Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File:                     HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier:          pbbuJK/KwTV3HDmYh1SKtShViacZpzpboHVUD8HtLOw=
Subject key identifier:   16:22:57:5F:C2:52:7E:33:6A:88:27:D8:27:DF:AE:E7:B0:48:98:C2
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer:       /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial:       018F4CB5124500754216301C8882B4C8E983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 07:01:26 +0000
Manifest this update:     Mon 06 May 2024 07:01:26 +0000
Manifest next update:     Tue 07 May 2024 07:01:26 +0000
Files and hashes:         1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: dyIn16CO30n1ooV4tYMB3RcIwqxWM16Ur77UjyIdAT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:12:45:00:75:42:16:30:1c:88:82:b4:c8:e9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
        Validity
            Not Before: May  6 07:01:26 2024 GMT
            Not After : May  7 07:01:26 2024 GMT
        Subject: CN=1622575fc2527e336a8827d827dfaee7b04898c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:4d:46:81:4f:dc:3d:81:e0:9e:0c:2b:96:
                    ec:c5:f9:4b:12:7d:61:a0:f6:b0:dc:13:fb:aa:e9:
                    31:c1:65:6b:a0:59:90:69:6b:22:d1:1d:cc:29:1e:
                    62:89:13:63:bc:6d:6a:0c:bd:48:5e:75:3e:2b:20:
                    3e:79:97:78:54:ab:59:55:c2:21:1e:ac:41:27:41:
                    a0:4a:da:75:84:47:fb:0c:6b:49:99:86:e8:fd:98:
                    48:66:04:79:0d:24:ad:6f:5a:ee:49:92:88:7e:4f:
                    28:c9:8d:de:51:c4:3d:97:fa:c1:81:c9:b8:e5:de:
                    b5:21:d3:01:83:27:b5:9e:71:ef:2e:96:44:90:a1:
                    56:6e:ae:8b:c2:76:85:8a:1b:17:ee:7d:e6:23:70:
                    d5:d6:e5:29:71:2f:c0:22:6d:09:31:92:7b:9a:ed:
                    39:b2:5a:b9:6f:99:10:4c:6c:53:70:80:0a:6b:17:
                    f2:33:ac:ab:c5:d0:34:05:d1:68:51:87:cd:d6:00:
                    85:f6:ff:61:fa:30:25:d8:27:d1:08:a9:c3:a9:6a:
                    66:a1:ff:35:c1:92:f6:35:ec:b1:8e:f6:ce:f2:4f:
                    00:5a:09:d3:b2:9d:01:1d:23:c8:82:b9:0a:22:98:
                    8a:2f:b1:68:e0:87:a1:02:20:54:73:2b:60:1d:bf:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:57:5F:C2:52:7E:33:6A:88:27:D8:27:DF:AE:E7:B0:48:98:C2
            X509v3 Authority Key Identifier:
                keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:b6:af:fd:54:9b:a4:83:81:d6:7a:aa:85:d4:56:be:c5:
         ec:c5:de:91:93:26:57:da:13:9c:10:31:58:eb:9f:d5:12:9d:
         f8:b6:09:8b:b8:f4:a9:98:ff:21:8e:46:97:28:19:9d:1f:f7:
         a2:d6:66:1c:9c:9e:ce:3a:8b:e1:62:c5:e7:7e:e0:85:f4:a0:
         1a:c0:f8:4e:ba:9d:c1:e7:2c:68:45:9c:87:64:87:4c:80:e0:
         a1:b0:06:3a:e5:a0:0e:6b:e0:3a:60:a5:2d:3a:31:d1:ba:30:
         c8:76:99:4d:69:89:fc:dd:99:47:3d:4a:b4:65:e0:5e:32:a9:
         de:9a:4e:78:5e:a6:57:b1:d5:3b:09:d0:32:52:f2:ff:fe:76:
         06:dc:13:e8:e0:56:1b:9d:1f:55:89:f8:cc:cf:9b:39:03:5b:
         29:d8:88:db:6f:01:26:2d:f2:ab:e6:0d:8e:1a:a6:01:49:52:
         7f:2f:e3:e7:e3:11:22:7c:81:52:b8:a6:98:36:3b:5e:c6:e5:
         35:f5:4b:d9:39:0a:54:93:e8:77:05:15:31:b3:4c:35:bc:91:
         57:3b:8a:ff:cb:03:dd:c1:af:be:5c:6a:e7:b2:f2:09:37:b1:
         34:fe:4f:a7:91:7a:51:bf:19:92:11:a1:64:5a:17:f5:07:ee:
         41:82:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:14:38 2024 by rpki-client on console-fra.rpki-client.org