Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File:                     HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier:          h0Z2HZMtWx/a6x53SGs/4bpNWi+CcmwwVElbI5meB9E=
Subject key identifier:   42:95:FB:22:6C:7B:33:E8:48:74:6E:0C:13:2F:DF:26:0E:63:06:72
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer:       /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial:       018F5136A5F922A2B87342576EA8D69322CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number:          07EF
Signing time:             Tue 07 May 2024 04:01:26 +0000
Manifest this update:     Tue 07 May 2024 04:01:26 +0000
Manifest next update:     Wed 08 May 2024 04:01:26 +0000
Files and hashes:         1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: Z9AlkobnJ/qr9+yz2R3Fcm+q7WxJWCBziIP6utwIQQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:a5:f9:22:a2:b8:73:42:57:6e:a8:d6:93:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
        Validity
            Not Before: May  7 04:01:26 2024 GMT
            Not After : May  8 04:01:26 2024 GMT
        Subject: CN=4295fb226c7b33e848746e0c132fdf260e630672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:a1:74:e7:10:6c:84:dc:6b:97:f5:85:ba:
                    4f:6b:64:0b:e5:80:a2:47:8b:56:16:27:4f:67:eb:
                    cb:3d:cc:ee:47:b7:45:34:55:42:63:c9:08:58:b6:
                    8f:b0:9f:8c:55:df:99:9d:a6:0e:c7:70:8f:d7:3a:
                    c9:71:72:c7:c9:6b:69:be:ca:c9:18:87:fb:fe:c4:
                    b1:f6:44:32:b2:c1:9f:da:54:bc:0a:08:0d:aa:ae:
                    50:bd:82:3c:96:11:00:9c:91:7a:f7:b4:4f:c6:8d:
                    bc:2c:94:7a:f6:4a:b7:ca:ae:3c:41:d7:a3:fb:47:
                    9c:19:1f:fd:99:83:f2:4b:65:1b:20:67:6c:01:b9:
                    fc:48:55:f5:6e:1b:53:85:0c:b8:c6:6a:bc:f7:75:
                    22:b9:5b:37:2c:29:6e:7f:31:4c:94:e6:83:9e:81:
                    4b:4d:5c:fc:e2:14:8b:be:30:b8:13:ca:34:41:20:
                    16:af:3b:7e:44:8c:e9:aa:8a:9a:1e:3c:2d:67:5c:
                    21:ea:6f:50:99:9c:14:5b:a9:6f:b6:f6:49:e3:73:
                    fc:fd:9f:98:22:7b:18:74:37:12:ab:d6:4a:8a:ec:
                    0e:38:34:ea:37:30:6c:4f:b8:df:d1:24:06:f4:a3:
                    22:82:9e:c2:78:ba:5f:83:e9:9d:35:05:76:a1:15:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:FB:22:6C:7B:33:E8:48:74:6E:0C:13:2F:DF:26:0E:63:06:72
            X509v3 Authority Key Identifier:
                keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:d0:31:ad:0b:0a:c4:39:dd:46:95:1f:27:04:e2:8b:ff:
         7f:e3:73:d1:46:c1:d5:b6:f2:9f:ad:4e:93:e9:00:f4:5f:be:
         f6:5f:96:4d:36:0e:0a:64:93:2d:71:46:d4:a9:b0:b5:65:3f:
         d4:72:25:18:22:dd:99:f3:42:23:b0:c5:ac:e8:24:7e:e8:e0:
         b8:2f:c2:dc:8d:fa:f2:d5:5e:a3:30:cd:fa:2e:15:23:f6:66:
         8d:e4:c9:a7:80:fb:60:21:75:6e:e9:fe:d0:66:87:16:c4:2a:
         9a:0c:39:5e:3f:72:25:c2:72:59:fc:4c:8f:6b:e1:86:b8:62:
         b3:38:80:8e:fb:61:53:4d:c5:be:89:3f:fd:64:55:d0:5e:b6:
         b4:31:ce:e9:f8:47:f9:cf:aa:ab:6c:b0:80:9e:a6:d0:03:34:
         15:3f:bf:eb:67:b9:61:06:cf:03:af:e6:c6:c2:9a:eb:6c:5f:
         e5:1a:08:3f:c8:ae:6d:82:76:50:52:df:b4:60:81:93:f5:8e:
         1c:6e:2d:b2:53:6a:8e:35:ac:6d:04:ec:06:18:a3:d3:d7:23:
         a5:47:10:50:c8:15:ac:e8:00:58:1b:70:99:56:3a:db:69:28:
         99:8c:d4:5a:d6:59:4d:e9:ad:dc:f0:f4:cb:68:92:1d:76:2b:
         a5:fb:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:11:01 2024 by rpki-client on console-fra.rpki-client.org