Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File:                     HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier:          g21xkCUgwolST2UYE3L4hdkWV0SR77ASBK92KgsYka0=
Subject key identifier:   0E:1C:6C:DB:5E:43:B7:3F:9B:DB:B9:4C:53:F2:06:6D:96:0A:13:79
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer:       /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial:       018F5023F55D3FBDBF7069D87B6855827C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number:          0605
Signing time:             Mon 06 May 2024 23:01:24 +0000
Manifest this update:     Mon 06 May 2024 23:01:24 +0000
Manifest next update:     Tue 07 May 2024 23:01:24 +0000
Files and hashes:         1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: 6QTHngCNimL5S+3/kh78IC/vtN18PP3noXcy45a6k1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:23:f5:5d:3f:bd:bf:70:69:d8:7b:68:55:82:7c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
        Validity
            Not Before: May  6 23:01:24 2024 GMT
            Not After : May  7 23:01:24 2024 GMT
        Subject: CN=0e1c6cdb5e43b73f9bdbb94c53f2066d960a1379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f3:49:d6:ae:48:f0:57:20:19:5b:1b:46:df:
                    4b:63:95:4c:c4:65:04:bf:f2:75:c5:71:a2:b1:4b:
                    0e:77:38:d6:3e:d4:2f:92:02:70:59:6a:37:91:e2:
                    40:ff:09:01:13:08:99:34:13:ac:3e:48:cb:37:f1:
                    56:15:70:4f:ab:c7:82:4c:51:92:db:64:8d:82:53:
                    8f:a1:c3:6a:ea:0a:4a:0f:2c:8b:7e:27:41:a5:1a:
                    f2:1e:d0:f6:f5:3d:5c:19:e4:86:7b:05:d3:5d:8f:
                    19:c1:71:ef:18:61:8b:a0:2d:07:97:bd:19:ed:cb:
                    65:60:ae:f4:1a:29:dc:86:f7:c1:1d:ca:ed:5d:99:
                    fb:59:fe:7b:68:eb:fd:67:8f:09:62:8e:9d:8f:4d:
                    c0:4e:8c:45:40:36:e0:fb:c4:f7:44:f0:f9:b9:8c:
                    4f:21:24:d5:2f:34:30:76:27:d7:45:f3:06:01:b3:
                    f0:88:d0:21:90:c9:fe:83:3f:66:54:d5:97:c7:be:
                    3b:91:ab:4b:20:4d:ee:49:d9:4a:85:d8:3e:f6:e8:
                    66:1b:07:2a:8e:57:96:70:11:c7:2a:e7:3b:4b:6a:
                    e0:84:4a:3a:66:6f:04:9a:1e:86:b6:9a:e1:00:2a:
                    a4:5a:48:98:92:b9:ac:9c:6a:34:33:f2:99:69:38:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:6C:DB:5E:43:B7:3F:9B:DB:B9:4C:53:F2:06:6D:96:0A:13:79
            X509v3 Authority Key Identifier:
                keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:df:19:dc:de:11:56:35:aa:ec:cf:66:2a:d0:68:93:f4:
         32:5f:d2:6b:23:af:6d:ad:83:8d:3a:2b:c2:c3:6f:9f:82:ed:
         d2:28:fa:95:e8:1d:89:32:27:fa:a0:b7:2b:2f:99:9d:cd:c6:
         9d:ff:0d:a5:a9:07:b7:b3:9e:95:8e:f0:1e:3c:5c:32:24:4d:
         37:13:c1:e3:78:bc:8f:4a:3b:b2:6b:4d:43:eb:96:ee:e4:50:
         c4:a8:86:03:50:5a:3c:28:a8:f1:b3:3d:e0:95:df:99:b6:1a:
         8d:61:85:92:4d:27:6c:f2:8f:2f:f7:c5:ed:c7:ac:f2:b6:7e:
         3f:bb:92:93:45:11:01:dd:61:6f:f1:8c:5b:8f:b1:c0:dd:d1:
         70:db:39:89:a8:ca:41:d0:2b:ea:da:90:1d:32:b9:a1:37:7e:
         c6:c1:63:83:d8:52:35:4a:a6:fa:8c:c8:1b:8c:58:b6:8d:d7:
         f7:1f:8f:21:73:ae:52:76:38:80:67:b1:7e:4d:ec:f9:40:66:
         72:3a:97:cb:69:9c:f6:21:c1:83:55:e6:45:c2:cf:ef:fe:2f:
         34:da:e7:28:25:05:72:ab:1f:91:53:54:79:ac:a4:6e:93:1e:
         8e:cb:99:35:cb:23:9b:34:0c:b2:43:0e:c7:8e:71:98:17:fc:
         51:42:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:21:20 2024 by rpki-client on console-fra.rpki-client.org