Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
File:                     HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json)
Hash identifier:          cSMid8izLt3stplGeii7tsIjvdBbb/SPKO/3f9B+wEc=
Subject key identifier:   DD:D1:D3:06:A4:2C:F0:2A:D3:3F:44:56:C7:11:E5:B8:6E:C2:B4:25
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       018F8824456C4001AF25697AA7477E182CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
Manifest number:          BA
Signing time:             Fri 17 May 2024 20:00:29 +0000
Manifest this update:     Fri 17 May 2024 20:00:29 +0000
Manifest next update:     Sat 18 May 2024 20:00:29 +0000
Files and hashes:         1: 2MNB-1b8JXxvHmBNxrN5gXYe4G4.roa (hash: 5J1aH3zLH6ZDHBewFhOjJBzpuFwAvbrdvx6V6OPQ0zI=)
                          2: 519k9f5y1H3bYrkrJB4BIzDKvbo.roa (hash: xJFxcxJ5Z/5MkOWiYdUe9xiWosCtYZ2+sg0BuK2I0NI=)
                          3: APTOy1F_afTC4xuqPHh4RPNafJI.roa (hash: s0FCu892VvkTE8UjctcWcg/2QTvNBI2KGC+hAOXFYk0=)
                          4: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: 08ya71OOpAz4UU0lZbeGzhamqlhpiOtz/6vFSGWSQvQ=)
                          5: HTKG2RI9XItMmhl6dFmyB9LeZeU.roa (hash: CMXlOAyLXyo+ujd7eGoG9sQUQYsjXoSgC2dX/2P5IP8=)
                          6: bzPmXuaiTj37vHd0pjUBmFU1If4.roa (hash: D/7/XIJkILMvqhQzzfmhV4xY9bwiolycvClxmPfNvXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:45:6c:40:01:af:25:69:7a:a7:47:7e:18:2c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: May 17 20:00:29 2024 GMT
            Not After : May 18 20:00:29 2024 GMT
        Subject: CN=ddd1d306a42cf02ad33f4456c711e5b86ec2b425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:b3:b7:a6:a0:33:a6:62:85:6a:67:1a:7a:
                    d4:1c:40:b6:7f:d0:42:bf:c3:a7:20:8d:63:9f:0c:
                    62:e0:e6:55:e9:a4:2f:91:f1:70:5d:c7:0e:cf:3a:
                    5d:c0:61:4b:81:4c:4b:3f:aa:4a:06:2a:60:50:3a:
                    1f:ad:e5:99:b0:5f:87:6c:80:8b:a7:3b:9d:1b:ff:
                    29:ec:fb:f4:7c:7c:0c:60:e5:c5:12:1f:f5:6d:a3:
                    0d:40:1f:8f:95:4f:0c:58:12:a4:93:c3:96:77:6c:
                    6b:10:10:4f:67:5f:48:9d:ec:f6:56:e1:6e:ab:de:
                    46:28:60:e8:b6:58:19:1d:a8:cd:58:f6:92:99:e4:
                    8e:b3:11:49:f0:8e:ad:a2:7b:eb:02:1f:60:69:2f:
                    a4:07:bc:e9:35:1e:3f:b3:bf:80:c3:47:13:af:6e:
                    f1:12:7d:36:9b:24:aa:9e:32:6e:88:24:1d:32:c1:
                    a3:83:90:87:76:2d:a9:51:11:3f:88:18:37:8e:3b:
                    3a:b1:df:94:07:2c:13:55:1e:36:79:2d:43:e7:6f:
                    62:f1:79:af:9d:32:df:f1:83:49:cb:d5:02:a2:62:
                    04:4d:8b:cf:c5:53:ee:67:fb:68:cd:28:3a:50:01:
                    53:70:4d:be:8f:93:33:54:3e:72:2f:1b:22:37:07:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:D3:06:A4:2C:F0:2A:D3:3F:44:56:C7:11:E5:B8:6E:C2:B4:25
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4c:18:08:03:00:2c:1a:53:00:2e:80:b6:a4:03:30:dc:13:
         22:72:a8:a1:ca:3c:b8:dd:88:03:ea:87:b6:4f:97:db:87:f9:
         16:80:0f:f6:2c:2d:40:47:ec:dd:61:b0:cc:34:7c:1b:03:81:
         cd:c7:24:18:cf:4d:00:b0:d3:43:b9:c1:0b:63:cd:53:81:54:
         16:39:a5:49:39:4a:2f:04:e6:09:e8:3d:21:a6:bd:ac:3c:f5:
         74:4f:50:64:07:3c:67:94:21:e1:d3:aa:ad:b1:53:82:5a:d9:
         8c:1d:ea:31:4d:d1:22:ad:aa:c2:4e:e7:c4:ae:8d:52:9d:3b:
         81:7e:6c:f1:65:47:cf:36:7f:9e:47:f6:d8:55:a0:4b:ae:7e:
         9b:80:b7:9f:86:b5:36:fb:35:ef:01:3e:6e:f3:04:18:61:2a:
         82:fb:d5:55:35:cc:c7:57:b3:91:66:26:b7:92:8c:3a:1d:29:
         7f:f4:c9:f1:5e:da:5c:ca:e1:0a:2a:46:a2:2b:d6:af:33:09:
         01:8e:41:87:5c:34:20:bd:e9:16:6e:99:1b:01:8f:47:3c:1b:
         55:2f:66:79:57:5f:d7:ab:64:c9:2a:33:ab:8e:70:84:ea:4c:
         5b:de:da:55:71:83:63:5b:da:cc:19:5e:48:18:35:18:90:88:
         4f:1f:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:20 2024 by rpki-client on console-ams.rpki-client.org