Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File:                     uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier:          0T3Ac2iWRadCVqOyVkEFmz47XoxvHL+WQqKff9E6bJE=
Subject key identifier:   46:82:51:94:E0:5D:EC:71:B2:0B:4E:4C:3E:5D:E8:61:22:49:FC:BD
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer:       /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial:       019683914AF58E1941ABF1E43D705CB87285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number:          C1
Signing time:             Tue 29 Apr 2025 22:00:59 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:59 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:59 +0000
Files and hashes:         1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=)
                          2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: uZHfc5MWUyHpExZOgu5IS8jh6FeXSUcNHpo56L0PWXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:4a:f5:8e:19:41:ab:f1:e4:3d:70:5c:b8:72:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
        Validity
            Not Before: Apr 29 22:00:59 2025 GMT
            Not After : Apr 30 22:00:59 2025 GMT
        Subject: CN=46825194e05dec71b20b4e4c3e5de8612249fcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:7c:58:f1:60:24:c3:fd:ff:9c:e6:2e:15:
                    87:b4:4b:2f:57:da:27:ca:ed:98:bd:bc:19:b1:61:
                    a9:63:1f:7e:c7:bf:d9:2f:d1:27:59:f7:32:95:b5:
                    9b:dd:c3:b9:0b:af:06:c8:50:4d:c4:a6:12:c1:35:
                    80:b6:47:a6:6d:5b:1c:fc:5f:41:ea:00:5d:dc:4a:
                    0c:07:66:bb:43:f1:c1:a4:51:84:65:b9:7c:ca:9b:
                    84:bb:73:ca:3f:bb:dc:b7:94:7e:33:40:f9:ca:5a:
                    cf:dd:43:43:69:41:f5:f6:53:71:cd:67:6b:ae:93:
                    7f:a0:30:fc:ab:70:58:79:2c:77:cd:89:75:09:23:
                    90:55:9a:30:b5:29:56:42:fe:b0:f1:a8:e8:03:73:
                    83:b3:94:5d:2d:ed:21:c1:e6:fa:c9:de:67:66:b0:
                    6c:39:04:8a:23:3f:05:48:d4:63:a9:b8:25:de:be:
                    73:aa:5f:7d:3a:4d:8f:db:df:98:82:98:f9:ef:06:
                    96:b9:4f:44:2d:d0:73:b9:e4:8e:fc:38:54:be:d0:
                    fc:8f:b8:c0:0e:8a:b2:22:de:5c:c6:da:11:43:60:
                    17:db:c6:a8:60:6c:84:a9:8d:c5:7f:d0:db:91:fb:
                    46:7e:7c:0e:a7:9d:b0:d3:4d:1a:ef:4d:d6:0b:6c:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:82:51:94:E0:5D:EC:71:B2:0B:4E:4C:3E:5D:E8:61:22:49:FC:BD
            X509v3 Authority Key Identifier:
                keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d2:9e:f9:2e:41:44:d0:e0:66:0d:97:c4:d6:20:77:3a:9e:
         c2:74:35:c1:1b:6c:46:95:1b:d8:b3:02:13:94:68:86:d7:b3:
         57:08:7b:b0:ca:19:ba:2b:17:aa:1e:2c:a6:24:b6:e3:3a:0e:
         7d:2c:52:68:f5:aa:11:dc:e9:ad:7e:b3:fd:c7:c4:d3:66:96:
         3d:9d:b2:60:4e:93:79:b9:40:6d:17:a9:13:48:73:ed:7c:98:
         0e:6b:46:6b:6a:e8:98:ee:36:f3:76:c3:79:8c:04:ae:88:c8:
         a0:52:7d:f7:d3:fb:82:4a:2a:d1:f3:6f:95:22:39:1b:d6:78:
         21:79:86:90:d3:6d:f6:f7:45:7c:fd:da:e2:cd:24:21:a2:a5:
         2c:84:05:f7:b7:70:06:ed:e9:1b:05:fa:d9:06:c5:c0:1f:0f:
         50:c6:99:a4:7b:c9:b4:27:90:ff:9f:a2:4e:6e:5e:48:1e:16:
         07:d3:9d:77:4a:aa:f7:44:0f:5e:4e:43:e4:64:13:21:bf:3c:
         80:a7:14:9d:00:5a:01:0c:40:b0:f2:fd:fb:cd:79:7b:da:91:
         98:50:31:3a:e9:c3:e8:c7:0d:86:49:57:ed:85:bb:b8:2c:9a:
         5d:ae:45:d3:9d:7d:31:d5:53:e3:df:49:00:1a:f7:da:fb:b0:
         66:d0:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:50:33 2025 by rpki-client