Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File:                     H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier:          8+D3R2MVH8R4pnbG4rV7v/svFCEtAbryyadBsR/lwPI=
Subject key identifier:   96:5F:3B:F4:65:90:00:DC:05:3C:3A:3F:72:5D:E5:11:96:59:15:99
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer:       /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial:       018F448E1111A197A85EF26858B36A32424F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number:          044E
Signing time:             Sat 04 May 2024 17:01:52 +0000
Manifest this update:     Sat 04 May 2024 17:01:52 +0000
Manifest next update:     Sun 05 May 2024 17:01:52 +0000
Files and hashes:         1: 0vc4YqJtT7Mk62B6ct_66D1OP4E.roa (hash: fQ2xrh9CLc9S9OJUsncgw1uF6dJ6YyyYoHMMLrpUXJ8=)
                          2: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: 9MoUxH83JnqSMF8sNOu8bc3HZg3pDbInfUqn3VJaOrg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8e:11:11:a1:97:a8:5e:f2:68:58:b3:6a:32:42:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
        Validity
            Not Before: May  4 17:01:52 2024 GMT
            Not After : May  5 17:01:52 2024 GMT
        Subject: CN=965f3bf4659000dc053c3a3f725de51196591599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:b6:ad:83:ce:40:1a:7a:c6:e0:16:2f:26:
                    95:6b:9a:91:42:b9:50:e7:dd:c8:8d:fd:75:e3:9f:
                    c7:34:ca:c9:2b:f7:cb:18:67:32:66:d5:d4:df:03:
                    d1:41:7f:b2:0d:c6:fb:62:96:fe:c9:06:09:ce:fd:
                    75:b4:48:73:c7:77:47:ec:db:d7:d4:19:74:42:76:
                    e5:bc:93:74:3d:15:cc:5f:a8:86:fa:f3:6a:b3:24:
                    55:a1:46:df:eb:f9:93:62:44:d3:e8:69:5f:10:3b:
                    ae:c3:2c:1f:98:9c:1d:8c:d2:57:4d:a2:9d:49:26:
                    ad:4c:42:ae:e2:cb:7f:bc:a5:b3:55:a6:85:9d:b4:
                    c7:15:f7:74:6e:fb:36:1b:2d:19:17:f1:5e:f3:b9:
                    e5:14:cf:68:54:30:ad:07:af:03:41:fa:88:2d:06:
                    b2:9f:b8:16:8e:2c:24:ab:0e:bb:33:3f:37:ba:2c:
                    7b:1a:e1:24:92:a8:75:fd:53:fd:49:e8:56:6b:70:
                    60:ea:8e:aa:21:28:a3:a9:8e:2a:28:c2:6a:b4:21:
                    e5:21:fb:b1:c3:cf:74:8d:61:43:d4:ba:34:1b:63:
                    c9:4a:fd:cf:d7:ef:4c:13:f8:b8:f5:41:82:b3:cc:
                    88:6f:bf:41:bc:37:65:06:1c:45:b7:d2:d0:2e:20:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5F:3B:F4:65:90:00:DC:05:3C:3A:3F:72:5D:E5:11:96:59:15:99
            X509v3 Authority Key Identifier:
                keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:d7:bb:a2:39:38:1a:d3:ab:5c:bd:cf:a5:be:98:85:57:
         5d:85:3b:f7:26:36:48:42:33:1e:e6:73:88:6d:b8:d8:ea:18:
         0f:48:b3:26:13:e7:8e:d4:c6:f8:f2:e2:bb:73:73:cf:bc:be:
         56:09:d1:be:2f:93:8b:26:e5:6b:2a:1b:3c:95:41:ab:4d:f3:
         34:f5:3c:87:dc:f9:10:7c:39:ea:21:01:05:1a:0e:bd:46:62:
         2b:32:26:32:14:11:f6:7a:40:b1:17:73:01:83:46:65:7e:22:
         ae:e2:d6:12:5b:9d:21:e5:b9:0a:59:8c:bf:c5:59:f1:cb:e9:
         1e:fb:29:a0:47:ad:c0:98:29:1f:20:66:d1:da:6a:39:9f:0d:
         1b:4b:ce:23:d5:51:b8:1c:21:14:b0:c0:c3:fb:59:af:6c:4c:
         5c:d1:fb:19:97:0d:51:a9:84:5e:80:f0:07:c1:66:18:78:d1:
         bd:80:af:55:76:5d:1b:3a:57:0b:53:fe:b1:a4:66:33:46:c0:
         84:bb:80:35:4c:1e:95:07:2e:fe:00:36:cd:df:32:76:06:61:
         48:5d:f0:02:35:b4:7e:4e:25:c6:cb:a8:d3:2e:a0:fe:a8:3d:
         f0:8f:43:38:ed:35:3c:59:0f:19:ae:2d:f0:3d:8b:7a:5c:23:
         cb:6d:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:37:01 2024 by rpki-client on console-fra.rpki-client.org