Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File:                     HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier:          oMcZmRIaXF3D7Ik7HRt3uo34IgQrrZ7nfIkDA7NEG2M=
Subject key identifier:   34:5C:B8:96:40:D9:B9:09:B8:C8:4C:D9:71:1A:40:84:38:0B:3A:FE
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer:       /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial:       018F90F27C5A61512C6EA158FFFFA4123A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number:          1179
Signing time:             Sun 19 May 2024 13:02:41 +0000
Manifest this update:     Sun 19 May 2024 13:02:41 +0000
Manifest next update:     Mon 20 May 2024 13:02:41 +0000
Files and hashes:         1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: xDuKHKpE1/9TeaZ5hgHKovuIjPC/XGviuj62P8RESqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:7c:5a:61:51:2c:6e:a1:58:ff:ff:a4:12:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
        Validity
            Not Before: May 19 13:02:41 2024 GMT
            Not After : May 20 13:02:41 2024 GMT
        Subject: CN=345cb89640d9b909b8c84cd9711a4084380b3afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:59:18:67:f3:5d:cc:4b:04:8b:94:ce:06:
                    97:e0:b7:b2:ad:12:d8:7f:ec:1d:06:09:ca:bf:5f:
                    de:5a:5e:cf:3b:b5:ca:16:48:1a:17:ba:8d:98:60:
                    4c:e3:f3:4c:f2:e2:13:a4:93:3c:a6:72:a8:c3:35:
                    d1:19:24:3e:7d:43:2b:20:01:2f:b0:86:b0:ce:23:
                    24:f6:01:8a:30:d0:59:fe:69:59:17:95:36:86:37:
                    fa:a4:27:21:16:b3:7d:bd:26:81:70:cd:aa:e8:7d:
                    34:d9:24:26:26:a4:4e:20:89:64:67:b7:f1:2d:05:
                    73:22:78:e2:8c:89:48:e6:b7:50:13:dc:67:da:e7:
                    e3:21:4f:7d:a6:17:44:e6:e1:a8:c9:43:6b:2f:0c:
                    67:b8:21:9c:cf:fc:ad:38:29:0d:16:c2:05:e8:f9:
                    ff:71:15:41:6b:59:45:3e:db:b7:15:5c:4b:22:99:
                    20:91:07:82:68:04:e9:17:01:ec:17:5b:7d:ed:98:
                    ef:40:d1:c6:1e:bf:fb:21:e1:fc:9a:18:e7:b4:c1:
                    72:d6:c1:1a:63:0b:e0:be:7d:c8:73:99:c1:b2:29:
                    94:48:8f:25:f8:21:d9:a3:46:fb:16:49:85:58:7e:
                    99:be:22:42:4a:9a:aa:42:bd:5b:9d:c1:9f:a9:7d:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:B8:96:40:D9:B9:09:B8:C8:4C:D9:71:1A:40:84:38:0B:3A:FE
            X509v3 Authority Key Identifier:
                keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:bb:ff:fb:6b:2f:9c:fc:5b:ec:9f:28:46:14:23:f6:d7:
         7a:c0:95:ea:bf:e6:ab:a1:86:40:9a:8f:63:84:9c:6c:49:ac:
         db:34:af:30:e3:66:d2:37:9b:01:91:d4:a2:04:6a:95:2e:d3:
         54:28:f4:d4:36:a1:c1:02:b6:93:a0:e1:8d:84:29:d1:2c:1d:
         85:dd:cb:44:0a:6c:53:38:72:90:3f:ce:0a:96:53:59:cd:99:
         ce:26:58:e4:d2:10:9d:e0:54:b9:8a:1c:bf:7f:04:fe:86:07:
         44:e9:9e:52:48:c9:9b:72:2d:18:25:94:49:0d:04:99:9b:87:
         4e:ec:de:4e:e0:3b:38:5f:80:ec:cc:e6:82:6e:18:32:b4:d7:
         ff:6c:61:d6:8c:27:c0:83:67:a6:4a:45:0e:c5:cc:40:38:77:
         c4:29:3a:45:c2:8f:df:09:3d:21:a2:97:fd:69:e5:52:74:9c:
         44:b3:06:12:b6:94:71:79:2e:af:5b:ff:e8:de:94:f0:bd:8b:
         34:67:aa:ac:72:26:ae:15:58:3c:38:e6:10:a8:9e:e8:40:c8:
         93:99:0d:54:e9:b2:2a:5a:a6:d2:1c:fd:5f:7d:2c:47:54:cc:
         de:5d:20:2c:c4:15:75:24:32:a0:ca:af:0e:c1:dc:2d:6d:e3:
         41:bb:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:51:53 2024 by rpki-client on console-fra.rpki-client.org