Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File:                     hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier:          isxXTw1aordrvRMCF5BaYXHvSRZllJwWr2z0f4Yk1ow=
Subject key identifier:   E0:7B:48:6C:D6:58:33:A0:52:11:A4:C6:DB:C5:86:FF:D0:C4:2A:10
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer:       /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial:       018F87499AE72977ABA12420A05AE1846985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number:          0D2E
Signing time:             Fri 17 May 2024 16:01:38 +0000
Manifest this update:     Fri 17 May 2024 16:01:38 +0000
Manifest next update:     Sat 18 May 2024 16:01:38 +0000
Files and hashes:         1: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: T1ZlgNcgQ8W8HF9J6XHufVxkNa5u0Y9Z/Udy8Bhoh1E=)
                          2: zPPIG3kIcFDfaGdaujUdqYlQP9A.roa (hash: ypsf+EMkUHwJwGmNPIvsaygz4+ir1EUK7I+FwimD2c0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9a:e7:29:77:ab:a1:24:20:a0:5a:e1:84:69:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
        Validity
            Not Before: May 17 16:01:38 2024 GMT
            Not After : May 18 16:01:38 2024 GMT
        Subject: CN=e07b486cd65833a05211a4c6dbc586ffd0c42a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:d7:c4:79:67:53:5b:11:fc:95:38:48:85:
                    3e:f2:8a:0a:ad:a5:56:aa:fb:a0:7c:b8:6f:f2:a3:
                    75:e9:5a:2c:ef:08:67:af:95:31:d1:6c:0b:fa:12:
                    17:7d:5e:9e:91:b6:4a:dc:31:ef:2d:68:11:e7:1a:
                    31:b4:d1:a8:b0:f5:1d:c2:79:2d:3a:1f:ad:5a:ea:
                    e1:0a:27:b3:3c:e0:a1:27:b6:74:33:23:c3:3c:ea:
                    bf:00:27:4f:62:71:b4:e1:9d:40:e6:93:93:c1:ce:
                    34:9e:aa:62:f7:20:5f:c5:39:b6:31:3c:8f:72:a6:
                    ca:88:d6:f6:a4:53:ca:df:47:d5:50:86:75:2d:ab:
                    83:10:35:09:05:54:bf:da:50:7a:0d:3e:71:4f:a2:
                    79:af:2f:0c:96:a7:3b:6d:fb:78:c0:dd:ba:a9:bd:
                    dc:13:81:df:44:26:a9:db:4a:be:82:ff:8c:0e:14:
                    23:52:3b:35:02:a6:3b:60:99:a0:38:a0:5f:33:f8:
                    5f:f9:15:1e:c9:a5:46:12:55:88:0e:ba:f7:11:59:
                    cf:5a:ba:fa:90:14:3d:23:bb:b3:46:8b:29:ff:f2:
                    4b:94:b5:0c:c1:51:8a:ad:b6:f5:3a:96:f1:b3:fa:
                    4c:ef:43:3e:a9:22:ad:18:90:fb:bc:c5:1c:0e:33:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:48:6C:D6:58:33:A0:52:11:A4:C6:DB:C5:86:FF:D0:C4:2A:10
            X509v3 Authority Key Identifier:
                keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:60:64:97:5e:63:0b:b1:81:e6:da:b9:3f:4b:0d:16:f8:
         7c:b4:b2:9b:82:e1:80:a6:92:0b:4c:14:83:8e:6a:cc:1e:d0:
         63:95:9a:7c:4e:00:69:3b:11:62:cf:0f:c9:cd:e1:65:33:28:
         6b:6b:22:c2:ca:e0:5a:14:cc:ff:02:97:f0:a6:aa:6a:45:7b:
         81:e9:ae:8f:6b:22:90:53:e8:14:03:0a:f9:d5:64:e8:94:66:
         ee:9e:3d:9f:2f:76:18:b9:35:1d:4e:3a:62:7e:5e:1d:a3:df:
         a6:0e:d1:ae:aa:5e:56:71:06:3a:74:bb:32:72:cb:79:64:26:
         55:01:d3:d2:ff:f5:cb:25:e3:7d:6d:95:0a:b8:32:ce:0c:1e:
         16:dd:f1:cc:d1:3c:29:3b:b2:4b:d8:5b:b7:2e:f0:92:4f:fd:
         31:a6:7e:94:89:01:81:64:cd:3c:f9:7a:bf:bc:9d:16:35:3e:
         7a:34:e4:3d:d5:f8:28:ae:8a:31:84:cf:8d:61:db:f9:7e:63:
         ab:8f:68:57:dd:80:e4:10:d9:f3:0e:ae:dc:2f:15:fd:19:bf:
         4e:57:cf:46:5f:eb:d6:d8:76:02:3d:ff:91:48:0f:a2:17:13:
         69:b0:44:49:f8:1a:37:ba:ab:52:da:92:ab:08:70:b3:ad:84:
         aa:5b:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:00:47 2024 by rpki-client on console-ams.rpki-client.org