Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          9IeEKJek6f6jeLY3TEEflWHuwb9SaOYt2jcBr0kVA2E=
Subject key identifier:   E7:0B:8A:CF:EE:B8:D3:23:8F:40:EB:A4:1A:03:22:0D:AA:DA:3E:E5
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       018F3BF92924B385F9EFC63A2FD15B57BC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 01:02:15 +0000
Manifest this update:     Fri 03 May 2024 01:02:15 +0000
Manifest next update:     Sat 04 May 2024 01:02:15 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: VA//IFeDqa0b6eOnlOa8KPpE91Dp3u+wlx0zRvNnyfc=)
                          2: uvW8FLt64TifMcg6Go7MJf0nkQM.roa (hash: A/15bNHuKIJki2UprZSB5lMkEqVBIHX8e9CCIuMIIq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:29:24:b3:85:f9:ef:c6:3a:2f:d1:5b:57:bc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: May  3 01:02:15 2024 GMT
            Not After : May  4 01:02:15 2024 GMT
        Subject: CN=e70b8acfeeb8d3238f40eba41a03220daada3ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:b5:bf:c0:92:a2:13:5d:d2:ce:07:3e:31:
                    a4:77:30:4c:e4:9a:01:7f:64:f9:12:f8:2f:62:50:
                    78:19:aa:b2:99:72:9f:02:ba:7f:42:03:7f:60:68:
                    ae:aa:1e:d0:c1:dc:7f:b5:41:f3:4f:26:87:11:d4:
                    df:c2:51:66:17:30:03:a0:2e:59:1e:db:cf:2d:db:
                    4d:f9:ba:bb:d9:20:1e:e5:91:56:9d:36:50:f4:d8:
                    cc:a7:24:11:16:ab:25:c5:48:c7:d4:96:4e:c5:65:
                    da:85:c5:66:1f:3d:3a:6a:62:bd:ee:18:34:11:22:
                    46:3e:ad:5d:be:a4:ea:20:ae:fd:42:71:04:f3:42:
                    ba:b1:93:da:84:28:8a:8d:1c:74:cb:c2:ff:23:00:
                    8d:58:22:af:50:c5:d7:eb:c6:02:6e:b1:f2:ce:00:
                    83:3a:ac:60:50:df:ed:d7:08:c5:96:74:30:11:50:
                    8b:f7:96:d8:61:b1:ee:13:cb:81:23:e9:94:2e:d1:
                    35:f5:fa:3c:3d:48:ba:90:b1:c0:06:e7:f9:1e:c3:
                    8e:f2:28:cc:8f:18:f7:a7:ae:9a:db:a1:04:bb:eb:
                    90:2f:52:51:e6:2b:6b:46:b3:36:26:11:36:c1:f0:
                    85:4f:cc:a8:86:e1:e1:cb:f1:8a:f7:3a:ea:90:9b:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:8A:CF:EE:B8:D3:23:8F:40:EB:A4:1A:03:22:0D:AA:DA:3E:E5
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:8a:be:79:da:bd:fb:49:89:02:5e:9b:3d:65:0e:06:7b:
         31:f7:fe:b4:71:a3:1b:3f:78:5d:1f:d5:ef:01:af:8c:b9:5d:
         1a:93:38:42:73:a6:93:3e:59:c1:9b:2d:24:3d:63:6a:cc:a8:
         c8:8e:93:a5:9d:09:cf:3b:18:f5:16:d3:c3:06:81:9c:34:d4:
         ff:6b:09:44:10:4f:b9:f7:36:55:bf:57:25:10:a7:ca:af:76:
         bc:18:99:0b:03:59:38:30:c8:77:fd:f0:81:bd:ee:e3:32:ba:
         8b:9f:b1:d2:39:e7:37:c4:3d:a1:66:17:da:9a:dc:b7:29:1c:
         64:6c:ed:98:dc:13:e3:95:d3:2f:e7:71:1c:16:f4:75:cc:b9:
         2b:40:06:dc:c5:c2:6a:db:ea:01:4f:43:01:1d:bc:41:f2:4d:
         0a:83:1d:77:01:e2:77:01:ae:5a:c4:bf:64:28:12:26:ce:64:
         6a:1b:ac:dd:87:d2:37:45:9f:a8:66:4c:9c:c5:c8:75:22:50:
         5d:af:0d:46:26:fe:14:1e:a0:e4:31:3e:e9:d4:21:81:01:fa:
         96:6f:64:3f:08:f8:2c:8c:fa:7e:ed:3f:64:c3:8e:8d:45:fd:
         bd:61:07:17:6a:40:bc:5f:91:a2:ae:a5:07:ba:97:6d:6a:bf:
         7c:62:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:14 2024 by rpki-client on console-ams.rpki-client.org