Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File:                     HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier:          HE6QdRbRfN3q7W/WFgRXLkxa5Z6intYcPQSyF4SLK9g=
Subject key identifier:   31:7E:4E:41:33:1A:C8:7E:9C:15:0C:FE:FC:23:A9:E9:AB:1F:9B:D9
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       018F5136ECC66A5EB6D42DCB5004636A88FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number:          0970
Signing time:             Tue 07 May 2024 04:01:44 +0000
Manifest this update:     Tue 07 May 2024 04:01:44 +0000
Manifest next update:     Wed 08 May 2024 04:01:44 +0000
Files and hashes:         1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: iBPwksYXupTwiuYPtCDzxE1aMdcLDqRG/lgxz1PPSOU=)
                          2: cKvsVtbysPkFqXTULAtcr0gAFJ8.roa (hash: VF3uI847bhCzvw8ySFVKbv6DzJFxkCViZ+MhlEEnWTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:ec:c6:6a:5e:b6:d4:2d:cb:50:04:63:6a:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: May  7 04:01:44 2024 GMT
            Not After : May  8 04:01:44 2024 GMT
        Subject: CN=317e4e41331ac87e9c150cfefc23a9e9ab1f9bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:cf:c0:bd:18:e1:23:92:19:46:97:5d:07:
                    0a:6c:32:0c:2e:12:69:40:cb:9d:87:ae:a7:33:9d:
                    34:0c:dd:ae:c3:12:4c:6d:7c:e5:39:5a:5e:87:d6:
                    27:5b:a3:0a:cd:69:fc:1f:a7:42:ac:08:28:bb:b4:
                    f8:13:a6:6c:4e:63:2a:ad:a7:68:5c:7d:c4:f6:47:
                    82:07:6d:cc:c0:44:e9:11:0c:6c:6b:e5:e9:1c:a5:
                    21:23:aa:04:71:e1:0c:3f:a0:83:e5:ff:f8:a4:19:
                    bc:21:9b:ed:a7:db:81:d3:cc:f4:2f:a5:f3:b6:35:
                    df:5e:8f:8e:2e:52:a7:d8:7e:a3:eb:18:ba:be:63:
                    bc:32:e0:84:59:d5:d2:c4:d4:79:a2:95:85:ac:01:
                    3d:e6:52:3f:53:ad:5b:f7:41:ce:4c:33:d5:65:47:
                    de:14:53:77:8e:ae:4b:e9:79:c6:ea:21:fb:da:23:
                    19:bb:40:8a:aa:eb:27:70:d8:cb:50:81:71:27:be:
                    2e:ee:be:be:da:a9:60:e5:fa:bd:8a:42:35:86:ea:
                    eb:65:6b:b0:b9:24:79:44:87:35:ee:4d:ff:61:59:
                    c7:bd:76:fb:1f:01:59:ac:19:77:a4:b1:d9:bc:e0:
                    31:51:93:3f:50:c7:49:2e:21:0f:06:94:3f:36:cc:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:4E:41:33:1A:C8:7E:9C:15:0C:FE:FC:23:A9:E9:AB:1F:9B:D9
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:be:ea:dd:22:15:94:72:90:76:d5:2c:75:ac:74:1d:fa:cf:
         d0:b1:b3:b1:a1:94:48:e4:f0:77:0d:78:15:e4:04:03:97:92:
         8b:f3:0c:dd:c0:7b:be:3b:9e:09:ad:ca:eb:71:c4:93:46:df:
         cc:9d:57:00:2b:b2:08:b1:8d:b1:a1:9d:a1:c6:ec:da:b1:7a:
         3c:fe:9a:53:be:4d:94:60:fd:82:90:5c:6c:5e:5b:ff:b6:f8:
         91:27:18:2c:b2:b5:62:ef:b8:fb:58:df:98:c0:cc:e4:ab:64:
         62:48:c3:fc:47:85:06:d9:62:4a:52:4c:26:cc:3d:6b:8b:50:
         dd:28:2f:6f:a4:ed:a3:47:a1:5d:ef:c9:ef:7d:76:8d:41:a1:
         57:1a:da:5d:72:0c:6e:be:d0:61:71:c9:55:c7:e6:31:d4:2b:
         48:73:de:65:fe:f1:0c:94:a7:3f:67:58:57:da:79:f6:f4:6b:
         95:00:b2:3e:96:89:e8:8d:58:07:96:d2:de:04:9c:a8:28:b0:
         ab:28:bd:d8:4e:02:8f:27:40:0e:cd:22:4f:0f:48:6c:db:61:
         9e:a2:67:2b:7e:40:c0:11:69:bb:e4:20:83:2e:42:93:03:9e:
         9f:d9:aa:66:80:3f:cd:8e:a8:e7:7d:9a:a6:94:66:63:c4:b2:
         e3:dc:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:32:47 2024 by rpki-client on console-fra.rpki-client.org