Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File:                     HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier:          2DSudsdZuVuHc4EgQyUx5b8vRKl0+AwnhJk5+5n0eSI=
Subject key identifier:   9A:F3:4C:BD:9B:D4:4D:9D:6B:ED:47:AC:57:4B:E1:CC:2F:0B:89:BC
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer:       /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial:       018F38F7583BEF077CDE58EC62B9F4BA04B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number:          0FB6
Signing time:             Thu 02 May 2024 11:01:25 +0000
Manifest this update:     Thu 02 May 2024 11:01:25 +0000
Manifest next update:     Fri 03 May 2024 11:01:25 +0000
Files and hashes:         1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: lqrDKRNail9Vgx11a+PIXBJrgyKtr1PBuIxBgskr2iY=)
                          2: N-oGwGQ-E3x-SFFmRqfBBeLs3Jc.roa (hash: HvnIwNnzVvTbOYMbsaZFTgN1s2z/DF2jR9qetMtJYyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:58:3b:ef:07:7c:de:58:ec:62:b9:f4:ba:04:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
        Validity
            Not Before: May  2 11:01:25 2024 GMT
            Not After : May  3 11:01:25 2024 GMT
        Subject: CN=9af34cbd9bd44d9d6bed47ac574be1cc2f0b89bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:c0:3c:2e:e8:cd:79:2e:7b:15:e2:5b:4f:
                    df:a5:de:af:d1:81:2e:a1:c7:37:b7:59:03:ca:08:
                    1e:52:42:19:d6:a5:6e:85:bc:ca:7e:56:54:c7:7e:
                    27:95:c5:9e:1a:8b:6e:97:e6:b0:1f:61:12:2f:c5:
                    90:2a:25:cb:9f:c0:ff:97:31:c5:77:31:0f:b8:9c:
                    bb:f4:f0:f9:4c:a0:0d:2b:12:60:fa:8c:06:41:5d:
                    21:e4:7d:64:66:55:76:df:67:79:8f:c2:4c:a7:0c:
                    00:50:8e:68:fa:7e:d8:12:93:2a:62:18:d5:bc:76:
                    5a:10:d8:80:e1:77:fe:7d:da:b1:56:5a:1c:11:91:
                    0b:eb:e1:5d:d3:f5:ce:c0:09:55:28:13:e8:1b:48:
                    3a:8a:5e:c2:68:d9:ef:a5:fb:74:60:e2:61:7c:97:
                    4b:99:2a:93:a4:85:50:0f:93:1e:52:e8:76:9f:33:
                    72:d3:27:64:03:6c:53:35:5a:fd:cb:08:53:04:c4:
                    45:bc:89:a9:9e:3c:11:22:b1:77:1f:37:6e:58:8d:
                    f3:e5:a2:ed:2e:01:30:ab:73:45:1c:cd:ee:f1:dc:
                    03:f8:1b:c8:e1:72:38:37:3b:a9:e8:32:4d:31:95:
                    42:34:da:fe:62:47:d4:23:03:2a:23:a4:8c:13:eb:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:4C:BD:9B:D4:4D:9D:6B:ED:47:AC:57:4B:E1:CC:2F:0B:89:BC
            X509v3 Authority Key Identifier:
                keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:ce:01:72:70:a4:ba:c7:69:e6:57:1d:e8:5c:bc:b1:7c:
         96:c0:b0:64:20:7a:37:a8:74:a6:16:e9:c5:e5:be:02:da:cd:
         cb:de:d4:44:a4:8d:a7:3e:07:2a:57:f7:2c:51:a4:bd:81:d4:
         8a:c3:34:f8:2f:83:a3:74:96:93:e4:bc:b8:32:f6:f9:26:95:
         2f:45:ff:78:b3:4d:d0:c9:9a:ff:37:05:eb:10:a6:87:f3:ce:
         2c:86:36:26:1a:2d:a1:76:e6:fb:4b:47:1e:f3:e1:1f:ef:56:
         d8:db:5d:30:97:e3:1c:9f:0e:72:9f:30:c5:3e:a7:3e:6b:70:
         c7:22:f7:10:07:72:92:7f:fb:b7:51:d7:7b:fd:3a:d6:de:73:
         00:68:ab:9f:2a:3e:c8:03:23:85:28:02:3e:0e:29:42:da:1a:
         96:e8:4f:c1:86:5c:18:bb:fa:07:14:4c:b6:b5:44:0c:4c:c7:
         35:6f:03:74:4a:7b:b6:f4:fd:c3:b0:29:17:83:42:2f:d6:27:
         fe:0c:ad:48:c4:25:94:33:95:94:7b:c3:62:29:7d:5f:e1:01:
         d2:a1:5f:75:8e:fe:52:88:e9:89:f9:83:89:6a:cf:76:6a:5d:
         d2:60:0b:5d:57:29:c0:18:44:26:69:ce:85:be:59:35:96:cc:
         a7:86:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:57:19 2024 by rpki-client on console-ams.rpki-client.org