Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
File:                     Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft (raw, json)
Hash identifier:          T9XDUePI5847Zt/raYSq3p1ZEBCMFOoNCuNDxWAJ8sc=
Subject key identifier:   BA:D4:AF:42:0D:3F:8E:26:7A:B4:8B:14:52:E9:A8:FD:16:F2:AA:6D
Authority key identifier: 1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B
Certificate issuer:       /CN=1ddf5951c9ae79976d97e1d28e466a615119898b
Certificate serial:       018F3DE6E4930840F8905D98352A7C44A9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
Manifest number:          0B9C
Signing time:             Fri 03 May 2024 10:01:32 +0000
Manifest this update:     Fri 03 May 2024 10:01:32 +0000
Manifest next update:     Sat 04 May 2024 10:01:32 +0000
Files and hashes:         1: Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl (hash: e2aE6t+PzHL06f8cVJvSC/SNmOuP2IVZc3M2tOOejFc=)
                          2: YMQ02KtoHddOBd8P0_L911zzXZo.roa (hash: KLEMa+EsIIYumj5REVXzu9c2VVWhgQLOfarzx4uuFQ8=)
                          3: dq0H0ptfWVeMI5pzuDVutGRIMbA.roa (hash: 0F5Hp24nVBW+EaqkAlTh8XGSno4s2M0R/Zi5bowUmQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:e4:93:08:40:f8:90:5d:98:35:2a:7c:44:a9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddf5951c9ae79976d97e1d28e466a615119898b
        Validity
            Not Before: May  3 10:01:32 2024 GMT
            Not After : May  4 10:01:32 2024 GMT
        Subject: CN=bad4af420d3f8e267ab48b1452e9a8fd16f2aa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:95:9a:91:6f:79:1f:71:d1:0c:eb:c2:2d:
                    e3:f4:f3:3f:a6:b8:88:63:47:68:6a:86:92:42:75:
                    a7:6f:b6:23:77:62:bc:30:10:a2:c3:8d:bc:b7:6d:
                    59:9b:0e:25:a5:02:11:af:0f:d9:ab:1e:cf:48:08:
                    7a:bd:34:07:1b:7c:86:2f:1d:54:28:1e:e3:ff:49:
                    7a:a6:4b:32:15:b1:18:11:55:02:e5:c8:b9:5f:31:
                    73:88:dd:7c:65:63:b0:70:9e:0f:e0:a7:b6:d5:70:
                    01:85:d9:fe:45:07:50:77:55:a9:c8:66:0f:b6:6b:
                    54:44:7d:40:2a:5e:ed:a0:17:53:00:21:c2:72:2c:
                    0b:ea:e0:4f:fe:e2:58:23:dc:0a:53:ee:89:e8:12:
                    1d:f0:1c:4f:c6:8d:db:bd:78:7c:dd:ad:70:61:da:
                    ed:52:3a:6d:4e:b4:8d:a8:e6:81:76:4e:6b:d3:51:
                    c4:ba:ff:63:07:6d:fd:83:4e:6e:24:71:03:ff:ee:
                    be:a6:c1:6e:2c:47:9d:43:e0:27:85:0a:b9:4f:73:
                    e8:27:4c:59:7f:b5:d1:9d:72:59:a5:68:92:ee:dc:
                    9d:58:fc:d6:25:2e:78:b9:ac:01:03:78:48:79:44:
                    d0:e7:2c:56:80:f0:3e:e9:0c:a8:55:a9:46:c1:a9:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:AF:42:0D:3F:8E:26:7A:B4:8B:14:52:E9:A8:FD:16:F2:AA:6D
            X509v3 Authority Key Identifier:
                keyid:1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:04:92:88:5b:4e:93:45:0c:21:fa:10:5b:c7:9a:be:8c:7a:
         c6:cc:fe:ba:cc:32:aa:6e:af:89:bf:e1:e0:c4:7d:65:cb:90:
         65:59:bb:94:28:32:79:a9:13:e9:55:2b:80:a4:e9:96:18:df:
         45:e4:07:71:13:c4:13:df:3c:7f:1f:9d:0f:30:d3:b2:b1:ac:
         2f:dc:61:bb:26:0f:35:2a:2e:f3:c1:34:75:89:03:e4:e8:b9:
         96:88:be:8b:10:aa:e1:2a:f9:4a:e6:19:57:8d:3f:8f:52:77:
         3d:8f:b5:88:9e:24:7a:a9:e8:a1:03:bb:c7:f4:02:39:65:d3:
         bd:dd:d0:0f:0b:93:28:59:7c:53:d3:80:dc:6e:fd:4a:fd:10:
         f0:0e:3d:08:68:64:64:15:e4:9f:38:7f:12:40:b6:d6:a8:1d:
         d0:9a:97:13:93:d1:79:9c:2a:3d:97:09:25:77:71:9f:6e:e8:
         1a:d3:81:ef:36:7d:39:2f:2e:d8:ac:2c:0f:51:4a:61:af:39:
         a7:e1:6f:6a:46:75:34:4f:84:97:9d:3f:ca:76:04:b6:cb:0f:
         71:90:c5:67:10:8c:23:fc:bb:c1:86:cc:bc:d1:53:e6:cc:dc:
         99:3b:63:02:b0:a6:98:ca:1e:1d:9c:27:a3:27:49:a6:30:67:
         c2:1b:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:29:30 2024 by rpki-client on console-ams.rpki-client.org