Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File:                     HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier:          jqpH6Y14ntXULsCRnZjr317W/+wnviFePp8JfWKhGHw=
Subject key identifier:   02:0E:E0:58:3D:81:93:EC:C2:7F:BE:0B:BC:45:56:E5:C1:06:7A:A1
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer:       /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial:       018F381D70E93EA31F0E38E9FBA124253ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number:          09A9
Signing time:             Thu 02 May 2024 07:03:24 +0000
Manifest this update:     Thu 02 May 2024 07:03:24 +0000
Manifest next update:     Fri 03 May 2024 07:03:24 +0000
Files and hashes:         1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: bUQ0GKtwo9fqEca3KQhsc/fzqa8vFqoQIzuejhRFoAg=)
                          2: mnJZYacpbHJBMSglONlBW2In0sg.roa (hash: UqMeaGHk6kyzgPXlCGJUB3zxCxlqEDTWCqTgO4V9/Fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:70:e9:3e:a3:1f:0e:38:e9:fb:a1:24:25:3e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
        Validity
            Not Before: May  2 07:03:24 2024 GMT
            Not After : May  3 07:03:24 2024 GMT
        Subject: CN=020ee0583d8193ecc27fbe0bbc4556e5c1067aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:0d:76:c1:50:59:b3:0b:44:f4:0e:ec:cc:
                    b2:ce:13:cc:d6:da:36:08:cd:f7:76:c9:7d:8e:1d:
                    57:62:e7:e9:45:a6:92:6c:67:d2:80:49:31:b0:07:
                    00:87:d1:27:5d:93:89:38:1e:a0:e7:ca:9a:7a:a3:
                    5a:73:9b:cb:30:a8:8b:d3:eb:89:96:7b:4f:ec:c7:
                    a9:3d:c5:75:fa:6c:4a:9a:78:82:23:89:a0:ea:7c:
                    0c:93:d3:5a:df:fe:e4:cc:ce:ea:14:31:3c:18:3f:
                    66:db:e8:61:dd:7c:0b:46:c6:2b:45:ee:9a:f0:4b:
                    06:0c:01:51:0e:c2:c8:86:62:e8:a9:e7:50:34:46:
                    4f:97:61:ad:cd:ad:d7:2d:9a:39:fb:fe:da:08:04:
                    1b:93:48:c1:60:e7:ce:a7:3a:f5:65:f6:72:c8:6a:
                    f7:52:5e:d3:a8:f0:c0:75:15:0e:bd:3f:3f:b8:a8:
                    75:84:26:57:d7:35:3f:b0:c1:ae:4e:36:f0:6d:ce:
                    ce:99:74:fa:50:e1:2e:56:30:a9:61:06:b0:92:4c:
                    b8:5a:04:32:4f:a3:e3:28:98:53:03:8d:88:c4:ae:
                    6c:b9:4b:58:e6:22:03:7a:56:3a:22:72:df:51:9d:
                    13:3c:91:e9:c7:71:88:e5:fb:2a:ce:64:1a:60:c0:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:E0:58:3D:81:93:EC:C2:7F:BE:0B:BC:45:56:E5:C1:06:7A:A1
            X509v3 Authority Key Identifier:
                keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:49:6e:34:74:b2:44:57:98:c9:0a:28:57:b2:a4:bc:1a:
         ab:f1:1a:31:35:dc:15:e3:62:d7:04:3b:17:eb:ee:7a:c6:5c:
         37:e4:29:7f:ea:ee:d9:77:f3:f4:37:0c:bd:c5:e0:30:05:75:
         88:b1:fb:ae:b2:bf:a4:32:ca:5d:b4:18:76:6f:0a:ef:3d:9a:
         29:67:98:4e:20:b3:8e:16:09:66:fb:8f:9b:ab:37:81:81:e9:
         66:5f:c1:ca:bc:0d:45:ac:5f:af:98:97:18:b7:c6:12:96:83:
         cf:e7:04:08:d6:23:72:6e:8f:a7:b1:18:2c:3c:fd:12:c8:29:
         cc:3e:a8:0f:b3:34:96:fc:80:ae:09:0d:5f:58:7d:15:54:eb:
         78:c5:cc:bb:97:2b:53:be:6b:bf:f5:e1:fd:38:a2:6e:27:46:
         28:b9:d8:9f:17:a6:1d:4a:02:de:61:2a:e2:87:ba:4b:2a:05:
         39:56:a3:fc:4f:b8:b6:78:bc:24:b4:16:63:54:99:c3:10:95:
         83:ea:b4:25:fe:2e:4f:f5:65:61:88:04:a6:3a:d3:b3:79:dd:
         ac:a9:7d:ad:71:d6:b8:c7:33:7d:77:46:37:ee:02:9e:89:26:
         21:e8:41:18:9d:73:d6:06:18:a0:03:99:f1:f6:b9:b1:ee:16:
         e1:b9:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:37:38 2024 by rpki-client on console-fra.rpki-client.org