Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
File:                     HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json)
Hash identifier:          dXMTu+nztOoCbRSvefCpn4Wce+LEBu8svUMcTDhjCZM=
Subject key identifier:   ED:75:D2:F2:9D:5A:09:E1:95:56:8D:F7:E2:49:99:E1:D3:DE:EE:70
Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Certificate issuer:       /CN=1f390af833d7d4269042c249bcf49648572095b6
Certificate serial:       018F381BFF4DC6B36A634527DB6C606BB514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
Manifest number:          0BEE
Signing time:             Thu 02 May 2024 07:01:49 +0000
Manifest this update:     Thu 02 May 2024 07:01:49 +0000
Manifest next update:     Fri 03 May 2024 07:01:49 +0000
Files and hashes:         1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: hW+KIzuHzKZyHDsjKseHo8GkNFKF4bbmY6IT88iMAbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:ff:4d:c6:b3:6a:63:45:27:db:6c:60:6b:b5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6
        Validity
            Not Before: May  2 07:01:49 2024 GMT
            Not After : May  3 07:01:49 2024 GMT
        Subject: CN=ed75d2f29d5a09e195568df7e24999e1d3deee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:21:44:b5:6d:53:d2:8d:a0:ce:df:22:f4:
                    64:70:da:6b:db:6e:85:56:df:59:fc:20:6a:ae:3c:
                    70:6f:e5:f7:f1:38:95:a1:01:3b:f8:49:e0:db:5a:
                    15:62:3f:62:e4:ef:e8:9c:4f:1c:7d:45:e1:31:9f:
                    d4:b2:ed:bb:1a:e0:22:c4:64:62:58:42:83:11:d7:
                    b3:cf:84:51:33:52:0e:05:0f:58:98:eb:1d:55:02:
                    d6:7c:a2:77:49:03:76:31:39:1e:54:7f:dd:33:60:
                    17:c1:53:bf:24:4f:b8:31:30:bd:8c:ce:68:08:fe:
                    18:e0:f8:8b:cc:30:7c:42:92:7f:91:c2:5d:ee:20:
                    50:8b:60:cd:70:b4:00:94:9c:8f:53:32:9b:23:fd:
                    e3:39:18:be:67:92:58:25:ef:a4:85:7a:cb:06:62:
                    0e:94:80:70:eb:22:5c:f0:6d:d1:68:c5:ae:21:cc:
                    7d:d9:d8:17:7f:8d:34:59:bd:9b:4c:50:cc:97:f1:
                    32:77:8e:67:83:e2:87:e6:e0:a1:27:0e:6a:81:b4:
                    c3:99:80:37:2f:d7:e0:14:3d:bd:10:68:39:38:af:
                    1b:13:9e:a0:b3:86:73:e1:f6:2d:2a:ca:93:26:c6:
                    09:37:64:47:bf:32:66:0d:34:36:c7:9e:b5:c8:be:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:75:D2:F2:9D:5A:09:E1:95:56:8D:F7:E2:49:99:E1:D3:DE:EE:70
            X509v3 Authority Key Identifier:
                keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:7a:22:35:57:fb:63:c2:6f:c1:6d:08:3c:f3:f0:f6:ae:
         ac:c4:30:b3:87:9e:a4:c6:d3:ce:18:5e:18:61:e8:28:4e:ad:
         2d:3a:45:61:34:7f:32:c2:2c:06:b0:9a:b3:78:39:35:16:95:
         ec:af:40:18:88:9f:a5:77:f5:ff:c0:17:10:47:9e:69:6a:3e:
         23:28:47:9d:79:ff:9c:0d:d5:4a:94:a0:b1:a4:b1:53:aa:2b:
         a2:94:8f:bd:9d:8a:1d:4d:3f:dd:59:cd:63:22:f5:be:68:94:
         5c:e1:09:5f:e1:25:48:1a:56:bf:16:db:ca:11:b9:e8:dd:af:
         f4:b6:d0:b7:74:61:4a:55:1f:63:08:ea:90:b0:9f:d6:a0:df:
         3a:33:da:e4:f7:d1:0c:30:95:03:92:e2:c7:a2:31:a3:0b:b0:
         0c:b7:ce:95:ca:e0:61:3c:b6:0d:9b:c2:d4:05:7f:99:f4:b2:
         75:13:ac:c1:11:3c:f0:67:21:69:6c:04:d3:b3:92:f0:3e:f2:
         d4:25:35:1b:df:de:a2:3e:2f:78:2b:17:87:0a:39:97:3d:52:
         09:41:94:26:dd:30:72:71:d2:8e:67:28:01:10:f5:c8:83:a6:
         f3:60:d1:d1:60:b7:b9:f2:53:09:4f:e3:70:1f:b6:a4:cc:7d:
         85:ac:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:53:17 2024 by rpki-client on console-ams.rpki-client.org