Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File:                     HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier:          3KpWynmPKOnG8IBNPgu9gLUE0QMGBIE0tgqXPbZnptk=
Subject key identifier:   E1:16:56:86:5F:D8:12:E3:CA:FB:BA:DC:B7:E9:04:98:5A:C0:8B:DD
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer:       /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial:       018F5702E683B0E0435D76A7BF706BF6D2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number:          0DE4
Signing time:             Wed 08 May 2024 07:02:38 +0000
Manifest this update:     Wed 08 May 2024 07:02:38 +0000
Manifest next update:     Thu 09 May 2024 07:02:38 +0000
Files and hashes:         1: 6SEfdSJ1BN44tXVRdTcXQoHlbq0.roa (hash: ty0wKQBTTBlen/EiMayT+RMrA+xztvwakGEk1h3TwnQ=)
                          2: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: Q6BOFRCHxF4pTrLCqkb/7Z5DXTWywRkYnt5Dt2henpE=)
                          3: XeIbEIJ5n1x9qFIts17XqM5mNO4.roa (hash: m5W6bDniMdkmBe0Juf7pmWk4Ay4MJwpHjLVqjPNPKnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:e6:83:b0:e0:43:5d:76:a7:bf:70:6b:f6:d2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
        Validity
            Not Before: May  8 07:02:38 2024 GMT
            Not After : May  9 07:02:38 2024 GMT
        Subject: CN=e11656865fd812e3cafbbadcb7e904985ac08bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:47:5c:1d:4e:63:71:bf:36:e1:c6:96:c6:
                    06:18:2e:e1:14:94:60:30:c4:d9:fa:83:4c:7e:70:
                    31:21:21:72:a3:48:3c:c2:f7:d6:6c:fa:24:29:b8:
                    ae:3e:81:e3:65:28:4d:78:08:6d:0a:a9:3e:62:fa:
                    eb:73:9f:e4:ab:0e:f4:eb:cf:a7:17:46:a2:58:80:
                    d6:8f:7b:6f:77:3e:65:22:4f:3d:cb:97:a1:b8:9f:
                    af:84:13:f8:18:0b:41:c9:b2:e7:ae:64:f3:f2:7d:
                    81:66:9c:f9:59:46:ef:33:31:b8:f2:bb:69:e0:8d:
                    ea:fe:bf:e7:89:27:5d:b0:f2:ac:ad:ac:7a:a4:97:
                    6d:68:65:75:27:ab:b0:75:5e:92:d5:06:b7:af:3c:
                    0a:28:bd:7e:e4:27:55:83:a5:71:c0:49:94:56:5e:
                    28:7c:2f:33:0d:3c:46:b0:a9:7b:6f:b2:a9:4a:8a:
                    09:13:f8:97:1e:30:04:4c:47:f0:27:bb:70:35:32:
                    73:d7:db:6e:cf:55:88:93:96:f6:93:59:4c:fd:d4:
                    ae:e9:7b:b7:23:af:97:a4:d8:01:85:e4:f2:95:5e:
                    d1:20:1c:e6:b8:f2:8c:3f:68:05:08:32:bb:fe:5c:
                    87:b2:35:19:83:9f:45:eb:f5:84:32:13:67:67:bd:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:56:86:5F:D8:12:E3:CA:FB:BA:DC:B7:E9:04:98:5A:C0:8B:DD
            X509v3 Authority Key Identifier:
                keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:6b:2a:ba:44:fe:98:8e:56:22:9b:34:84:d5:12:80:b3:
         18:7a:8b:8f:b7:32:8a:41:18:3b:0f:e4:af:f7:4a:16:e2:bc:
         21:29:93:a6:0c:38:2c:ed:66:0f:51:e1:f6:78:3e:74:b6:28:
         d7:85:45:bb:1a:31:b0:87:3c:fd:c5:90:d2:d3:77:41:0d:c5:
         b3:fe:93:88:57:09:62:ff:60:bd:3e:cc:17:15:04:11:6e:2c:
         58:1e:15:6e:70:e3:c5:2b:1e:5c:61:6a:3e:90:82:09:28:4f:
         9f:39:bb:b0:80:73:c2:37:0e:d4:04:42:31:a9:ba:6c:75:22:
         56:0b:9b:62:8a:71:32:99:72:d2:9a:1a:71:9b:63:93:a4:c6:
         4c:91:0c:87:4d:40:13:be:2d:57:7c:fc:49:70:ff:d8:d1:e8:
         77:f6:a6:de:27:46:70:e2:ef:bb:20:7e:9f:5b:f8:64:bb:c3:
         00:a1:cb:bd:f7:d5:8e:4a:fb:96:4a:eb:3a:7e:b4:29:b2:98:
         ba:45:7a:0b:e4:fc:c4:d0:23:69:b0:b8:98:d8:9b:83:fd:3c:
         f0:02:a3:ad:5c:c1:66:41:9b:7f:70:f0:a3:f8:e7:86:43:ae:
         53:cc:94:ec:9f:c0:e2:ea:60:04:c9:6d:4d:8d:aa:0a:b9:a9:
         ed:65:88:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XAuaDsOBDXXanv3Br9tK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2
YjI0YWUwHhcNMjQwNTA4MDcwMjM4WhcNMjQwNTA5MDcwMjM4WjAzMTEwLwYDVQQD
EyhlMTE2NTY4NjVmZDgxMmUzY2FmYmJhZGNiN2U5MDQ5ODVhYzA4YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc5HXB1OY3G/NuHGlsYGGC7hFJRg
MMTZ+oNMfnAxISFyo0g8wvfWbPokKbiuPoHjZShNeAhtCqk+Yvrrc5/kqw7068+n
F0aiWIDWj3tvdz5lIk89y5ehuJ+vhBP4GAtBybLnrmTz8n2BZpz5WUbvMzG48rtp
4I3q/r/niSddsPKsrax6pJdtaGV1J6uwdV6S1Qa3rzwKKL1+5CdVg6VxwEmUVl4o
fC8zDTxGsKl7b7KpSooJE/iXHjAETEfwJ7twNTJz19tuz1WIk5b2k1lM/dSu6Xu3
I6+XpNgBheTylV7RIBzmuPKMP2gFCDK7/lyHsjUZg59F6/WEMhNnZ709lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEWVoZf2BLjyvu63LfpBJhawIvdMB8GA1UdIwQY
MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt
OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0
LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6lrKrpE
/piOViKbNITVEoCzGHqLj7cyikEYOw/kr/dKFuK8ISmTpgw4LO1mD1Hh9ng+dLYo
14VFuxoxsIc8/cWQ0tN3QQ3Fs/6TiFcJYv9gvT7MFxUEEW4sWB4VbnDjxSseXGFq
PpCCCShPnzm7sIBzwjcO1ARCMam6bHUiVgubYopxMply0poacZtjk6TGTJEMh01A
E74tV3z8SXD/2NHod/am3idGcOLvuyB+n1v4ZLvDAKHLvffVjkr7lkrrOn60KbKY
ukV6C+T8xNAjabC4mNibg/088AKjrVzBZkGbf3Dwo/jnhkOuU8yU7J/A4upgBMlt
TY2qCrmp7WWIBQ==
-----END CERTIFICATE-----
Generated at Wed May 8 16:25:49 2024 by rpki-client on console-ams.rpki-client.org