Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File:                     hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier:          FZDGx9EAO8LBMHuy+HfKXpRRBq1wna+hHKGOYZIRXLc=
Subject key identifier:   7A:3A:2F:47:B3:3D:AC:AD:D7:C3:7F:C6:98:EB:12:FC:5D:F0:B4:20
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer:       /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial:       018F87ED1FB2A3800E6F2DC936D5E59828E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number:          058C
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: pHSkk0aSLDqf5TrU2OUaS6iGJZyNWl90ADq8qel7mVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:1f:b2:a3:80:0e:6f:2d:c9:36:d5:e5:98:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=7a3a2f47b33dacadd7c37fc698eb12fc5df0b420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:07:34:00:34:b8:9e:05:be:20:34:06:14:
                    1d:40:f5:0a:09:dd:20:6c:6b:7b:b6:7d:6e:0c:88:
                    7e:0e:cf:bc:86:ea:c9:1f:08:b2:d0:90:5d:f8:97:
                    05:fe:39:fd:aa:50:e4:8f:35:b2:e5:e4:00:57:ba:
                    c9:c4:6d:5e:e7:85:e5:70:7e:c1:a9:dc:48:a4:22:
                    00:5f:28:23:a8:fd:c7:db:ae:8a:f3:2c:5c:2d:41:
                    96:b1:fd:2c:73:50:a3:47:c0:b1:c5:6e:46:18:fc:
                    a5:2d:0a:bb:84:70:7d:eb:53:0a:44:ac:45:d6:1b:
                    24:2b:73:c2:13:e5:45:ea:3e:08:af:35:56:63:b3:
                    d1:d1:9b:c4:53:76:25:33:54:a4:1b:1c:10:c6:99:
                    59:27:1f:b1:b0:01:e6:aa:32:38:b7:a5:5e:0b:ab:
                    9e:c2:73:64:a1:c3:5f:93:86:78:32:32:04:b7:0a:
                    c2:91:45:19:5c:62:1b:e9:52:56:03:f4:04:c6:4e:
                    6f:d7:0e:ce:b5:61:69:df:3a:c0:c7:66:13:51:5f:
                    71:4c:a7:a7:b4:54:11:5a:cf:07:21:6d:f3:f0:0e:
                    c2:2b:b1:d4:f3:27:11:17:99:c6:90:27:91:eb:5e:
                    3c:cf:c1:8a:1e:e7:4c:40:b7:90:cf:39:17:2e:71:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:2F:47:B3:3D:AC:AD:D7:C3:7F:C6:98:EB:12:FC:5D:F0:B4:20
            X509v3 Authority Key Identifier:
                keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:d0:7f:25:e2:b6:77:73:ea:f7:8f:52:33:05:35:48:31:
         47:e6:31:64:3f:04:4c:9a:35:3a:8c:f7:bd:c8:df:b1:aa:70:
         d1:0e:b5:a7:30:84:56:8f:98:2a:fa:26:12:04:02:5f:14:e1:
         34:6d:5f:55:6f:16:6f:74:8a:13:34:ab:6f:d3:4d:15:a9:12:
         bb:3f:d3:fa:e8:be:66:12:5b:b8:1e:77:48:99:cb:62:a2:2d:
         d5:fa:2d:73:4e:05:d9:f8:9f:c6:e1:2f:5a:2d:d8:aa:67:a8:
         0e:f8:ae:0b:56:19:48:75:ea:29:5d:61:a0:43:da:e2:01:c7:
         00:8f:11:5a:90:df:72:09:63:4e:6c:2a:fc:b1:57:ec:6b:b6:
         82:5f:7e:da:a7:fe:08:a2:95:6d:74:4c:f0:25:56:36:46:b5:
         95:28:bc:76:82:ba:30:31:23:81:44:31:d5:d5:a3:92:88:f2:
         d3:9c:89:24:44:c1:c3:22:4e:24:da:aa:fc:75:e7:bb:4f:2d:
         12:64:5e:de:e4:1f:9a:6a:78:1e:36:e5:ce:b0:5a:21:8e:91:
         ee:51:4f:91:08:ee:f6:37:38:79:6b:5a:d1:59:ca:c9:5d:e5:
         d4:f7:19:16:00:c9:86:67:47:40:fd:83:48:93:0e:59:06:a9:
         96:da:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:54 2024 by rpki-client on console-ams.rpki-client.org