Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          cWFsLEsuuJC/CmuHFHTZqR7jkrFJLQubVDIwGBv0dCM=
Subject key identifier:   9A:07:28:A1:38:CA:42:76:37:75:AA:DE:28:BE:4A:CE:F1:08:C2:15
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       018F3DE80E0E4966E0AE0646E0CBCE1B9A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          10E4
Signing time:             Fri 03 May 2024 10:02:49 +0000
Manifest this update:     Fri 03 May 2024 10:02:49 +0000
Manifest next update:     Sat 04 May 2024 10:02:49 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: ujvHtVEVwHXOJkR/YP56xKhaeHncKi0Q93yrgkrH3NI=)
                          2: l9OJUjyRFj7FF9b7Vpagm8G6ekc.roa (hash: VTviF7/0qzxvU5tFnN2NW92ha52FASHmwaSQCKE0T3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:0e:0e:49:66:e0:ae:06:46:e0:cb:ce:1b:9a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: May  3 10:02:49 2024 GMT
            Not After : May  4 10:02:49 2024 GMT
        Subject: CN=9a0728a138ca42763775aade28be4acef108c215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:50:1a:82:26:22:55:ad:c7:ec:2b:45:d0:
                    8a:44:28:09:02:44:c4:c3:4c:ab:a6:d2:df:23:79:
                    87:d9:b5:71:5b:93:94:63:84:d7:db:bb:34:db:9e:
                    7a:31:d0:06:ca:91:b6:66:fe:a7:22:3b:c2:65:2f:
                    21:d5:db:62:7c:cf:da:d9:38:38:6f:02:dd:1d:e3:
                    c0:16:84:f0:e4:31:d6:6d:54:bb:7b:5c:85:3f:14:
                    02:32:81:16:a2:2f:dc:cb:0f:87:66:a1:13:2b:e6:
                    f2:25:7b:b7:b5:4f:71:df:90:06:05:f6:75:4e:f4:
                    ec:46:2e:0f:f9:8a:6d:85:49:19:45:67:3e:49:30:
                    e2:3e:83:f5:e7:d8:83:40:c9:d6:8e:cf:3f:27:43:
                    c0:2c:38:cc:ff:f8:5b:06:0f:14:67:69:da:7f:52:
                    b6:08:88:b0:1c:09:c6:a2:66:30:52:31:78:e2:f1:
                    35:37:43:e0:69:24:12:41:13:93:e7:d3:98:9d:04:
                    03:34:64:d0:eb:ad:da:9e:fd:a7:45:05:ed:39:f4:
                    6e:c5:34:d1:53:26:b5:41:d4:c0:98:f3:6b:26:51:
                    68:06:4f:e0:9a:93:21:7c:40:e2:55:68:8b:4a:68:
                    9b:86:c0:78:e2:ee:62:09:a0:2d:b5:b4:33:2e:65:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:28:A1:38:CA:42:76:37:75:AA:DE:28:BE:4A:CE:F1:08:C2:15
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:e3:6f:34:4c:bb:c1:69:e2:08:07:b6:f2:6b:ce:94:85:
         d5:e3:60:ce:63:4c:ba:f8:de:13:47:de:c2:e9:12:51:c4:79:
         35:df:cd:3c:00:ef:9c:31:ec:4e:10:72:d1:4f:b0:6a:49:3d:
         b5:a6:9d:ca:0a:46:d5:a1:d4:8c:74:e0:65:01:58:f6:cf:67:
         ab:cb:0b:ad:95:cc:d9:13:dc:e8:48:dc:35:0d:5c:b2:a0:f5:
         bd:25:38:6a:94:39:7f:0b:17:3c:4f:ec:78:c7:43:63:53:58:
         8c:98:8d:7f:37:ae:70:4a:83:f9:87:68:4c:bb:0e:09:24:c2:
         b3:87:16:37:26:40:30:cb:9d:23:60:18:a3:5a:c0:fa:77:dc:
         00:42:83:93:49:e2:d4:e7:c2:6b:47:3a:31:e5:0e:9f:61:b7:
         f9:44:b9:c2:f6:8b:cd:47:fb:d5:f4:1e:eb:aa:7e:21:f2:52:
         8d:f7:88:dc:94:0b:28:91:19:0f:05:c7:c3:1c:d8:f7:d6:26:
         ec:de:16:34:06:08:94:f1:e3:0f:6d:64:f0:d6:af:97:a2:a2:
         6a:ff:e6:1e:e0:68:66:d9:8b:bf:6a:76:e4:ad:0c:9f:2a:0a:
         d8:40:18:2e:26:03:53:cd:a5:04:01:8c:78:cd:44:05:38:44:
         09:47:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:30:51 2024 by rpki-client on console-ams.rpki-client.org