Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File:                     HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier:          /W06SUZBFE1uUJ8MYPOM6LpJBB6wF7v5Rl5xatnv2n8=
Subject key identifier:   F4:91:AE:88:D8:63:6B:E9:0B:2B:72:97:BD:69:DD:8D:86:C5:AE:59
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer:       /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial:       018F4D5987DE745C7634F6B4A349C6E9B376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number:          115F
Signing time:             Mon 06 May 2024 10:01:04 +0000
Manifest this update:     Mon 06 May 2024 10:01:04 +0000
Manifest next update:     Tue 07 May 2024 10:01:04 +0000
Files and hashes:         1: 33MbXjsprd1kNn-izjJ2CIVVue8.roa (hash: bHa8ilF5tvU9rHGF56KZTTvRy7Rwq8FduzcE1Iigo14=)
                          2: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: zlCmmKlqd02tPIlS58h3HF+wCCKszQL8WPvBiDixyjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:87:de:74:5c:76:34:f6:b4:a3:49:c6:e9:b3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
        Validity
            Not Before: May  6 10:01:04 2024 GMT
            Not After : May  7 10:01:04 2024 GMT
        Subject: CN=f491ae88d8636be90b2b7297bd69dd8d86c5ae59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:9d:e7:99:2b:46:53:81:2d:48:d5:d8:26:
                    90:ed:bc:5a:b6:5a:a3:ad:9e:04:e6:88:3c:5f:00:
                    eb:2a:78:4a:2c:a1:cc:57:5c:9d:d8:d0:61:7e:6c:
                    d2:66:d5:2d:78:de:e2:16:1e:c9:e0:27:19:c5:cb:
                    de:ca:9c:18:fb:e3:50:cc:9d:40:13:34:a6:df:d9:
                    04:7e:56:3f:0d:ff:79:56:cd:4e:ad:c2:cb:e4:ac:
                    5d:9a:1f:68:7d:7c:87:aa:9b:b6:f9:11:8b:75:75:
                    46:d1:68:f7:8a:b4:09:d6:7e:92:33:cc:9f:3a:a3:
                    99:b6:e7:05:ef:2c:d6:e8:f1:ae:15:6a:bc:8a:31:
                    f8:a7:e1:62:f5:86:6a:18:1a:71:6f:c7:f0:8e:62:
                    6f:a4:d7:ee:07:ba:97:fb:8a:f2:bf:8d:7b:38:b8:
                    c5:39:43:59:12:d8:34:04:dd:2e:77:dd:50:f5:02:
                    a6:5f:7e:11:88:51:eb:82:7e:22:bb:aa:e8:7d:21:
                    63:88:2b:fc:c9:f4:46:6f:42:ba:b7:16:9e:fc:81:
                    c5:b6:9d:c6:f6:33:27:bb:fc:38:a0:af:39:af:29:
                    fe:b9:82:39:25:4b:5d:54:00:9b:92:f1:68:aa:54:
                    95:bb:f5:ea:40:40:99:e2:67:60:98:55:a9:3c:03:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:AE:88:D8:63:6B:E9:0B:2B:72:97:BD:69:DD:8D:86:C5:AE:59
            X509v3 Authority Key Identifier:
                keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:70:77:7d:ad:97:61:62:a5:f6:6c:02:4a:41:10:59:9b:
         be:e8:fa:8f:8e:14:d9:5c:6d:f2:bb:8b:38:85:a0:41:c8:00:
         34:fc:af:a3:97:1a:f6:59:66:df:a4:46:eb:e4:33:75:7a:d0:
         69:69:a4:81:14:d4:f0:41:7d:86:50:06:21:c0:b8:26:53:0f:
         a7:e9:e6:8c:63:2e:05:3b:02:51:82:72:a4:58:b0:de:d2:e8:
         4d:ef:a7:f2:b6:c2:18:cd:36:7e:63:d7:ac:20:b2:61:57:19:
         86:12:19:41:77:29:1c:51:f9:69:c8:c5:67:55:5a:14:65:12:
         2c:bd:99:b9:70:15:70:87:44:55:8b:d7:ff:94:65:10:c7:6f:
         f9:de:6e:f2:c6:e2:0e:98:7d:17:c9:34:f0:cd:b6:f0:92:60:
         d3:ad:36:a3:7c:b0:6d:c9:87:b8:3b:bd:41:10:0e:7f:f4:44:
         5a:45:f8:f3:b8:ca:7c:f4:ce:ea:3c:5e:d1:17:17:4d:d9:8e:
         43:e6:7f:93:c7:b9:ae:e2:cd:77:58:d0:50:57:14:70:7c:02:
         fe:2d:e2:f0:6f:3e:79:e4:10:60:d7:35:16:9d:18:a3:44:23:
         98:93:75:38:e9:fe:67:84:b0:18:17:c2:91:d4:80:fb:a5:a4:
         dd:3d:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:32:06 2024 by rpki-client on console-fra.rpki-client.org