Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
File:                     HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft (raw, json)
Hash identifier:          QupAYdB24HW9IWNkbYjdHD8R5oCZm8i2JnNmrENxjLg=
Subject key identifier:   86:EE:0F:A0:A1:86:FC:F0:27:B2:3B:A3:87:CC:0C:8A:84:0B:83:39
Authority key identifier: 1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6
Certificate issuer:       /CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
Certificate serial:       0195116C1736EDEC852E2434C67D496B1945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
Manifest number:          01F7
Signing time:             Mon 17 Feb 2025 01:00:51 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:51 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:51 +0000
Files and hashes:         1: HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl (hash: M2VrkagZkZCOvSiinElGOGjDDF0DuL3w1lXMtmLkfEo=)
                          2: XiutpK5IFGvWb0JW8fGUzsQHR84.roa (hash: LnLSfYNTkXNsPaxH5mVhc1aUjmJ/QEWl9VYA4pHoDLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:17:36:ed:ec:85:2e:24:34:c6:7d:49:6b:19:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
        Validity
            Not Before: Feb 17 01:00:51 2025 GMT
            Not After : Feb 18 01:00:51 2025 GMT
        Subject: CN=86ee0fa0a186fcf027b23ba387cc0c8a840b8339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:09:cc:2f:67:26:e3:21:d8:d9:9b:1b:9e:
                    78:9d:8e:eb:11:32:57:a8:60:63:3c:5d:d3:76:4f:
                    b3:a5:02:33:cc:91:af:0c:fc:5d:fa:9c:a0:60:4f:
                    b5:ca:56:95:df:d5:d5:7b:86:67:f6:fd:48:c7:15:
                    d0:18:fc:bc:6e:f7:f5:6d:ee:b2:9b:31:b3:9c:f0:
                    0b:49:6c:14:cf:8f:88:a2:ac:7e:2d:62:14:29:85:
                    73:a2:5c:3d:7e:52:9d:bb:9b:47:12:25:46:dc:06:
                    97:6d:45:08:24:86:35:48:54:a9:a1:43:8c:65:99:
                    12:dc:dc:db:8d:a8:34:4f:8b:9b:99:b8:d2:67:bc:
                    f8:34:3f:d5:37:b8:e4:3f:41:8d:23:21:54:97:aa:
                    c7:1f:ed:3c:2f:2b:db:a6:bc:02:45:c1:54:88:b4:
                    4b:c6:18:b7:75:2d:fb:38:d9:cb:cd:cf:d7:df:2c:
                    e7:f1:fc:d5:6d:9b:fa:34:2d:fb:d8:12:59:57:a3:
                    98:62:71:1d:b0:68:35:cd:4b:a9:d2:63:a6:44:0d:
                    ef:05:a3:c4:96:f3:02:1e:f7:4e:82:27:ea:08:ed:
                    25:ac:51:93:9c:5c:17:ac:2b:36:ba:65:0e:ff:66:
                    ed:cd:8b:bd:73:47:a2:09:16:9f:91:df:8c:ce:5d:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EE:0F:A0:A1:86:FC:F0:27:B2:3B:A3:87:CC:0C:8A:84:0B:83:39
            X509v3 Authority Key Identifier:
                keyid:1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:78:9f:a7:09:48:a7:b3:33:86:ae:97:16:69:83:d3:7f:
         18:65:fe:e2:63:a2:bd:95:1d:d9:ca:2b:e6:80:02:5f:b3:6b:
         ce:8e:ab:95:77:a3:5a:90:08:52:1d:58:72:fd:78:0d:d7:32:
         71:a0:d4:bb:e4:76:57:5c:77:78:3d:40:4c:be:69:54:1a:41:
         78:e0:c0:a1:cc:cb:96:11:59:c7:4c:a1:a4:e7:d1:eb:24:a4:
         38:63:30:e2:51:c7:23:0e:4e:0f:52:5f:46:55:9a:d6:b8:dc:
         ca:6c:66:10:8d:01:f3:3e:4c:e1:16:55:af:a6:fb:62:d6:79:
         23:5d:a8:a7:f5:09:ac:04:02:a6:91:87:8d:7a:03:51:ec:44:
         42:85:97:c6:92:0c:aa:76:2a:ed:b3:ba:7b:89:b4:c4:c1:9d:
         96:38:5a:e0:66:18:c6:8a:01:c7:31:f5:df:8b:c3:f4:ba:70:
         b2:39:7b:e4:9b:c3:e2:a0:8e:3a:76:33:88:cb:fe:01:cf:0a:
         90:a4:32:42:19:69:10:6b:ad:f6:30:c7:1a:7a:ab:c6:f7:4c:
         3c:c2:6e:12:bc:23:7c:2f:b4:59:18:1c:e7:2d:da:df:3f:18:
         9e:7a:95:b9:cd:49:85:a7:32:f0:88:35:45:11:45:b5:24:06:
         da:85:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:01 2025 by rpki-client