Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          XTB3FcLHkW93uNCB9PXu4GCdNK8OL1sy56SzRhj1CGk=
Subject key identifier:   B8:C8:84:36:EC:EC:22:09:46:9C:D8:83:20:CC:50:D8:BE:23:B2:85
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       0196BDEECDB718E10ED05BD2484005E8AFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          1535
Signing time:             Sun 11 May 2025 06:01:06 +0000
Manifest this update:     Sun 11 May 2025 06:01:06 +0000
Manifest next update:     Mon 12 May 2025 06:01:06 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: VUCsq5Xh8D9RfAyI8W586VhgihLRjvDMxrIEPq2/SWo=)
                          2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:cd:b7:18:e1:0e:d0:5b:d2:48:40:05:e8:af:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: May 11 06:01:06 2025 GMT
            Not After : May 12 06:01:06 2025 GMT
        Subject: CN=b8c88436ecec2209469cd88320cc50d8be23b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:91:61:43:13:e3:c5:de:f9:02:46:92:98:
                    17:d7:d7:19:16:b2:6d:ce:e2:6e:b2:76:ff:eb:db:
                    18:95:cf:04:89:3c:76:dc:6d:dd:e6:57:88:96:7d:
                    1d:fc:41:43:02:c9:c2:96:e4:de:6e:ef:fb:6d:7d:
                    67:fe:00:50:7e:08:ac:bc:fa:ac:01:0c:ca:5c:81:
                    d8:37:b9:d5:88:62:c7:7a:fe:c3:9b:ad:a0:70:e2:
                    79:e0:69:f9:60:0f:eb:b8:85:00:67:e7:93:2b:f5:
                    43:95:37:e0:17:80:7b:86:3f:e7:0b:56:4a:ed:e6:
                    5a:f0:a3:ea:c1:b5:08:5d:90:fd:f9:c4:30:48:92:
                    fe:5c:a0:4d:e4:f0:67:ad:0c:ae:69:2f:0f:20:2b:
                    2d:b6:06:84:61:fd:51:fa:3c:0c:bd:99:b4:78:f1:
                    f3:34:f8:5c:9e:e7:21:39:24:40:10:9c:a7:81:ca:
                    26:79:47:ed:55:b2:9a:ca:f3:ff:fe:56:9f:ab:76:
                    9e:bb:66:00:c6:00:e7:a3:09:45:11:d8:3f:cb:85:
                    f8:e3:50:3f:25:3a:5b:ca:ed:43:2a:c9:be:8e:c9:
                    bb:8f:c9:33:f2:5f:c4:88:b3:1a:f5:38:7b:64:7e:
                    be:de:9e:a2:3c:6f:f4:db:76:29:96:4b:b9:6e:e5:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C8:84:36:EC:EC:22:09:46:9C:D8:83:20:CC:50:D8:BE:23:B2:85
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:ef:95:b4:46:a6:c7:ba:db:5b:b5:ff:65:0f:96:d1:89:
         27:88:53:f8:99:7a:f5:50:08:5d:73:f5:ce:ee:07:f4:7e:42:
         07:e3:0b:70:1c:89:87:a5:17:9d:5f:5c:eb:0b:f5:e5:60:ec:
         40:95:f2:34:e8:65:78:cb:67:cd:ed:29:7b:b4:71:20:a9:35:
         a7:30:90:d4:ad:a6:ca:72:46:07:77:4a:31:b8:99:b1:b5:d5:
         99:57:7e:77:ca:b0:7f:93:15:91:ee:41:d0:5a:6e:79:b8:a7:
         cb:37:2d:98:77:ab:e1:fd:a4:63:76:2f:0b:b4:97:84:5d:e0:
         a8:62:cc:68:fd:63:ae:ff:5c:07:a5:79:a3:94:38:16:56:dd:
         53:2e:34:a8:62:7b:c2:70:fb:bb:3e:99:48:a2:8f:d6:44:fd:
         40:e4:70:02:f0:28:b6:18:4d:ea:d5:a6:f5:af:72:69:30:60:
         cb:61:37:95:64:2c:83:83:8a:cc:48:6e:d2:91:42:b1:c5:7c:
         f5:5b:f4:0b:36:e4:40:77:f6:d2:62:8b:fa:7f:3f:f6:96:4b:
         9e:fd:7c:d1:90:dd:ca:de:ef:d7:5f:79:21:0a:87:74:eb:cc:
         5d:e4:c0:58:34:73:02:24:5c:f2:3d:ee:69:65:ae:db:0a:14:
         98:90:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:48:37 2025 by rpki-client