Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File:                     HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier:          8y5B8fIoOfC7PBUGBlx8JneZvRQK7LC+IG/e8mg0xgI=
Subject key identifier:   CA:54:73:B6:85:54:04:73:83:12:31:05:36:AC:A2:3B:95:95:1A:30
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer:       /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial:       0193568AC0C8F36F6C4A613F663E50F5827E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number:          0A02
Signing time:             Sat 23 Nov 2024 01:02:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:34 +0000
Files and hashes:         1: 2XmVFxQ9Kz21ppv_ol-OLdzn-7Y.roa (hash: Eqw2aPCjFC27FqYG6Wb5LX0pAsuOlEnKc+EuVvAtj2I=)
                          2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: +1Clg98QBPwQkrDI0amJm8am9HWa4023mOl3/fTv/2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:c0:c8:f3:6f:6c:4a:61:3f:66:3e:50:f5:82:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
        Validity
            Not Before: Nov 23 01:02:34 2024 GMT
            Not After : Nov 24 01:02:34 2024 GMT
        Subject: CN=ca5473b6855404738312310536aca23b95951a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:11:73:ae:fb:21:18:8c:cd:7d:8e:b0:d5:
                    bf:9e:0c:04:79:a6:f9:ed:4b:94:33:1e:a3:b2:9f:
                    7f:c4:7a:79:09:7d:36:8a:50:59:76:3e:7f:12:9d:
                    5f:e7:12:d8:11:50:ff:29:a0:a7:61:51:89:a5:69:
                    b9:6c:40:91:ff:80:bd:79:6b:d6:c2:42:4d:44:1a:
                    15:97:3c:97:39:0b:c4:b4:bd:87:40:2d:01:8c:e0:
                    59:a1:e3:a5:0b:b4:04:33:d1:57:80:96:ba:66:56:
                    47:56:eb:44:97:77:e2:c9:92:7e:93:da:c0:ed:6c:
                    a4:ce:24:4e:a7:f1:4a:12:28:2e:ca:7b:64:21:a0:
                    fd:cc:51:66:01:dd:7f:c1:e0:83:ed:a9:c0:9a:b8:
                    20:27:89:a7:de:be:76:ea:5e:2b:00:7b:c7:61:f0:
                    75:26:95:20:c1:f0:60:a8:2b:f0:68:d2:19:82:36:
                    b4:15:ec:a0:af:87:35:b9:05:e6:28:f8:14:bf:5c:
                    ee:eb:b3:4c:1e:f4:74:10:ca:3c:21:26:86:23:05:
                    df:2b:33:50:97:08:ee:2e:a7:a0:4a:9f:bd:3d:38:
                    65:9d:9c:5e:62:de:4c:e0:b4:bd:34:dd:84:d3:b7:
                    48:c7:36:5e:44:af:66:fc:57:69:86:67:1a:a1:38:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:73:B6:85:54:04:73:83:12:31:05:36:AC:A2:3B:95:95:1A:30
            X509v3 Authority Key Identifier:
                keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:56:cb:4b:31:f9:65:83:9e:be:fe:f2:41:e8:f1:86:6c:
         05:56:6b:d3:d2:28:3f:ae:03:57:80:06:d9:c4:b8:87:52:7c:
         6d:d3:10:0f:4a:8d:8f:e5:bf:04:d8:ab:c5:ad:b0:28:06:24:
         d5:33:19:27:63:7a:81:a8:30:c5:8b:4f:1d:d5:c5:8c:f4:54:
         d7:e1:e4:0a:26:55:08:2f:74:42:25:b4:86:77:2c:0c:e5:eb:
         8d:82:ef:bb:b1:b7:8e:27:b2:43:db:60:a7:3c:a3:84:0e:83:
         b6:67:ed:57:70:5a:bd:cf:12:c5:04:cb:6f:bb:80:3f:7d:fa:
         9a:59:18:4d:5b:23:52:96:c1:c7:d1:77:e0:bd:05:79:e8:eb:
         e9:d1:95:7f:cb:27:65:fc:70:4b:36:53:af:c3:ac:9b:81:b7:
         3b:79:d8:05:34:7b:69:00:85:b7:0d:25:09:d1:b1:e0:6f:da:
         5b:ee:17:68:de:8f:90:cb:85:21:c1:2f:4a:64:6b:f8:f7:4f:
         49:8f:ab:5f:e0:f5:2d:2f:5f:3b:13:e8:62:69:5b:a4:bc:7c:
         fe:6a:4e:2b:64:52:4c:ee:d8:97:58:18:b1:98:7f:61:f0:30:
         7f:09:a7:5e:84:be:ee:5c:1d:15:c0:cf:ed:c0:24:87:55:a4:
         87:07:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:54 2024 by rpki-client on console-fra.rpki-client.org