c4:79:42:
                    2f:3b:ad:f1:f5:4c:98:7b:ab:08:70:c4:e5:8a:43:
                    4d:aa:7e:09:0e:0b:2f:dd:5e:f7:6a:5c:83:d1:2f:
                    c3:eb:fc:59:71:ab:79:9e:64:e3:ff:b0:13:31:66:
                    21:3f:44:20:56:b8:16:4d:fb:3a:29:62:13:cc:fe:
                    f9:ce:aa:6b:da:f0:af:45:e7:b4:eb:b6:48:81:2d:
                    6b:c9:fa:af:f4:a8:bd:19:3c:2f:95:09:d4:11:a5:
                    6f:a6:da:c2:ae:29:c7:6c:80:73:cb:3e:b3:78:2d:
                    06:e4:da:a2:bc:8d:0d:bb:89:18:b9:68:f7:05:8e:
                    0f:ed:0c:23:30:93:9c:d3:39:35:bb:8c:04:ff:40:
                    01:6b:05:fe:60:db:47:22:97:f5:42:fb:63:3d:a0:
                    3e:71:6a:f7:f2:db:ce:65:a8:bd:9e:3d:d5:b5:d8:
                    32:59:8b:6d:a5:e7:1b:05:c6:2b:7c:8e:1f:7a:c2:
                    62:f7:e0:94:eb:6d:94:ed:8d:d0:99:18:26:2a:25:
                    d3:a2:86:d6:4e:6d:04:48:2a:0a:40:bb:99:91:c0:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:D4:2B:9A:AB:86:42:7B:C1:5E:78:7D:3C:E0:85:F2:E3:C5:51
            X509v3 Authority Key Identifier:
                keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:81:2d:90:58:bf:84:70:79:5d:62:33:08:b3:d3:5a:87:2b:
         f9:02:bb:91:aa:4a:05:50:31:2f:8a:d1:20:47:69:e9:dc:aa:
         b4:15:9e:ab:ba:b3:bc:3b:08:7c:4a:70:3f:62:33:17:c2:46:
         73:7b:03:24:06:78:19:8b:74:27:d8:e6:4f:67:55:7f:4e:2f:
         7c:a8:22:3b:61:7d:d0:35:d4:a3:32:d8:3c:8d:45:8d:9e:66:
         26:78:8a:07:0e:1e:df:7d:0d:0d:00:09:d2:31:c7:8d:8f:71:
         be:db:3b:8f:70:e9:3a:3a:a4:b7:ad:4e:22:ae:86:b9:03:74:
         4a:8e:1a:77:27:c7:d7:11:be:3e:5b:41:1c:6f:8a:a8:95:e0:
         00:e6:77:bb:46:38:5c:0d:f1:d3:3a:89:36:ed:be:7e:f3:e5:
         b7:01:89:53:a4:a3:72:6f:9c:59:e2:56:ce:37:5b:2e:a0:fd:
         6f:fd:9c:57:da:c2:56:d7:90:9d:4c:d8:9f:bb:43:3d:ed:05:
         a0:b2:62:c8:6f:20:86:f5:dc:9e:85:74:4c:af:ca:97:57:c5:
         ef:9a:ac:a0:ef:a5:49:28:63:f6:d6:f5:a0:1a:35:bb:18:f8:
         d4:27:d1:dc:3f:cc:d0:06:88:b1:13:e2:f5:04:09:15:5d:f7:
         14:49:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:19:38 2024 by rpki-client on console-fra.rpki-client.org