Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File:                     HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier:          r8XSTIIVq4JsIClb/s34F7OLwGVw8+NcEi/wfd0De6Q=
Subject key identifier:   89:9C:43:2E:72:A3:7D:6C:6D:17:E0:0B:D0:2F:5B:21:3D:5A:7E:12
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer:       /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial:       018F8BCA53E4050330C39592D809A7AD51F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 13:00:43 +0000
Manifest this update:     Sat 18 May 2024 13:00:43 +0000
Manifest next update:     Sun 19 May 2024 13:00:43 +0000
Files and hashes:         1: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: Ntiyf2jkQtvTL2QEFnhRUoZNKT6FQ07dPqxCepbto7M=)
                          2: XqRC5G2oQzqgyxjNANBxj8BHSyE.roa (hash: 2y198b/KfGNRD+ETdPrwOwMG4AfNTui7dTXxIAzZIPk=)
                          3: YOz4HMcWA7pzh-HUhN3yKp6bYvE.roa (hash: aE8g9tWt8HPjwVpd7Twwyc6SDM/Gm+OUJiIsKMxmIhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:ca:53:e4:05:03:30:c3:95:92:d8:09:a7:ad:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
        Validity
            Not Before: May 18 13:00:43 2024 GMT
            Not After : May 19 13:00:43 2024 GMT
        Subject: CN=899c432e72a37d6c6d17e00bd02f5b213d5a7e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:e2:f9:dd:5a:d1:15:41:21:e1:45:39:98:
                    27:0f:ce:11:5a:b0:00:5e:7a:4c:7c:05:6b:72:0e:
                    ba:53:06:ca:0f:36:0d:e8:52:d6:a1:ab:2a:2a:34:
                    52:fd:9d:f5:9f:ed:18:b9:e1:e2:9e:78:bb:0f:64:
                    2e:fc:db:d0:a1:13:3c:e3:26:f1:71:9b:f3:b9:3c:
                    2c:f0:10:ea:d7:df:86:38:eb:2c:5e:44:a4:ee:eb:
                    8c:7e:c5:2a:06:7f:af:65:a8:71:13:a1:44:e0:9b:
                    dd:ac:7f:85:d6:40:cc:c3:10:31:38:65:ef:aa:4a:
                    6f:e1:30:d2:08:9c:24:14:ec:c4:1f:87:19:36:a1:
                    1c:e3:cb:d6:c5:fa:cf:5a:7c:67:0b:ba:6e:56:e0:
                    fd:d3:4d:f5:bf:53:55:3b:ab:ee:24:e0:1b:3e:fb:
                    e3:20:66:0e:b9:b6:48:eb:fd:95:77:b5:82:75:4a:
                    26:77:3b:d4:e9:01:75:6d:e7:fd:d1:f3:62:19:39:
                    aa:37:ec:31:df:c7:bb:ea:d2:b9:e5:04:38:03:ad:
                    78:99:e9:24:7f:17:d7:cd:01:8d:ec:26:1d:0e:df:
                    5c:bc:6a:3f:6d:eb:ed:89:d3:02:d8:3e:81:e6:42:
                    fd:a1:35:0f:cd:38:ca:d0:b4:9b:96:24:dc:d9:fd:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9C:43:2E:72:A3:7D:6C:6D:17:E0:0B:D0:2F:5B:21:3D:5A:7E:12
            X509v3 Authority Key Identifier:
                keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:0d:fb:ab:5d:d2:07:58:83:cd:a1:f2:b6:80:fa:a4:f0:
         98:ee:84:ca:7c:73:ff:cb:7e:cb:78:f6:69:6d:f4:be:1c:fc:
         7c:0b:06:99:35:18:cf:9a:13:4c:4b:42:b5:31:c1:98:6b:39:
         c7:71:b7:dd:07:00:11:d4:42:4b:2e:d8:e6:4a:bc:75:80:39:
         d3:11:4f:5d:60:40:5a:e6:99:9a:fa:e3:9b:f8:65:6d:62:9f:
         c0:26:be:56:05:38:8a:54:76:51:d3:f6:06:ac:7d:b5:51:ba:
         9a:8c:19:a2:71:89:44:75:3d:59:07:62:81:8e:46:0f:93:b0:
         de:9f:2c:1d:0b:4e:56:dc:32:ec:00:8f:29:7c:d1:73:99:f7:
         27:9e:52:02:5d:55:f9:79:b6:7a:75:72:00:e6:b9:fe:12:fd:
         76:79:d0:f9:e0:81:4a:79:a1:15:a3:c5:9c:16:2e:a5:3c:df:
         0e:5a:73:9c:1a:e8:7c:46:64:ba:eb:70:2b:65:11:7d:fa:64:
         3f:62:bd:a4:26:c9:18:73:6e:5b:2e:6a:72:23:9e:15:72:72:
         3b:13:92:69:45:a4:62:8c:f3:65:d5:56:2e:f8:c3:c5:44:4e:
         d7:3b:d8:8b:e6:39:a1:fb:93:f8:68:91:24:2c:17:a3:3f:6d:
         b7:ad:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:13:24 2024 by rpki-client on console-ams.rpki-client.org