Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File:                     hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier:          OOvE9qomsQ1l5QE7l7MJwDIqQ08YCC3ehxxRlboHKME=
Subject key identifier:   90:44:90:37:B8:8F:9E:4C:25:9B:AF:EB:DF:6C:43:5E:F4:CC:80:8C
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer:       /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial:       0191FB22F1FB20EFAC4B08215E6D0F3C3B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number:          F0
Signing time:             Mon 16 Sep 2024 14:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:56 +0000
Files and hashes:         1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: qg14sfPJDr0VW04ZGWl9FvV2W9/XXLPu44YaA4O30Zs=)
                          2: oittcbGIy7t9NUtqwLKIUNiePkE.roa (hash: kb1BMlgbCXeUOmCPEaX7Zfkuk1RGwVF/brX384Ww3bc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:f1:fb:20:ef:ac:4b:08:21:5e:6d:0f:3c:3b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
        Validity
            Not Before: Sep 16 14:00:56 2024 GMT
            Not After : Sep 17 14:00:56 2024 GMT
        Subject: CN=90449037b88f9e4c259bafebdf6c435ef4cc808c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:21:6e:49:e8:f3:f7:2b:1d:88:30:16:f6:
                    8f:93:93:44:05:0d:f8:47:72:a6:52:6a:f3:8b:34:
                    c2:5d:7b:18:5e:aa:45:db:b3:7c:14:c6:5c:a8:54:
                    7d:72:5b:8e:31:8f:ae:76:30:2a:40:2e:a1:cd:85:
                    39:b9:a5:10:67:04:11:20:e6:64:d0:29:ac:e7:7e:
                    6e:19:d2:86:30:da:ff:29:29:e4:8b:06:b9:11:2d:
                    53:1b:25:59:bc:7f:bd:73:50:d6:a7:6f:8e:ed:97:
                    27:e4:c3:d6:3f:87:44:f1:37:7f:8c:11:40:f4:13:
                    c9:96:ee:b9:4f:9d:97:58:8a:e8:8a:cf:7a:42:11:
                    de:c0:9b:81:62:e0:7b:8f:bc:aa:23:ab:c9:c3:d2:
                    3e:05:08:26:02:b6:dd:e8:26:c3:7c:0c:fb:4e:2f:
                    d3:7a:a8:8e:a6:1c:f6:b2:af:10:7e:04:89:46:eb:
                    e0:08:84:a2:3e:d1:18:e6:d2:65:08:46:96:2b:9d:
                    54:44:fe:e5:2f:66:98:92:5a:75:89:e2:96:a3:22:
                    08:61:fe:fc:1b:0d:a6:ee:97:03:0b:b6:3c:68:a5:
                    d4:08:67:ac:21:55:02:c4:28:ec:48:2d:f1:a4:71:
                    d9:d8:f7:d0:58:81:1d:24:2c:27:d1:95:dc:76:9b:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:90:37:B8:8F:9E:4C:25:9B:AF:EB:DF:6C:43:5E:F4:CC:80:8C
            X509v3 Authority Key Identifier:
                keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c9:5d:25:91:1e:89:18:e5:d1:de:ab:26:90:0c:cc:50:63:
         a4:fa:41:92:8c:12:d1:b6:34:e2:a2:55:58:93:17:d5:57:28:
         7e:9f:64:ba:1f:7e:10:2b:0c:5f:50:65:e8:a1:c5:80:ab:ac:
         f8:66:fe:a9:2c:e6:b2:c4:22:4b:5d:bb:a9:b5:77:df:64:6e:
         d3:fd:41:7e:25:b0:5d:b6:47:e0:be:2a:31:8e:25:9c:c6:31:
         c8:cb:14:09:de:4e:29:60:9a:1f:3d:91:dd:f3:9f:a8:1e:b8:
         09:b4:30:ea:85:1c:3f:a8:67:ed:3f:76:2e:94:71:8f:c0:38:
         ad:e8:45:aa:e1:9b:76:12:6e:78:8d:ef:3a:92:08:07:23:d5:
         ed:c4:fa:77:2b:1d:c0:f5:c5:15:14:24:bc:dc:ee:d2:79:36:
         f9:b3:fc:b9:4d:8c:46:27:da:dc:d6:0b:1b:8d:54:2e:8f:df:
         ab:d4:c0:20:01:6e:d4:ec:d3:11:71:da:1f:f5:d1:09:be:e2:
         cb:41:d8:8e:8e:65:cf:99:36:1a:da:16:7b:6d:74:1d:f8:e0:
         6c:1e:16:99:3e:35:54:73:0d:39:bc:37:35:05:6d:ae:2b:3d:
         26:ed:a1:fc:19:de:c0:8f:13:7b:f7:bd:06:5f:22:e2:db:d2:
         a3:6e:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:31:08 2024 by rpki-client on console-ams.rpki-client.org