Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File:                     H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier:          QLB+WSz2QBPnUPOol4460H+1nKkWT+jIdSzzHfdmkXM=
Subject key identifier:   AD:95:17:62:C8:8B:30:58:68:9E:D6:0B:30:66:AC:33:CD:84:EC:75
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer:       /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial:       018F3EF96AEA15F3712B32079559BCB48778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number:          0CD9
Signing time:             Fri 03 May 2024 15:01:24 +0000
Manifest this update:     Fri 03 May 2024 15:01:24 +0000
Manifest next update:     Sat 04 May 2024 15:01:24 +0000
Files and hashes:         1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: aTNBcZ80lBsHUNcJg0Wd43Hy4xR/p72BLYon5Lo73fI=)
                          2: xODRiu7LJF7dUOfDZz2ItY_9vbY.roa (hash: pOqs08if8uAeQ2VViy6bzyDVIT2c7BFB4v71m908NpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:f9:6a:ea:15:f3:71:2b:32:07:95:59:bc:b4:87:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
        Validity
            Not Before: May  3 15:01:24 2024 GMT
            Not After : May  4 15:01:24 2024 GMT
        Subject: CN=ad951762c88b3058689ed60b3066ac33cd84ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0a:58:e3:5c:dc:1c:a6:71:12:f6:bc:c8:aa:
                    2a:0c:5c:9f:a8:6f:35:fa:20:91:44:00:13:67:68:
                    c8:a0:99:a4:8d:e0:5d:e6:b0:b8:a9:ea:59:a8:24:
                    de:ff:f6:79:f8:0d:05:02:14:d3:dd:8b:e1:f8:e5:
                    16:52:7b:39:57:ec:6a:d6:23:2e:fd:6e:bd:1e:8c:
                    05:71:25:a2:bc:88:f5:b3:41:4f:80:08:23:2f:86:
                    77:c5:f6:d2:77:52:98:cd:f1:18:61:80:68:be:bd:
                    82:41:67:9c:b1:6f:ce:26:b8:b8:51:b1:74:c2:58:
                    8b:4c:4a:c8:fe:c6:e3:66:bf:b0:de:ed:61:3a:65:
                    6c:9d:5e:35:e4:e6:93:6b:80:c6:1f:81:89:e4:f3:
                    5d:49:68:f8:83:9f:df:e1:62:29:da:08:d7:2d:2c:
                    ea:df:ac:e4:0f:d7:1c:c1:ff:ad:56:cb:08:38:17:
                    ed:40:02:71:94:d6:6e:e5:1e:0b:27:5d:c2:f1:46:
                    fc:42:18:e0:aa:96:74:00:c8:3b:b2:16:a1:79:dc:
                    1e:ec:40:47:93:b5:63:85:fe:1d:ec:4d:01:0f:6d:
                    06:01:bb:d2:68:4c:36:6a:3c:e7:b6:7c:af:85:a5:
                    4a:71:bb:09:05:f2:b0:2a:c8:4b:c8:55:89:00:35:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:17:62:C8:8B:30:58:68:9E:D6:0B:30:66:AC:33:CD:84:EC:75
            X509v3 Authority Key Identifier:
                keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:4d:d7:3f:1a:bd:f9:c6:f0:27:7d:b8:b4:6f:20:ea:f1:
         66:11:db:00:38:4e:0e:17:5f:f8:ba:99:44:b6:13:75:41:11:
         02:03:b0:2f:89:7c:48:db:2f:0e:da:75:81:63:96:e9:0d:d1:
         ef:40:b5:de:17:49:23:29:76:64:bb:16:7d:f2:15:bc:e1:ed:
         ed:02:aa:c0:14:24:84:af:37:3b:6e:47:df:7c:c7:ba:b1:d1:
         1a:84:48:0e:4f:1f:9d:ba:dd:3d:8f:e6:44:9d:a2:3e:82:71:
         73:75:5d:77:6b:57:a0:23:0e:e0:3b:2a:7e:ff:d4:43:d6:d6:
         83:de:97:ec:b2:f5:ff:95:c9:90:ba:94:55:19:6f:a5:23:8e:
         55:73:f1:c3:9a:7a:46:17:c4:e8:41:f1:f7:5f:9a:ea:57:52:
         34:bc:be:30:b0:a4:8b:10:de:0c:81:b2:a3:e6:12:6c:9f:56:
         d0:92:53:90:25:fb:b5:cd:5e:b5:96:ce:c3:99:10:f3:4f:45:
         2f:7c:94:e0:87:86:20:05:98:0c:ed:d6:48:f7:19:90:63:a4:
         10:71:82:27:d1:5a:06:92:61:52:d7:e8:ba:f5:7d:ca:e2:38:
         c5:e5:fb:03:3a:89:78:28:e0:5d:e0:7b:ad:10:16:da:0d:20:
         67:1c:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:57:42 2024 by rpki-client on console-ams.rpki-client.org