Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
File:                     hlonCgsIptsPlMdDV96OSC1944Y.mft (raw, json)
Hash identifier:          Hy5w4Sfs5obcr0aEsMCoKgCzOraFA/YRP3UVjJBH+dk=
Subject key identifier:   B1:2F:8C:53:65:00:80:BA:09:BB:D7:03:5D:27:26:0E:65:9F:CD:23
Authority key identifier: 86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
Certificate issuer:       /CN=865a270a0b08a6db0f94c74357de8e482d7de386
Certificate serial:       018F87ED6323A9D9EB657BF9891793A1B8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
Manifest number:          034A
Signing time:             Fri 17 May 2024 19:00:32 +0000
Manifest this update:     Fri 17 May 2024 19:00:32 +0000
Manifest next update:     Sat 18 May 2024 19:00:32 +0000
Files and hashes:         1: hlonCgsIptsPlMdDV96OSC1944Y.crl (hash: L82s+Hi1/eDgNm0gY5H6o8UuwB5j8li0dKOffbcuqU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:63:23:a9:d9:eb:65:7b:f9:89:17:93:a1:b8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865a270a0b08a6db0f94c74357de8e482d7de386
        Validity
            Not Before: May 17 19:00:32 2024 GMT
            Not After : May 18 19:00:32 2024 GMT
        Subject: CN=b12f8c53650080ba09bbd7035d27260e659fcd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:e3:57:08:92:1e:c3:92:83:c3:a2:4f:f2:
                    93:0b:9b:87:2c:51:9b:77:d0:65:fc:fb:ba:b2:d7:
                    ed:8e:10:97:94:98:ea:35:34:b7:54:74:5a:ab:5a:
                    cb:a5:93:ba:b3:67:99:56:c6:73:1f:b8:86:e2:08:
                    ad:05:dd:63:6d:b9:92:c4:fe:ef:f5:a0:ce:89:d4:
                    08:f3:f6:26:d8:8a:3c:3b:05:05:17:e6:cb:a4:85:
                    1b:35:e7:ce:8c:7f:37:3f:e4:69:e3:da:ef:a4:86:
                    b5:e5:4a:62:b6:66:9d:39:ad:b2:83:6d:68:18:bc:
                    e8:a8:3e:4c:d7:df:9e:b2:f0:a9:6f:51:89:2e:90:
                    c1:8e:81:98:83:83:4a:d5:fd:2e:2d:00:c7:de:72:
                    7f:18:f6:ad:a8:65:68:4a:7a:2e:ef:cd:fb:6a:60:
                    5a:b9:29:19:b7:ee:f4:23:1c:1e:e7:10:62:3c:17:
                    2f:3e:5d:2d:ed:62:6e:47:56:e7:23:75:fc:01:2e:
                    13:e9:4f:6c:d7:a0:a7:42:d6:af:49:90:db:ce:ae:
                    1b:c7:80:74:79:13:ad:03:30:b6:85:f8:02:54:36:
                    72:4f:72:62:72:1f:c8:5b:c4:37:d5:03:7f:5b:4c:
                    bb:c6:31:46:65:7c:23:39:75:86:a2:b4:ac:6e:fa:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:8C:53:65:00:80:BA:09:BB:D7:03:5D:27:26:0E:65:9F:CD:23
            X509v3 Authority Key Identifier:
                keyid:86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:b4:04:1e:82:6a:3b:cd:ff:75:16:3c:4d:cf:2a:89:57:
         1f:e7:7b:1e:42:14:23:0a:f5:87:f7:e5:00:e2:4b:3b:56:7b:
         92:4c:f5:ce:b1:b2:0b:23:72:96:ec:03:19:77:5a:3a:c0:04:
         48:d0:f8:a3:02:4a:16:29:85:c6:e1:cb:c4:e3:cd:c3:53:aa:
         98:73:76:e4:23:e6:4f:46:89:9b:95:f8:71:3f:8d:4d:52:84:
         0a:63:6c:a2:75:f7:f3:14:2a:61:85:9a:4a:98:c9:08:ce:cd:
         fa:49:77:58:9c:bc:68:9c:e9:39:7e:35:90:81:9f:ea:85:79:
         2b:82:8a:4e:83:13:4f:d1:9b:81:e8:b8:6d:48:cb:ac:07:42:
         93:8d:7a:22:b3:3e:05:55:51:77:4a:52:d6:04:2d:01:e0:51:
         3f:a9:a6:79:a1:72:f0:34:05:31:40:84:5d:f8:05:e1:d1:81:
         6b:50:db:ea:20:ce:ed:9b:ce:ed:5d:09:53:89:46:76:1e:71:
         2d:43:54:22:db:8d:a9:1f:c1:bb:e3:ad:c2:3a:bc:fd:43:b9:
         58:0f:e1:50:d0:cd:72:ef:b5:f8:d2:ce:d3:27:82:e0:86:cd:
         6e:8f:bc:83:b3:47:f5:74:c1:be:d5:2e:b6:e2:26:5e:78:e8:
         fa:62:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:48 2024 by rpki-client on console-ams.rpki-client.org