Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File:                     HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier:          0RFHb/Avm8ykPrip6WeRWVFm93+kE7pRsp4F0RMnrQY=
Subject key identifier:   CF:90:FC:91:B2:00:E9:5C:35:04:02:EB:5F:7C:65:F4:A5:31:4D:9C
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer:       /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial:       018F388926B97C9AF7F4B5A47C16499B3553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number:          0CFC
Signing time:             Thu 02 May 2024 09:01:03 +0000
Manifest this update:     Thu 02 May 2024 09:01:03 +0000
Manifest next update:     Fri 03 May 2024 09:01:03 +0000
Files and hashes:         1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: 9/rxC7dvQ16GFCm+A/+OIya5Ex4wTwHPWUVYTN4TzTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:26:b9:7c:9a:f7:f4:b5:a4:7c:16:49:9b:35:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
        Validity
            Not Before: May  2 09:01:03 2024 GMT
            Not After : May  3 09:01:03 2024 GMT
        Subject: CN=cf90fc91b200e95c350402eb5f7c65f4a5314d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:5e:af:db:56:ba:87:0a:9b:4e:d6:b6:f9:
                    4d:66:f7:87:6b:b5:96:43:7c:c8:ea:4b:d1:19:30:
                    fe:d4:a0:84:3a:15:a4:04:2d:31:4f:2d:2a:5b:cf:
                    7e:49:ae:06:a4:14:aa:ff:18:15:ea:11:af:14:d6:
                    3e:a4:e9:8d:08:38:f3:df:1b:b8:c5:02:8b:95:b0:
                    30:df:9b:59:d1:b8:e8:b8:7e:5b:bd:4d:03:d6:36:
                    b9:f9:5c:f3:65:5f:f7:da:0d:2b:d1:de:1f:01:bd:
                    eb:81:85:76:85:78:5f:d6:a8:43:f2:50:4e:17:fc:
                    89:17:44:43:d5:45:20:c2:6c:e1:54:a5:87:5f:b1:
                    56:36:f0:ff:bb:91:76:49:91:7c:5f:92:45:68:c0:
                    5a:3a:6c:3d:84:93:e7:6f:f8:38:23:35:7a:9d:fa:
                    d1:d8:2a:d7:9c:13:4d:14:58:28:25:91:5a:d1:12:
                    cd:5d:40:ce:df:58:26:70:30:ee:a7:fb:75:0b:5b:
                    5e:f4:64:e1:b9:8d:26:69:7c:4a:b1:97:0d:c8:84:
                    68:b5:ca:ea:24:ee:88:fe:b1:23:10:49:ea:20:dd:
                    86:ea:f9:fd:5d:1a:c5:43:31:de:5f:60:96:27:ad:
                    6b:1e:fb:f6:61:65:e7:5d:0b:51:2d:ec:f6:e8:a8:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:90:FC:91:B2:00:E9:5C:35:04:02:EB:5F:7C:65:F4:A5:31:4D:9C
            X509v3 Authority Key Identifier:
                keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:65:b9:64:d2:33:5b:29:68:c0:d5:b0:7d:39:0f:4d:96:
         20:96:c4:eb:89:7d:b3:75:e1:64:d8:3d:8b:ca:84:a2:f8:30:
         c8:56:09:6a:5a:dd:47:12:64:87:a2:95:cc:68:df:33:cb:1e:
         26:5c:d2:4b:df:0d:4e:ec:65:22:65:02:db:eb:54:d7:57:d8:
         41:f8:89:51:cb:fd:7d:23:b8:3d:37:a6:e5:81:e1:d4:2e:43:
         0f:04:56:8a:d4:84:38:8e:8c:75:7e:c8:00:27:6d:55:dc:05:
         5e:db:96:d5:49:4b:fe:e3:65:66:16:d1:5b:d8:af:a3:e0:3d:
         fa:7d:dc:b6:c8:7a:a7:81:52:3e:65:0c:8c:50:4d:01:e0:a1:
         2b:0f:95:0b:8a:4c:03:1f:8d:d9:47:4d:bb:8d:3e:5e:3f:65:
         a5:71:5a:77:dd:bf:db:79:c3:20:1a:4d:a1:1e:5c:0b:34:d2:
         38:8c:ef:41:fe:fa:77:b7:e1:4a:ec:74:4c:bd:cc:4b:1c:ff:
         79:da:7b:ed:e5:46:ad:47:f7:5c:d3:f9:22:a4:05:8d:f5:3f:
         b5:25:83:56:96:3e:7e:c8:c0:68:2f:c4:57:3e:c3:e6:3f:6a:
         5d:12:8f:30:4f:ab:cc:66:9f:7e:4f:cd:5e:87:73:b6:b0:5e:
         22:e3:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:25:06 2024 by rpki-client on console-fra.rpki-client.org