Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File:                     HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier:          NpjebS7OU502NgRPAUWu65OUnA4qB4jq3I8owYTQKHs=
Subject key identifier:   43:0B:C4:89:07:D5:3B:07:77:D4:7B:D7:62:40:AB:26:86:89:43:B7
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer:       /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial:       018F381D7F997B3A296FB6D9CBE36CCF03C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 07:03:27 +0000
Manifest this update:     Thu 02 May 2024 07:03:27 +0000
Manifest next update:     Fri 03 May 2024 07:03:27 +0000
Files and hashes:         1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: 3Yv+tHWFng9mv+UlEJbCsVf47+mAPsCDIbGpFFwRJaA=)
                          2: vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa (hash: iI+w/RiaSGduazQDuOg4IY+3D7w26ZU7HplJc2OwJIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:7f:99:7b:3a:29:6f:b6:d9:cb:e3:6c:cf:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
        Validity
            Not Before: May  2 07:03:27 2024 GMT
            Not After : May  3 07:03:27 2024 GMT
        Subject: CN=430bc48907d53b0777d47bd76240ab26868943b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:c0:45:8d:e4:1b:2b:4e:61:d9:d0:4c:74:
                    52:73:32:6f:c6:29:ed:88:d3:89:43:55:6c:ce:5b:
                    d8:81:3c:b4:3c:a4:91:74:c7:d2:cf:68:0c:1c:af:
                    97:b5:97:92:2b:b5:b5:9e:4b:60:7c:4d:29:44:8f:
                    e1:a2:67:61:f9:5d:b9:d7:cc:9a:0b:f9:64:e4:25:
                    fc:7a:85:7b:ba:87:d3:ef:03:7a:72:a9:2a:9a:cd:
                    81:e1:e9:f2:97:f0:63:72:ae:98:6a:17:d4:c9:92:
                    61:1a:35:a7:01:12:8a:30:ab:c8:27:bc:2d:e7:fe:
                    2a:53:78:8a:80:5d:d6:b0:d7:33:ee:59:37:d5:66:
                    51:a6:c4:e2:a3:5f:94:0c:24:fa:de:7c:74:bd:4a:
                    74:ad:1e:05:1d:86:58:b6:a0:c2:06:db:20:fa:35:
                    e3:5d:72:4e:22:45:63:f2:5d:29:fe:a3:de:b7:26:
                    3e:99:8b:71:8a:06:81:42:ec:45:e4:3a:6d:70:2a:
                    53:0f:bf:23:4e:bc:fe:ac:19:a6:69:c1:ae:db:65:
                    5c:26:c7:54:06:74:5f:42:1f:28:59:98:23:c1:8f:
                    d3:79:d2:a6:b6:cc:82:27:cc:b6:97:f2:06:de:ac:
                    5d:94:f7:a5:dd:2a:53:8c:8f:8c:5c:0b:cf:53:ea:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:C4:89:07:D5:3B:07:77:D4:7B:D7:62:40:AB:26:86:89:43:B7
            X509v3 Authority Key Identifier:
                keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:7c:46:7d:d5:8c:cd:9a:c1:78:a9:01:58:4f:79:cf:82:
         cb:8e:0d:52:4c:f5:6d:7b:7f:8b:cc:21:9a:c7:5a:c0:d9:cd:
         17:33:4c:8b:62:76:0b:bb:ad:61:65:15:b7:88:38:9a:48:75:
         6d:36:cd:eb:ba:7a:34:3e:e0:86:ef:05:98:12:23:6b:bc:58:
         55:c6:f8:55:a0:a1:4d:f8:e8:b4:12:32:63:92:b3:21:f9:dc:
         16:d9:cd:4a:07:b8:c1:19:4c:85:be:6e:4a:55:7c:3f:98:66:
         d1:80:76:5d:8b:25:a3:02:cf:e5:6b:58:00:05:e1:df:e1:03:
         42:4f:85:be:ee:93:af:b3:82:f9:e5:da:9b:46:50:2e:fd:dc:
         31:22:6d:21:ec:b2:7f:9f:f9:a9:e7:b8:87:0c:a0:24:e8:9c:
         5b:89:af:9d:cf:ad:01:f4:fb:0f:ec:ff:7c:72:98:f7:11:f6:
         ee:86:f3:c1:f2:fd:b7:1f:e3:32:f1:7f:92:a8:72:6e:58:25:
         4b:93:95:af:81:3b:d2:e7:bc:1e:0e:d6:f8:1e:ac:d3:af:8b:
         b1:74:83:f4:d4:ab:bc:48:d0:bb:4b:ac:c7:81:3a:f2:e8:f8:
         29:43:ce:d5:91:2b:2a:b0:9f:25:d1:53:4d:13:ce:19:75:8c:
         72:4a:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:33:56 2024 by rpki-client on console-fra.rpki-client.org