Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File:                     Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier:          7wdH46tApPvjozB/fspeVxKj7uujfxmJguQ7hshkQvo=
Subject key identifier:   1C:14:D7:6C:5C:6F:BF:71:88:BF:7C:72:C2:CA:F5:C7:5E:D4:D9:0E
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer:       /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial:       018FD8679C1491BAEB21434759110612236B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number:          0EE3
Signing time:             Sun 02 Jun 2024 10:03:39 +0000
Manifest this update:     Sun 02 Jun 2024 10:03:39 +0000
Manifest next update:     Mon 03 Jun 2024 10:03:39 +0000
Files and hashes:         1: FSunDsZPo9t54s5KoUGzBS-A5jI.roa (hash: gu1rSxI0yjWmo8gAsD3+ubZiZGCDNwJpDlFMswo3fzk=)
                          2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: ASXpHxbdIku3Y1EM86Nz7Q6S6CaPF8TmF+bfqjpp+rs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:67:9c:14:91:ba:eb:21:43:47:59:11:06:12:23:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
        Validity
            Not Before: Jun  2 10:03:39 2024 GMT
            Not After : Jun  3 10:03:39 2024 GMT
        Subject: CN=1c14d76c5c6fbf7188bf7c72c2caf5c75ed4d90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:9b:2b:64:fa:a5:fc:01:96:1c:26:c7:5b:
                    ae:74:55:b4:fa:b0:13:a2:7c:9d:ca:35:24:91:f8:
                    73:36:36:41:44:aa:f4:cb:2f:74:aa:e7:d2:c0:3f:
                    a3:0e:cc:c9:28:11:8e:34:60:69:11:21:ee:14:48:
                    33:23:fa:2a:83:9d:f4:c6:66:80:66:77:42:1a:66:
                    c6:7f:15:02:40:46:90:5c:a2:29:95:68:b9:b7:50:
                    1e:f9:5a:8f:95:62:e7:d2:04:9b:04:5b:aa:4e:b6:
                    f9:14:e0:1b:ce:03:2c:21:95:bc:fd:f8:77:92:99:
                    06:27:d6:a2:d6:0c:a7:0e:88:76:58:13:6e:74:d5:
                    51:69:5b:88:03:7c:88:8c:60:6c:82:20:15:76:9b:
                    d8:02:69:96:90:21:6c:dd:e5:65:85:3e:79:49:7e:
                    53:5d:ea:e3:30:48:09:74:fc:e3:13:80:62:1f:98:
                    6e:b1:6b:92:d2:05:6b:60:c9:a6:3a:bf:f6:26:17:
                    5a:fa:31:2d:02:cc:7b:1b:f0:2a:99:19:3f:ff:8a:
                    14:97:3e:e9:13:69:c6:d7:84:c2:ed:6d:07:fe:f4:
                    90:52:18:d6:29:03:f5:ae:ed:62:fe:fa:22:c2:8c:
                    f1:6d:bf:e5:aa:d8:df:c1:c7:7b:a5:b1:12:04:aa:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:D7:6C:5C:6F:BF:71:88:BF:7C:72:C2:CA:F5:C7:5E:D4:D9:0E
            X509v3 Authority Key Identifier:
                keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:98:fa:d5:c9:75:11:58:b6:41:97:53:96:54:ce:c2:5f:
         ac:dc:24:b7:fc:8e:60:24:27:72:c0:82:8e:d4:32:93:df:e0:
         ef:2a:ed:56:84:ef:45:ad:75:a6:b1:07:28:a5:9f:7f:11:74:
         d0:19:41:38:73:f4:df:45:f6:05:da:b2:c6:cd:29:4d:e6:92:
         b9:33:f4:5c:65:0b:82:6d:3b:1b:4c:fe:7c:3c:80:8a:8c:1c:
         f7:49:f8:34:a9:da:22:54:55:aa:15:d8:93:0b:7c:ed:9c:e3:
         b9:30:f3:37:99:32:b1:c3:67:de:20:23:5e:d8:69:6c:e6:54:
         95:1f:37:72:6b:0f:8a:a3:e0:ad:ba:04:0d:d5:1f:95:e8:f9:
         01:a1:af:97:df:fb:c9:2b:1d:75:79:73:8f:cd:43:bd:d6:d1:
         72:cc:c5:83:b4:fd:46:c2:28:8e:68:56:1e:33:ed:37:34:14:
         3f:e2:0d:a4:ba:d8:5f:ad:c7:7b:f5:a0:4f:c1:2a:60:ee:53:
         b4:69:d6:5b:04:fe:22:f1:2f:4f:b6:29:57:69:87:41:c1:54:
         84:a8:fd:ea:ce:21:8f:54:dd:00:f8:66:92:2a:89:eb:67:98:
         04:c0:fd:1e:6a:58:cf:00:58:f1:bd:fc:33:f8:cf:bd:a7:ad:
         bb:76:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:04:24 2024 by rpki-client on console-fra.rpki-client.org