Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
File:                     HEXicj05SBx47Uk3sxko6fYYqfc.mft (raw, json)
Hash identifier:          bcQjjmslgRRjbOSBd5avMcIof++4oOKBWNJDnkT4+B4=
Subject key identifier:   BD:26:C6:65:D8:D7:3B:BC:A0:75:C9:40:8C:DC:01:A0:B8:CF:FE:01
Authority key identifier: 1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
Certificate issuer:       /CN=1c45e2723d39481c78ed4937b31928e9f618a9f7
Certificate serial:       018F4D59987FFC640AC1614B6F972FBA074A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 10:01:08 +0000
Manifest this update:     Mon 06 May 2024 10:01:08 +0000
Manifest next update:     Tue 07 May 2024 10:01:08 +0000
Files and hashes:         1: HEXicj05SBx47Uk3sxko6fYYqfc.crl (hash: qeHvXM+1ZUVX8MKSmO2WDPa/M3YVQOXr0awpFWnVqK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:98:7f:fc:64:0a:c1:61:4b:6f:97:2f:ba:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c45e2723d39481c78ed4937b31928e9f618a9f7
        Validity
            Not Before: May  6 10:01:08 2024 GMT
            Not After : May  7 10:01:08 2024 GMT
        Subject: CN=bd26c665d8d73bbca075c9408cdc01a0b8cffe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:53:f7:e9:de:77:8f:5a:11:ab:ee:0f:ce:
                    f6:cb:b1:df:b3:cd:69:e2:2c:3d:00:85:8a:c0:07:
                    c0:ff:6d:05:85:f8:16:e0:b5:f0:cc:4c:8f:c3:0d:
                    be:97:3c:3f:5a:c0:24:a9:65:ad:37:01:5c:3a:12:
                    77:f4:50:28:ce:8d:25:8c:20:f9:6e:02:58:72:5f:
                    53:04:d3:5f:d1:86:39:11:f9:52:6b:f1:ae:db:86:
                    29:21:29:5b:59:43:4e:59:5d:20:1f:27:b2:d5:f6:
                    72:f7:f0:df:ee:82:92:30:0e:c4:a9:3f:10:fb:f8:
                    0a:57:b3:57:a9:1a:6a:0a:5f:8c:d7:b2:53:f7:df:
                    11:88:eb:bc:89:b6:7e:cc:cf:98:2a:42:3a:0e:20:
                    46:eb:77:2c:73:78:8d:18:dd:d1:ac:ac:2b:11:1b:
                    c8:5a:0f:8b:d0:9a:83:f1:a5:ed:96:7e:9e:dc:40:
                    d9:d4:29:93:c2:46:ef:bd:b1:d0:0e:0d:eb:34:78:
                    7f:f1:25:23:d3:24:77:91:30:4b:02:02:96:70:49:
                    6b:18:b6:90:2b:40:29:c0:9b:13:86:1e:97:2a:0e:
                    aa:14:94:64:59:f3:b7:85:03:c2:32:79:f3:0c:4c:
                    fc:e8:7a:3b:e8:11:85:14:ca:7f:e9:10:e4:09:df:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:C6:65:D8:D7:3B:BC:A0:75:C9:40:8C:DC:01:A0:B8:CF:FE:01
            X509v3 Authority Key Identifier:
                keyid:1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:72:84:0a:e0:a7:71:24:55:60:35:56:8c:1d:61:7a:6d:
         36:91:5a:54:94:48:cd:89:f6:44:3f:ce:28:ce:01:4f:40:6a:
         15:43:39:e4:a6:f1:03:8b:40:33:d8:c4:1a:a9:7e:26:e7:a5:
         2c:57:98:1d:63:53:3d:0c:f0:62:24:37:1c:62:3c:a5:4b:77:
         ad:56:fa:fa:c5:c5:c0:6c:c7:84:e7:b0:d6:a0:9a:74:5d:06:
         c6:3c:58:9c:8a:37:d2:02:39:5b:11:24:d2:73:d7:ff:1b:a9:
         32:21:18:19:22:98:a4:67:b7:82:85:d6:ba:05:d0:3e:8e:4f:
         be:bd:67:f6:86:11:98:b1:55:c7:92:55:23:f4:07:0a:78:df:
         29:46:e4:2d:a8:b1:3d:c5:f7:56:b0:25:49:a2:66:56:c8:ec:
         c8:78:ac:a6:01:db:90:60:3f:80:e0:42:67:4d:4f:cd:40:61:
         b2:79:2f:52:67:c0:23:02:89:09:56:c4:28:cc:17:4f:1b:a4:
         8f:13:a7:93:3c:cd:43:bc:2e:3c:7a:b4:bc:4c:cf:f8:d1:07:
         21:c6:9c:ed:37:f1:9c:06:10:a1:5f:98:68:96:fd:39:f6:bb:
         57:15:6b:b8:05:da:14:a5:d4:89:89:c5:c5:3b:e6:4b:70:f2:
         4e:9d:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:11:56 2024 by rpki-client on console-ams.rpki-client.org