Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          gBDuR242ghDeND+/SgtdH9ihCZJyApSvePQ+LfnGJP0=
Subject key identifier:   2F:4D:60:60:38:23:8A:80:1F:4E:40:FE:DE:BA:68:5D:37:4E:43:0A
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       018F87B6C9FFA4CC93AD81DEE81A775887EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          06BE
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: 26vdi3i3-coQYIKBdb4bkDvKg5c.roa (hash: 2KcMWsKD3i1cs5U/nnczaE0l7vEhxTZrXosDte6EWyA=)
                          2: 7rVjxosQnGiU5mwut_AFDi6Q8Vs.roa (hash: 582qOKWd2kg9kfGJt6Cr5ES3veuiAWpDTaXK9dyqv44=)
                          3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: xxn1zTG+gk+a05rsZujcV1uhkvnaDW/DKEwnWzXt5g4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c9:ff:a4:cc:93:ad:81:de:e8:1a:77:58:87:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=2f4d606038238a801f4e40fedeba685d374e430a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:79:73:9c:83:15:c2:28:b5:79:49:93:d3:
                    60:98:2e:b7:11:1d:49:d8:35:00:d4:28:47:50:8c:
                    ef:f1:82:b3:d9:2a:1d:e5:8e:bd:41:e2:9f:d2:96:
                    8c:63:93:eb:0e:dd:d1:9d:59:58:f2:e1:73:da:f8:
                    e0:f2:84:ee:b6:4c:0b:ae:8e:3c:df:7a:a2:11:8a:
                    1e:18:a1:fb:42:d8:ac:a1:68:67:3b:9b:6f:84:f1:
                    18:d1:5f:8e:5c:4d:ec:ea:df:16:67:53:53:e1:b5:
                    7d:47:e4:d0:ba:4c:42:0f:fb:64:17:f9:c9:2d:7f:
                    bf:f1:4f:7f:d6:4a:9a:25:df:42:7f:52:2b:93:4b:
                    60:27:bb:56:93:e9:15:0c:e6:a4:15:c5:01:2e:57:
                    e8:cd:b8:79:01:a9:13:d9:a2:af:87:95:b2:e6:68:
                    01:ff:22:dc:99:18:eb:e9:71:f4:68:95:b8:61:b8:
                    49:a2:ff:93:63:6c:30:1a:74:f9:e6:7f:d6:e3:49:
                    28:21:15:3b:e1:db:b0:74:12:9c:0f:03:45:27:d8:
                    bd:bb:40:ea:77:54:2d:e1:52:d4:bd:1a:66:1d:bf:
                    8c:0f:6a:e6:a4:09:3a:cb:92:3f:69:38:46:d8:92:
                    a2:a7:83:48:70:39:34:8d:74:18:a6:1c:9b:90:df:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4D:60:60:38:23:8A:80:1F:4E:40:FE:DE:BA:68:5D:37:4E:43:0A
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:e6:9a:b3:84:53:48:8b:67:fc:c6:1b:ab:2a:c1:5d:c5:
         0d:aa:75:4a:e4:f6:08:cf:f0:32:cd:09:8b:1c:3f:78:4c:10:
         b4:46:ab:9c:79:63:80:4c:be:a5:eb:fa:5d:19:43:da:aa:56:
         54:3f:09:ea:d3:65:f5:5f:4a:ac:ce:2e:cb:d5:db:4e:4a:d9:
         9b:b1:b4:89:6a:26:5e:ff:72:d0:bf:70:06:57:1e:be:d5:41:
         a4:43:48:4c:ad:73:ee:d8:b0:32:41:f3:9c:23:96:ab:ce:cb:
         f5:c9:da:b8:71:3a:3c:cc:d7:d7:e4:97:14:de:19:29:c5:20:
         07:e9:8e:e4:58:ef:b5:24:fe:81:4b:39:15:d8:d4:0e:0f:c2:
         9a:83:4a:10:ae:bc:c0:22:97:96:b8:4b:37:1e:6f:f4:08:a0:
         95:ae:54:9b:7e:28:ee:d2:b5:1b:53:58:98:9a:e6:ca:a7:e1:
         8b:c7:5a:50:3a:95:a9:5c:4d:5c:fd:06:74:5e:69:6a:38:0c:
         3a:7c:aa:4c:c7:5c:fb:d8:4f:9b:18:62:7e:9d:48:f8:a5:ff:
         12:fc:cd:61:8a:61:82:d9:f6:64:09:c0:2b:10:5a:f5:e6:a1:
         a3:d8:c4:06:c8:53:04:e0:af:96:38:c4:6a:6b:bc:9f:dd:84:
         68:ad:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:36:36 2024 by rpki-client on console-fra.rpki-client.org