Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File:                     hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier:          WDXJu+7wzudE9ZSjycIbKojarjJ68G9cUMLWnf26yz0=
Subject key identifier:   29:8B:5E:50:E2:9B:D4:C8:8B:C5:5F:CB:6A:62:F3:9A:F3:85:D2:B9
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer:       /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial:       018F88247F5DD4F979C41319DBA9E15B697E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number:          10A7
Signing time:             Fri 17 May 2024 20:00:44 +0000
Manifest this update:     Fri 17 May 2024 20:00:44 +0000
Manifest next update:     Sat 18 May 2024 20:00:44 +0000
Files and hashes:         1: 3ecYOcddtIrrHW_9l_uKT55zPqI.roa (hash: IGTMMoG13TlA1Sn3q22fFvkwJzF3rN8DM18C0yNidIk=)
                          2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: DNYicNBEBssVKQWrnxxi94FwQ9mttabN1MCPobevtdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:7f:5d:d4:f9:79:c4:13:19:db:a9:e1:5b:69:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
        Validity
            Not Before: May 17 20:00:44 2024 GMT
            Not After : May 18 20:00:44 2024 GMT
        Subject: CN=298b5e50e29bd4c88bc55fcb6a62f39af385d2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:21:e6:57:cb:4a:13:7f:f4:fb:c1:1e:63:
                    46:41:99:26:59:14:f8:f0:89:99:03:3d:e9:8f:ae:
                    54:b8:24:0d:7d:92:38:7e:04:9c:7a:02:b1:72:2d:
                    96:65:6e:62:3b:47:ed:a6:9b:59:b6:cd:38:4d:31:
                    f7:6e:17:06:b7:75:69:31:00:a6:b1:3e:a7:1c:4f:
                    42:cb:e7:b3:8d:35:89:e9:bf:0e:24:0a:ab:64:57:
                    b1:d4:dd:f5:9b:51:56:36:e7:d0:89:d5:f0:18:e7:
                    aa:02:de:f1:50:90:06:af:46:27:4b:05:f7:72:55:
                    1b:96:9d:fc:9d:ee:ad:6e:bf:da:88:35:66:8b:e7:
                    09:fe:a9:36:14:50:fa:27:3c:1b:44:66:3e:6b:89:
                    5b:44:37:a9:72:8d:cc:ef:5a:e9:6d:16:30:2f:0d:
                    f1:0d:91:7e:2b:e4:f4:40:97:76:52:3f:de:7d:23:
                    2e:30:6f:29:4a:e2:9e:df:94:26:df:0e:f0:30:14:
                    54:6f:76:a5:79:83:e2:36:20:79:79:11:1f:5c:49:
                    3c:df:5f:1c:a1:bc:46:35:52:75:2c:d4:88:c6:50:
                    a1:b3:5c:1f:90:74:22:6b:f0:70:6f:3f:47:1a:fa:
                    b2:9a:8c:3a:8b:4f:80:5b:86:d1:0d:4c:21:ab:c4:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:5E:50:E2:9B:D4:C8:8B:C5:5F:CB:6A:62:F3:9A:F3:85:D2:B9
            X509v3 Authority Key Identifier:
                keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:df:3e:da:5a:d7:3a:43:33:9f:f1:5c:8d:c4:48:1c:68:c7:
         b4:c8:70:48:88:48:47:7a:f7:c7:e3:b6:48:c5:1a:89:da:b3:
         06:25:66:ff:33:6a:0f:3a:81:fd:a8:78:6e:61:75:a8:4f:34:
         3c:64:40:a1:78:6c:3e:31:da:2a:be:0b:23:e2:6b:e4:2b:0e:
         50:5f:4b:fa:99:26:5a:0e:66:ab:f9:55:29:e4:42:7f:09:7f:
         df:b0:23:10:b0:1c:a9:77:82:4e:32:fa:43:ed:6f:bb:32:ef:
         de:0d:dc:b9:71:12:f4:d9:18:87:f1:21:5f:4a:64:13:34:e1:
         ac:2d:c1:0a:6b:d5:69:1b:4d:d4:e1:30:bb:8f:94:25:22:a7:
         b9:28:fa:0f:e4:0c:13:5e:38:6e:6b:c3:69:e3:2f:6b:aa:12:
         b0:95:dd:3b:ef:fc:2e:64:7e:c6:1c:92:a5:e4:74:fb:9b:bc:
         cf:99:67:03:26:38:83:88:18:93:9b:16:5e:14:6a:07:ce:1a:
         18:32:db:1b:0e:62:0a:f3:df:2f:d0:5b:1b:96:93:7a:41:a9:
         b2:9d:2b:36:44:1b:bf:d5:f3:7b:06:3b:b2:5f:1f:fc:91:5a:
         a1:aa:0b:fc:ff:fc:80:f7:0c:78:3a:1f:1f:f3:a5:d3:18:42:
         7b:f9:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:48:15 2024 by rpki-client on console-fra.rpki-client.org