Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File:                     HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier:          vrl0+onswUem/qOUHQpP9D9rAoBeL1HOTPsBCJnwFuY=
Subject key identifier:   E6:C0:22:99:42:D3:0B:3D:9E:3E:5E:89:BC:33:02:3A:B7:80:A1:5C
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer:       /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial:       018FD488DB8B0FDABFD46BC1B2D321ACEF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number:          07A7
Signing time:             Sat 01 Jun 2024 16:01:29 +0000
Manifest this update:     Sat 01 Jun 2024 16:01:29 +0000
Manifest next update:     Sun 02 Jun 2024 16:01:29 +0000
Files and hashes:         1: 3KS3o6RQQz830hAQopyQ0wsLL_U.roa (hash: sAFXlzUy9bgVI+F/GzcHxk+joXkwgK6T0pzDh2/RPcU=)
                          2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: V8TsULzWPPPQr/h7DmE2n1Qh2x0Yfy8kWkLZWz8+9gQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d4:88:db:8b:0f:da:bf:d4:6b:c1:b2:d3:21:ac:ef:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
        Validity
            Not Before: Jun  1 16:01:29 2024 GMT
            Not After : Jun  2 16:01:29 2024 GMT
        Subject: CN=e6c0229942d30b3d9e3e5e89bc33023ab780a15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:3c:62:71:a6:d6:cb:1a:02:cc:3a:bc:1c:
                    99:72:75:79:47:a6:a8:4e:5c:5b:c0:0a:0d:cc:80:
                    ed:86:46:bf:74:2a:91:af:a3:ff:21:62:5b:56:35:
                    23:92:67:2f:af:b3:b3:ff:7c:dc:36:23:a2:4a:21:
                    a0:a6:0e:a3:7f:bd:c3:08:91:f0:8b:66:b0:1f:fd:
                    6c:b1:75:55:bf:83:80:b4:73:b6:72:13:94:09:79:
                    9e:aa:d4:87:e7:9c:dd:df:ce:a5:35:1f:a9:3b:bf:
                    69:ae:e4:05:40:de:9c:76:86:0f:af:a4:c7:3f:b8:
                    a2:3b:11:d7:64:88:43:02:9b:fb:52:89:55:9b:24:
                    10:b2:d8:42:6c:d0:6f:57:17:f2:17:f4:5d:e0:d9:
                    1e:c6:4e:5c:e6:22:b5:ea:74:27:e5:fc:0d:13:93:
                    31:20:45:69:70:98:f0:e9:88:c3:e5:d5:df:64:3e:
                    34:ff:a5:98:15:ea:97:5e:8b:90:98:2f:6e:03:4f:
                    52:a6:69:d1:8c:f1:f7:76:0f:15:d2:58:1c:c3:0d:
                    38:48:21:0e:3a:af:65:83:4b:a8:4a:7f:2a:cb:5c:
                    fc:18:8c:ba:d9:71:c7:3e:16:45:71:d5:50:79:45:
                    e2:24:e0:b5:cb:f7:63:f0:73:a1:86:ea:80:b7:6a:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:22:99:42:D3:0B:3D:9E:3E:5E:89:BC:33:02:3A:B7:80:A1:5C
            X509v3 Authority Key Identifier:
                keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:84:50:9c:eb:b9:3a:bb:12:26:5f:4c:42:95:08:bb:cf:
         8b:1c:39:e8:50:69:c6:44:a8:d4:eb:00:a5:13:eb:c4:c2:d0:
         e1:f1:b3:11:51:ba:02:b4:ad:db:a1:16:e5:5e:1b:2f:eb:01:
         20:5a:d1:20:c2:4c:54:70:fa:61:95:3b:10:cd:10:a7:fa:85:
         8d:4a:52:4d:a7:ee:96:76:33:49:f6:2a:e9:cc:19:98:40:5c:
         8f:b5:57:36:46:28:f3:23:5f:d9:76:fa:be:a9:1f:a8:aa:d2:
         ee:03:18:e6:51:03:00:5f:85:3c:f0:b4:89:12:97:8a:ed:96:
         bb:b0:f2:8d:8f:d2:ce:d1:8f:67:79:c7:2c:93:29:8a:1c:e3:
         d7:16:e6:48:f8:82:66:13:d7:a2:51:ee:e8:8b:9c:99:cd:b7:
         25:31:4f:0f:13:d0:00:94:84:70:61:24:e7:98:53:ad:38:66:
         e0:6d:74:38:e1:ed:e0:70:b4:14:31:4a:a5:59:04:b1:d7:51:
         ea:4d:4c:f6:f2:5a:2a:57:cb:ff:a9:63:b1:f9:6d:74:e5:39:
         e2:d4:73:c1:d6:b9:41:dd:2e:ee:a6:15:79:32:31:46:6e:ca:
         4f:77:7d:ef:4b:eb:19:1f:8c:09:20:9c:c1:54:b2:25:80:8c:
         ea:63:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:15:18 2024 by rpki-client on console-fra.rpki-client.org