Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          YkV40fxTDbY3l0d6jNvViLFXFkFWFWXy8pxW9LaOeRM=
Subject key identifier:   1B:44:35:C0:3B:FD:1B:DE:F6:10:96:20:62:0D:41:EA:51:A7:CD:14
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       018F41C40AA43E8EE137680F0515281804F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          03A2
Signing time:             Sat 04 May 2024 04:01:57 +0000
Manifest this update:     Sat 04 May 2024 04:01:57 +0000
Manifest next update:     Sun 05 May 2024 04:01:57 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: e+ntSXB5m5ecUaCB2bkJpsUi1casqyfxxpFmam2QWMA=)
                          2: KsHClfB4p9brLOP61FiIenTmz-c.roa (hash: OrjQ1M53L2SNU0USnaRcCQkDU59lLt36gFErYqsn8uk=)
                          3: SZdqDZE4RneeVStaWVqTFRmSMyE.roa (hash: ZULMkn9QqMM3ZuiZefF0oY4XRw2aRazZd+lj10PySPU=)
                          4: cvN2HAeYqeK3Y1vsIURjrvbA3Tg.roa (hash: 4zS00FfNtIUx4G5C/WRgGcxzIPLnVDrMZ7Ant83DqQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:0a:a4:3e:8e:e1:37:68:0f:05:15:28:18:04:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: May  4 04:01:57 2024 GMT
            Not After : May  5 04:01:57 2024 GMT
        Subject: CN=1b4435c03bfd1bdef6109620620d41ea51a7cd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:42:72:23:91:4f:48:5d:7c:a8:60:3b:aa:
                    06:5c:8b:02:cf:07:47:23:ec:16:0a:63:4b:93:4d:
                    ab:bb:56:c6:cd:6b:a8:1e:28:4e:eb:b6:c2:7c:5c:
                    5e:5c:9b:6b:71:c6:3a:c3:51:d1:92:7b:83:68:a4:
                    40:72:f9:75:89:8c:e2:10:23:61:de:74:a3:84:bc:
                    65:54:24:b4:2d:08:35:55:87:ee:d5:85:0c:44:f7:
                    8c:c6:df:91:a5:bc:fb:c5:d4:e3:3c:3a:f3:fc:c0:
                    18:2b:a3:38:bf:08:61:60:61:bf:7b:a5:9d:58:33:
                    8a:d4:fe:ff:5f:c6:76:08:f7:fe:96:2e:ae:29:05:
                    33:06:55:d2:2b:2b:ca:31:51:70:b1:4b:7d:dc:25:
                    41:46:bb:70:d8:db:cd:45:4a:4f:0a:15:04:ca:46:
                    36:69:84:ef:e9:da:73:8a:d5:e6:dc:23:f9:f6:13:
                    dc:ef:7f:24:ec:e7:03:a9:0c:f0:f0:a2:04:d0:4f:
                    de:09:db:be:43:7c:3f:85:7b:40:df:7f:a0:a8:fa:
                    1c:51:0c:dd:fe:89:6c:2c:6a:19:cf:f9:2a:d3:bc:
                    8e:6e:22:8c:55:26:2e:06:22:49:3c:92:de:91:76:
                    93:5b:1e:b4:74:18:c1:74:89:b9:48:1e:d2:53:15:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:35:C0:3B:FD:1B:DE:F6:10:96:20:62:0D:41:EA:51:A7:CD:14
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:cf:2f:68:fe:2d:31:b5:c4:34:94:0d:a6:d9:0d:5c:08:
         d8:3d:61:e5:01:64:81:8b:1b:59:79:7d:8b:65:40:f3:d9:57:
         39:c7:cc:f4:46:ef:76:ca:b4:ab:83:c7:50:2f:a8:bd:b5:f2:
         ce:c2:41:cf:18:a0:77:bc:2c:e2:94:d1:ba:78:ec:51:1b:96:
         64:0d:6a:a5:e1:51:77:57:95:84:8a:64:98:b6:72:9b:ef:5b:
         0d:f3:fd:bb:df:3d:74:98:08:c5:f8:94:cb:cf:08:7e:f9:dc:
         a0:f9:6b:18:2f:9e:8f:76:3d:e4:45:19:38:ee:ad:ea:00:77:
         2c:e0:d4:c8:53:cc:a7:cf:26:40:f4:c8:07:a4:84:22:8a:0a:
         85:04:66:6f:30:ba:04:3c:19:92:51:68:68:1e:7a:48:7d:d9:
         35:3e:89:03:96:35:48:12:12:ee:3f:ae:14:dc:22:0a:d5:d9:
         9d:5d:56:13:f7:86:1f:5d:e9:cc:a8:46:f7:8a:84:b2:39:d3:
         48:46:4b:73:06:79:3f:23:d5:5b:40:cc:a0:71:e5:8d:bf:79:
         f1:37:c9:fc:f9:c0:e8:11:08:9c:99:7b:95:db:af:a2:3b:79:
         98:8c:51:c2:ba:08:b6:fa:9c:c4:de:32:e7:3f:81:95:81:c2:
         68:0f:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:45:08 2024 by rpki-client on console-ams.rpki-client.org