Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File:                     HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier:          MWm5aFUbkKuF7g+c+PgrYvCXSE2vrbGT7ip3Z/J15mc=
Subject key identifier:   94:58:E9:C0:48:2B:26:3D:84:DE:73:0E:A5:4E:11:E1:C4:03:9E:89
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer:       /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial:       018F362D5E2186A65DB3A37E38967B90E33E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number:          08DD
Signing time:             Wed 01 May 2024 22:01:33 +0000
Manifest this update:     Wed 01 May 2024 22:01:33 +0000
Manifest next update:     Thu 02 May 2024 22:01:33 +0000
Files and hashes:         1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: hRU+wbq5fziFuEe13FuR3Xqw8jVhBYRj/U/T1hcAyg4=)
                          2: QBpqlWvc3yb35mRLTb_pFbzXRVw.roa (hash: z+CCvUY9oDoFBNK+B2q1D/oBzzvbXKBlkcn7BrRbfZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:5e:21:86:a6:5d:b3:a3:7e:38:96:7b:90:e3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
        Validity
            Not Before: May  1 22:01:33 2024 GMT
            Not After : May  2 22:01:33 2024 GMT
        Subject: CN=9458e9c0482b263d84de730ea54e11e1c4039e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:17:f1:15:bb:97:26:b6:60:35:60:bf:d5:
                    15:68:ef:fd:c8:ac:19:b6:96:72:64:5a:19:61:12:
                    66:03:e4:16:74:8d:fb:2e:45:cc:08:2d:73:40:36:
                    53:c6:b7:e2:f8:21:86:2a:fa:12:d9:7d:4f:0c:f6:
                    f8:58:ba:65:5b:01:9d:ad:6a:35:a7:9f:a3:66:0c:
                    d6:a2:50:00:17:34:02:9e:ce:35:76:a1:de:e2:42:
                    a2:bd:07:71:55:f2:b0:64:6b:39:16:34:90:da:2a:
                    21:15:28:2b:a3:b4:03:a2:79:de:ca:e0:d9:2f:d2:
                    c5:d5:b9:5a:a2:4e:26:fb:7b:95:fd:ee:01:ab:6b:
                    9a:94:4c:1c:ea:e1:6b:21:8f:1b:a2:be:2f:08:0c:
                    06:3e:06:56:dc:05:4d:9f:e0:4f:36:bc:25:46:9d:
                    03:0e:4b:11:1e:8f:c0:2c:ab:9b:d2:d3:7a:5d:4a:
                    5d:ef:45:2c:a5:28:a6:6d:e2:90:bf:67:55:28:3c:
                    94:9b:27:55:e8:fd:7c:67:81:01:a0:42:85:da:2a:
                    47:ac:9c:df:b8:8a:d8:19:90:ba:ff:36:59:75:94:
                    30:3f:37:1c:45:a9:fc:be:e7:11:83:82:7b:12:11:
                    ea:37:a2:f6:e7:7e:62:18:98:3d:f8:f5:07:98:fa:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:E9:C0:48:2B:26:3D:84:DE:73:0E:A5:4E:11:E1:C4:03:9E:89
            X509v3 Authority Key Identifier:
                keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:55:0e:56:82:2a:f1:a4:9f:96:d5:7a:13:f4:84:59:dd:
         d7:67:53:f3:b7:db:82:0c:a0:ea:f0:cb:39:76:b4:84:f5:fa:
         63:ec:11:1a:cb:9a:c7:e0:1d:0c:00:8c:81:dd:0f:6f:eb:0a:
         8e:7c:6c:e3:12:aa:3b:bd:97:ca:e6:85:0e:de:5d:60:70:e7:
         a1:03:6b:9c:9b:2a:eb:22:14:ca:8a:e2:01:1f:01:ac:b1:ed:
         a1:01:bd:7e:88:fe:c0:7b:c8:58:41:69:b7:0f:54:b1:c9:0a:
         8f:41:73:79:ff:81:d0:36:0e:5d:b8:54:dc:75:40:bb:97:93:
         41:a7:8a:62:ac:51:11:2f:ef:f9:54:bc:cc:6b:19:b9:ba:59:
         a6:eb:d5:cf:17:31:e7:2a:18:7d:5a:3e:87:2d:21:69:24:ba:
         35:10:7a:a2:17:84:fc:fb:d8:ba:66:d8:75:33:80:ec:2f:52:
         4f:de:6c:71:0f:ea:79:78:fe:5b:8e:f8:04:f1:33:01:74:88:
         11:a9:ca:a3:0b:d3:90:23:53:9d:15:9a:26:bf:bc:6e:4a:74:
         fa:5a:4c:ab:a2:41:ae:0f:1f:d9:e3:85:87:1b:49:ae:24:d3:
         0d:8b:d9:18:bc:13:80:e2:8e:bf:c9:e8:5a:c8:7e:44:d6:b2:
         7c:4a:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:46:17 2024 by rpki-client on console-ams.rpki-client.org