Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File:                     hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier:          fOu9EBjxm5kaJ9Sd7sMk6EMBUcQiJuEoHaoA0MySviw=
Subject key identifier:   0C:93:B4:63:63:4E:D9:FC:81:CC:19:CA:72:4D:11:05:0D:FD:CA:01
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer:       /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial:       0191FAEDA7CAFAB25D29526A1334D15C3114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number:          AD
Signing time:             Mon 16 Sep 2024 13:02:44 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:44 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:44 +0000
Files and hashes:         1: dF2wr9UcXhu-lbqQkIF2UewEc4M.roa (hash: p0WjVjzWZ2Om8SQwFYNVp17w6RrB0ndiAukojmjTqo0=)
                          2: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: qN/HQmQza//KIDLm2Olik99JadePkLYQEt6UKE7ZuNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:a7:ca:fa:b2:5d:29:52:6a:13:34:d1:5c:31:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
        Validity
            Not Before: Sep 16 13:02:44 2024 GMT
            Not After : Sep 17 13:02:44 2024 GMT
        Subject: CN=0c93b463634ed9fc81cc19ca724d11050dfdca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0b:bf:9e:b4:11:9a:2a:d4:b6:09:dc:96:68:
                    79:af:ff:70:03:35:24:d2:a9:f3:da:6b:88:76:1b:
                    09:1a:65:e4:12:10:0b:31:e1:33:9d:69:9d:2f:c0:
                    38:03:76:8d:a0:d5:f2:7c:5d:51:eb:a7:75:99:08:
                    33:3a:12:26:82:59:4f:57:40:6c:b5:c3:01:27:40:
                    a6:f2:b4:c4:a6:b2:4e:17:e1:9e:0d:cf:f7:2d:e7:
                    0f:ea:03:18:7d:e0:12:fb:80:35:50:62:a4:7b:6f:
                    4c:61:c8:9e:ea:91:6c:7c:53:af:ed:4c:95:8f:81:
                    b5:10:b2:96:03:a0:b5:14:44:9b:92:f5:aa:97:d9:
                    f8:97:6e:98:94:7d:9d:0f:c2:41:0e:ff:75:e2:90:
                    e4:14:62:cb:3d:f2:c0:d6:50:27:0e:07:00:f1:8c:
                    d1:90:e3:70:ff:d7:d2:08:41:24:65:9d:e0:7e:93:
                    31:60:e8:e0:ed:fd:c5:05:33:1f:87:de:3b:e6:18:
                    ea:19:26:c2:86:da:6c:30:27:e0:50:64:7f:d2:6f:
                    db:fd:9a:28:83:a1:30:28:a1:77:59:4b:d5:e8:30:
                    30:96:d9:bc:a6:4c:2e:51:55:d5:fe:00:cc:a4:05:
                    51:0c:7b:c3:a2:0e:f2:00:9b:74:6c:05:ae:31:fd:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:B4:63:63:4E:D9:FC:81:CC:19:CA:72:4D:11:05:0D:FD:CA:01
            X509v3 Authority Key Identifier:
                keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:c2:b5:a1:c9:16:04:08:b1:0d:e7:05:90:60:a7:23:71:
         65:0f:b3:52:bb:4d:17:92:03:b3:1f:6b:45:1b:8c:cb:e7:30:
         29:7d:ca:ce:e1:7c:a3:08:fc:09:31:33:7c:2e:05:30:bc:6f:
         c4:2f:ad:eb:9b:d4:33:b5:0f:fe:5f:19:81:b2:c9:67:55:76:
         49:c7:e5:6f:8f:0c:96:cb:e8:c9:bd:b7:80:4a:c1:bc:15:7a:
         82:02:f9:ab:94:46:6c:f5:58:9d:4c:b2:db:54:8c:5f:52:37:
         57:ee:c2:4e:9e:c3:9e:83:76:b8:dc:0d:29:75:e2:56:10:6b:
         2c:eb:63:c0:ab:4f:c3:a6:c7:a3:92:aa:42:53:b8:a5:d1:42:
         04:13:1d:cc:da:c8:94:5d:32:85:f0:1b:5d:98:87:ed:5d:54:
         17:60:8c:89:6f:db:bb:c3:df:8d:3d:01:62:75:71:43:3f:d5:
         f9:76:26:75:e1:95:df:c5:45:23:98:0d:f7:17:5f:b1:91:5f:
         af:4d:c0:2c:6f:01:a0:b4:1b:ac:83:e7:dd:d7:5b:15:61:81:
         9e:b0:68:51:18:2a:9e:6c:cd:67:6f:ff:62:7b:56:7d:8b:dc:
         a5:4d:ad:26:81:d3:f0:fb:55:7e:5f:71:da:6b:3a:ad:64:52:
         2b:77:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:31:24 2024 by rpki-client on console-ams.rpki-client.org