Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File:                     HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier:          YwUq8Wm2u0hcrMBpra0UZLciIuX4AFmQtlbzzLVUrlo=
Subject key identifier:   FF:26:FB:B8:42:8B:BB:BC:62:FA:C3:1F:5E:15:2D:02:1D:7B:90:81
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer:       /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial:       018F448D9C04277CAC5A4B0E143DFBC634F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number:          0AE3
Signing time:             Sat 04 May 2024 17:01:22 +0000
Manifest this update:     Sat 04 May 2024 17:01:22 +0000
Manifest next update:     Sun 05 May 2024 17:01:22 +0000
Files and hashes:         1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: niRJKSaKOfuP03hoTZVeTcguDGCttVRObfqRxLn+99s=)
                          2: zeMwJzRcSenbp9N5FJGOZ7XKCO8.roa (hash: GQcjOihfy3yLP6sOLC0xyX8vS5BbuzlAifVLai6J+LU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:9c:04:27:7c:ac:5a:4b:0e:14:3d:fb:c6:34:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
        Validity
            Not Before: May  4 17:01:22 2024 GMT
            Not After : May  5 17:01:22 2024 GMT
        Subject: CN=ff26fbb8428bbbbc62fac31f5e152d021d7b9081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:7c:a1:84:52:68:72:a4:b1:4f:ba:2c:b6:
                    d8:5f:99:a6:fd:73:2d:84:d0:50:1a:ad:50:a1:17:
                    b4:de:4c:19:62:da:fc:44:da:a0:c5:24:4b:0a:7e:
                    11:ed:fe:1b:30:ae:86:24:ce:19:6c:31:82:1b:a4:
                    b5:6a:58:09:d1:33:76:c7:6b:66:d1:a9:8a:39:9b:
                    43:ab:f7:49:c5:45:6a:af:8b:7e:f4:25:16:8b:7c:
                    d2:4a:8e:40:22:9a:39:a5:d7:6e:a3:da:ea:29:0b:
                    c5:a4:58:88:70:01:3e:98:e6:68:73:fc:c5:ba:d6:
                    10:43:2f:3a:f4:46:7b:cb:27:99:bc:4e:38:b6:df:
                    97:c0:0e:36:a1:63:fe:51:61:4c:73:4f:9b:f6:fc:
                    46:8f:32:32:57:f6:cb:61:b8:5c:53:a0:d9:a1:6f:
                    da:11:b4:54:3b:cc:1d:31:1e:ca:e3:09:fb:b1:b0:
                    9a:80:3c:4c:a3:a1:a7:74:ec:96:07:41:7f:3a:6b:
                    78:b9:21:0e:c5:52:79:29:51:10:46:79:dc:96:36:
                    f5:b9:1e:d9:a6:8a:62:8a:d8:45:be:d1:7e:cd:0c:
                    3d:70:44:e3:12:b6:5a:69:5a:25:9a:54:7c:72:c1:
                    c6:db:e9:36:51:3f:16:10:48:8c:cf:10:78:cf:18:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:FB:B8:42:8B:BB:BC:62:FA:C3:1F:5E:15:2D:02:1D:7B:90:81
            X509v3 Authority Key Identifier:
                keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:71:32:23:45:b2:d8:db:ca:41:b7:25:5f:5a:0d:76:dd:
         64:1d:f0:54:24:b3:12:c7:e0:22:b9:fc:be:8a:cb:23:63:33:
         c6:91:10:48:34:e8:91:cf:c5:bf:ff:f1:b4:2a:18:70:4c:ac:
         ce:52:bf:49:6b:86:43:ff:b3:a0:d7:56:e4:2c:4c:7f:55:e6:
         e7:d2:51:2b:98:8a:03:42:fb:ed:3c:e8:52:8d:98:4c:83:e1:
         b0:e0:e0:c9:85:83:27:7d:c2:ab:4e:60:d8:03:42:77:fc:7e:
         4a:93:c3:94:f3:b4:4a:2e:1b:56:61:92:7d:76:36:13:d6:fd:
         6c:8d:fd:eb:b6:8c:4a:e4:85:a8:18:63:29:05:78:53:92:86:
         40:2a:f1:d8:02:fd:48:f7:ee:4d:06:c7:ab:f4:71:5d:75:f1:
         93:91:b8:b6:03:d5:08:7e:bf:fc:9b:66:ca:98:e7:5c:57:f5:
         c3:90:40:71:ab:ae:41:06:70:35:ce:7b:83:6a:b4:a8:2e:35:
         24:b2:14:b4:0b:36:7c:9a:db:ba:a5:b4:83:2b:cf:5a:14:75:
         5f:94:79:92:68:cd:a7:5b:e9:ec:48:f5:58:1d:ca:e2:62:ad:
         79:7d:f5:24:bb:ce:75:3c:82:37:81:99:a1:35:c4:85:6a:53:
         d9:f7:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:34:00 2024 by rpki-client on console-ams.rpki-client.org