Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
File:                     Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json)
Hash identifier:          raK8culB2XgvjCPFnyQUcMMZDzj+rqgNKOU2khiHBv0=
Subject key identifier:   87:C9:76:C2:67:49:E5:42:1C:D7:F8:9A:F1:C3:0D:D6:95:7D:A1:EF
Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Certificate issuer:       /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Certificate serial:       0192F09C041F64DB2D06D87ABA190E7DDCBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
Manifest number:          01A8
Signing time:             Sun 03 Nov 2024 06:00:08 +0000
Manifest this update:     Sun 03 Nov 2024 06:00:08 +0000
Manifest next update:     Mon 04 Nov 2024 06:00:08 +0000
Files and hashes:         1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: oUFd1n7Pk9pBwSNE8PRWeuxg+7scICSORkNYJ1SYcvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:9c:04:1f:64:db:2d:06:d8:7a:ba:19:0e:7d:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
        Validity
            Not Before: Nov  3 06:00:08 2024 GMT
            Not After : Nov  4 06:00:08 2024 GMT
        Subject: CN=87c976c26749e5421cd7f89af1c30dd6957da1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:61:11:4d:c6:b0:0a:81:96:7c:b4:4f:7b:
                    e2:c9:cc:4e:b7:ee:42:d1:71:40:a8:2a:77:a9:d5:
                    bb:41:7d:74:ad:0b:68:8b:4c:f8:f4:74:95:23:64:
                    64:35:d4:fa:21:99:9e:01:d8:82:ea:2c:9c:61:0e:
                    09:a5:35:02:95:eb:b1:39:b0:47:56:09:2b:54:eb:
                    8d:01:ec:63:eb:07:47:83:e7:69:74:44:fa:12:22:
                    f1:f3:b8:ea:15:ab:74:12:b6:ab:13:18:50:c9:dd:
                    df:5b:85:97:9a:ed:54:b0:91:9c:ce:d6:f5:b9:00:
                    ec:6d:3a:28:23:17:08:7c:8e:f4:49:41:1d:96:20:
                    2a:58:c1:b3:84:5a:cb:7e:f1:d7:b3:01:bc:a1:8d:
                    ac:8d:21:9c:3e:1c:0d:34:b7:f1:fa:bf:b6:a3:8e:
                    64:22:48:13:d1:29:99:dc:94:05:d0:78:be:a8:ec:
                    d2:e0:4a:f6:d6:3e:ef:b5:4c:01:0d:a5:3d:d6:0d:
                    18:ef:6d:18:a5:aa:8b:a2:6a:3a:9d:75:46:54:a1:
                    c6:70:7d:d9:c6:61:6b:9c:c2:e1:9f:a6:56:27:d7:
                    cd:10:1a:3b:bc:d4:93:58:a1:c4:2b:11:b7:77:df:
                    fa:df:a0:db:95:a1:91:61:f9:b2:d9:ba:fc:4a:80:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:76:C2:67:49:E5:42:1C:D7:F8:9A:F1:C3:0D:D6:95:7D:A1:EF
            X509v3 Authority Key Identifier:
                keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:2a:43:af:be:eb:42:0d:c3:cd:5f:d4:75:ef:07:c5:1f:
         a6:c1:da:d1:40:02:6b:2c:48:81:18:8f:b0:6b:dd:52:59:88:
         65:f0:c3:1b:4c:44:d5:81:f4:bb:c6:97:11:e1:40:49:40:59:
         3c:9b:97:05:63:74:af:c1:b1:42:d3:5d:20:a4:01:c8:e2:29:
         8a:e4:bc:21:ac:51:8f:d6:38:ba:7f:81:96:9e:9f:dd:7c:16:
         4f:07:f7:2e:eb:74:55:9f:ef:fe:6c:76:6e:e3:97:50:65:bf:
         f2:f9:dd:c2:3f:3a:cb:2d:ba:8e:6d:02:00:24:51:f0:99:a3:
         b5:b2:18:fc:b1:b6:a1:3f:af:19:5e:f0:bf:f7:9a:0c:47:b5:
         f3:a6:83:3c:c3:71:88:87:82:35:ef:ff:82:8b:f7:1c:e8:46:
         3c:63:16:c7:be:a8:3e:c4:68:07:f1:70:2f:ed:39:62:ac:b1:
         b2:f8:8e:19:86:58:29:a6:16:d7:ec:22:7e:aa:d1:db:85:65:
         4d:1b:77:87:0d:94:4d:8f:7b:91:61:cf:31:52:e5:13:41:72:
         e8:73:e3:1d:74:af:fb:ea:c3:02:17:82:67:33:69:84:c2:68:
         60:07:de:5f:e3:1f:18:06:8a:85:96:42:bb:52:68:48:3b:b6:
         88:2e:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:42:23 2024 by rpki-client on console-fra.rpki-client.org