Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File:                     HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier:          m9SFkAUkx91dGLToQHfP+JD3VtWY6WfsiQNUqueeSiQ=
Subject key identifier:   E5:C7:1A:1E:87:D8:51:D5:2C:17:1F:0B:13:47:F2:2C:57:FA:A3:71
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer:       /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial:       018F3588123970CF7DEFD525CC3E8DF2351E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number:          0482
Signing time:             Wed 01 May 2024 19:01:00 +0000
Manifest this update:     Wed 01 May 2024 19:01:00 +0000
Manifest next update:     Thu 02 May 2024 19:01:00 +0000
Files and hashes:         1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: B+YjngdnfZtUsZC8s5ELHa9TGIgYniJfJGUqizuV0Ao=)
                          2: rIGqTQFINwtepSqKiJyhSiCMU8w.roa (hash: +7AZK/s9uGfTv5lAhKQMc8zr3SHw0nUVoVFHfx5Fv0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:12:39:70:cf:7d:ef:d5:25:cc:3e:8d:f2:35:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
        Validity
            Not Before: May  1 19:01:00 2024 GMT
            Not After : May  2 19:01:00 2024 GMT
        Subject: CN=e5c71a1e87d851d52c171f0b1347f22c57faa371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:3d:f7:8c:5a:ed:f5:30:90:a4:c2:20:6b:
                    43:b1:85:78:57:f2:51:fa:95:fc:95:58:e6:6a:00:
                    02:b0:d5:5e:2a:3f:4c:95:e3:e6:73:20:ae:b8:95:
                    fe:50:08:43:cc:4b:f4:c5:7a:3b:47:b9:22:ab:c6:
                    df:50:e0:47:82:44:f7:6a:a8:4e:c6:d7:9e:aa:57:
                    14:75:88:bb:c7:0d:da:d6:3a:70:0d:81:28:f4:70:
                    69:28:0c:c1:42:a4:c4:78:a0:12:18:14:ad:2b:a5:
                    4f:22:60:d3:1d:c2:36:4f:91:5a:4a:53:5b:5d:79:
                    1e:78:97:ba:98:e6:7f:bf:f9:7f:8a:65:e9:a9:c7:
                    c0:22:87:3a:ca:5f:af:73:2e:fd:4e:db:8c:7f:65:
                    98:aa:13:ba:2b:ae:a6:d9:28:cf:b5:47:b1:1a:d8:
                    f7:fe:17:41:96:6e:a3:00:87:b2:7c:97:e1:58:28:
                    de:47:8b:32:61:35:9b:c9:e6:46:65:ac:af:bb:52:
                    88:53:6a:94:13:9c:ca:be:ab:60:9f:23:89:cc:1c:
                    27:d1:2e:dc:2b:d7:76:dc:f8:12:d1:c7:52:fe:1d:
                    3e:05:8a:2e:60:36:f6:e5:89:4e:50:8c:d4:44:65:
                    a5:2a:39:a6:ea:0c:aa:55:df:23:4f:9f:da:5a:7f:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:1A:1E:87:D8:51:D5:2C:17:1F:0B:13:47:F2:2C:57:FA:A3:71
            X509v3 Authority Key Identifier:
                keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:8e:4c:a0:6e:db:af:f6:24:32:f8:5f:c1:1a:fc:19:c8:
         27:0a:6e:21:31:c8:27:e0:42:37:3b:86:f8:95:58:c8:51:90:
         7c:86:10:95:b7:32:4b:0c:83:97:82:af:96:98:c4:ff:4d:a5:
         a6:18:c7:c5:37:90:35:a1:c5:ad:c1:0b:f9:fd:ef:a4:9c:76:
         66:f2:3b:04:b7:ee:56:53:db:32:eb:ba:81:30:8c:84:7a:bb:
         42:f1:63:fb:70:1a:60:bc:50:ec:52:10:e3:2d:e2:c7:2c:66:
         73:2c:cc:3d:67:df:db:7b:44:08:fa:28:9f:bf:7e:48:9f:08:
         9e:9b:7a:19:21:ee:19:47:ab:07:cb:3d:2b:c6:e1:e9:6e:41:
         f6:56:21:cc:e1:10:85:7b:79:1e:fa:fd:42:12:2e:76:10:d1:
         9d:d5:f8:fd:d6:e6:18:f5:19:f3:9e:88:9b:6b:44:e3:5e:9f:
         96:72:4c:03:2c:49:6d:8e:29:ba:88:b9:68:ef:15:c6:70:67:
         fa:2b:4f:c1:08:b3:08:f7:72:5d:59:90:5b:7b:05:04:4a:ef:
         af:f8:3a:0c:c4:12:03:43:88:c8:0a:27:4c:e2:d9:7c:1b:ae:
         f8:25:0e:95:0a:42:bb:af:6c:c5:07:db:67:6a:94:06:d0:b8:
         05:cc:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:09:01 2024 by rpki-client on console-fra.rpki-client.org