Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File:                     HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier:          AXechZEmTm2JzivJDsRVMYZlMhneaJdSojA0r/ZfiMc=
Subject key identifier:   E6:73:85:33:15:02:5A:5B:A9:A4:B7:A8:39:B7:DB:C6:81:EB:44:80
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer:       /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial:       019259C3E9F7F9A2396EEC4221B058C7962C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number:          1123
Signing time:             Fri 04 Oct 2024 23:01:04 +0000
Manifest this update:     Fri 04 Oct 2024 23:01:04 +0000
Manifest next update:     Sat 05 Oct 2024 23:01:04 +0000
Files and hashes:         1: 1-44KcdQB4ISUGAUGWmPDCOF2-lQ.roa (hash: pOEJ0+LNDdkOTKdta1N6mwCGsR+V4QSPQqTmNDo82QM=)
                          2: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: 8xhSvLbEwIre7an07/sMyjM1m5ItKMfRiX5OWNOvIX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Oct 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:59:c3:e9:f7:f9:a2:39:6e:ec:42:21:b0:58:c7:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
        Validity
            Not Before: Oct  4 23:01:04 2024 GMT
            Not After : Oct  5 23:01:04 2024 GMT
        Subject: CN=e673853315025a5ba9a4b7a839b7dbc681eb4480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:d0:38:10:63:ba:03:7f:60:11:7d:b4:d3:
                    95:c9:66:61:71:c2:d0:66:30:85:4d:a0:a1:f4:c0:
                    fc:9a:9a:7e:f2:60:2b:1a:e2:ea:17:28:b5:99:1b:
                    96:24:f9:95:ac:2d:81:81:d0:01:47:10:ae:5b:f3:
                    7b:98:7b:ec:71:32:51:f7:e5:82:15:f2:95:e5:0a:
                    df:2e:7a:3c:7e:63:23:a8:f1:cb:f7:f9:54:76:95:
                    f4:3a:2f:5b:17:2c:4d:86:a0:44:b7:63:71:ea:21:
                    8e:14:ea:ef:b1:02:f2:8d:43:2f:19:9a:d3:93:54:
                    f3:00:28:63:8c:7c:ff:13:45:76:95:36:69:6c:af:
                    a6:2d:12:15:81:00:8d:41:ec:33:84:67:da:ad:00:
                    5a:78:18:70:ab:61:5c:84:c8:71:c8:be:00:a8:54:
                    18:98:c8:00:db:53:a0:36:a0:30:c4:6e:11:02:e0:
                    b3:8c:e1:fe:03:37:46:27:e8:ba:d7:ad:79:57:19:
                    8b:17:04:65:18:f0:d2:ef:81:0d:53:70:d6:f9:e7:
                    4b:75:e9:a5:2a:26:95:42:cd:d8:74:d8:23:b5:7f:
                    b6:a6:b3:3c:00:30:47:46:b9:69:8d:40:a7:d1:e4:
                    e5:6b:38:4c:e3:a5:b7:be:cd:26:0e:3c:14:8a:c8:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:73:85:33:15:02:5A:5B:A9:A4:B7:A8:39:B7:DB:C6:81:EB:44:80
            X509v3 Authority Key Identifier:
                keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a6:f4:d5:0a:28:57:1c:68:70:f6:67:40:99:cf:a0:d0:bb:
         0a:d9:94:4a:30:1a:f8:be:5f:15:69:ca:4e:38:47:ad:8a:f6:
         48:a8:88:ce:1b:93:e8:88:69:97:e9:08:a6:5e:41:4d:e5:bf:
         44:9c:97:f6:53:7f:dc:ad:ee:6f:07:b9:93:8f:60:30:37:34:
         58:b7:cb:e5:ec:c6:29:14:f9:60:d2:e0:3d:22:81:9a:7c:53:
         2f:c7:af:da:ae:de:46:86:c0:ca:17:27:65:aa:6a:3d:c7:f8:
         01:f6:51:1c:8f:49:76:59:79:90:af:18:ff:7c:e4:30:59:c4:
         a9:7f:45:e4:38:2b:04:8b:9f:f2:a7:1e:07:dd:19:e5:fe:5a:
         b6:88:7c:4f:2f:13:2c:9f:70:0b:dd:b2:2d:17:28:92:da:80:
         99:22:39:84:f8:25:3b:a5:dc:ea:57:02:55:7b:12:37:05:25:
         5e:9e:4a:b6:78:a7:06:e0:92:11:4c:48:4f:98:f2:31:46:88:
         94:1e:31:bb:5e:9c:3d:1b:79:62:b3:cf:0f:0d:ea:93:05:e2:
         0d:fc:76:ac:1a:b1:5d:12:4d:c5:91:1b:41:83:89:e5:a0:c0:
         76:53:43:1f:8b:0c:8b:87:a0:32:5d:5a:1f:5a:2a:39:3d:37:
         6f:8c:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 00:14:06 2024 by rpki-client on console-ams.rpki-client.org