Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File:                     HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier:          5EEeLperGF/8UqKeIn3Dm+rbX1GEqkfaYcW+tSbrh6g=
Subject key identifier:   5B:D1:A4:31:6E:69:E8:F6:5E:1F:BF:9C:78:96:3C:5F:CE:AB:8E:69
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer:       /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial:       019041F73898A93F12D79F6A7B0A59E2621A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 22:00:39 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:39 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:39 +0000
Files and hashes:         1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: LtXW+p9zV+LJC8dBLMj946DQJAy/7b+cmf8SnlUkz5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:38:98:a9:3f:12:d7:9f:6a:7b:0a:59:e2:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
        Validity
            Not Before: Jun 22 22:00:39 2024 GMT
            Not After : Jun 23 22:00:39 2024 GMT
        Subject: CN=5bd1a4316e69e8f65e1fbf9c78963c5fceab8e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:99:ad:4f:39:74:13:f8:4b:d5:d5:b4:6a:
                    7c:33:18:da:bd:bf:f6:56:0a:a2:35:e9:af:48:b6:
                    76:b4:52:ed:91:34:25:93:0a:c9:39:11:8b:31:41:
                    59:b8:04:51:98:98:de:ed:6c:66:04:ba:67:95:f4:
                    ad:c0:f7:1d:77:9c:1e:d0:f0:e4:8d:51:8d:28:01:
                    f0:36:fa:80:4e:97:4c:c7:01:9d:e5:8b:fe:6c:70:
                    ab:a6:54:1c:86:dc:d8:55:68:ec:2d:f6:7a:14:31:
                    64:d6:cd:bb:f6:7a:2d:30:6a:91:0a:7d:df:89:27:
                    ae:a0:11:b9:0d:e7:9e:d3:e8:f2:f4:50:d5:9e:e6:
                    e7:fa:7b:9a:c0:86:72:a9:c5:b1:4c:0d:20:cc:bf:
                    49:eb:d3:9f:0d:2f:0d:a8:7c:74:40:57:ff:9e:49:
                    f2:e2:92:8b:c6:73:f6:b5:df:d3:8f:53:82:b7:34:
                    4c:e5:53:4e:84:0f:2e:63:47:cc:aa:c8:43:56:c0:
                    d4:79:c4:93:19:35:47:10:e3:d4:a4:4b:5f:bc:46:
                    a3:6f:cf:c1:03:5b:93:2a:67:bb:1f:aa:f8:49:46:
                    10:c6:4b:e1:65:ef:8a:52:a1:14:28:a4:da:3a:cf:
                    70:13:3d:43:60:fa:42:b4:82:2e:8a:da:e5:88:c7:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D1:A4:31:6E:69:E8:F6:5E:1F:BF:9C:78:96:3C:5F:CE:AB:8E:69
            X509v3 Authority Key Identifier:
                keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:e2:27:f2:f5:79:92:6d:3a:02:34:b3:6e:f6:67:8d:8e:
         52:b1:92:11:f6:4b:1c:0b:5c:05:66:0e:0b:6e:05:7a:0f:fd:
         39:1b:d6:c5:90:e4:a8:c1:69:cc:46:82:2c:54:73:03:4a:c6:
         2c:d4:26:17:9b:22:32:88:b8:45:6d:02:f5:6d:77:f6:a3:c0:
         06:2d:6e:01:64:b1:68:9f:4e:6e:64:8d:1d:a3:66:e7:3b:bc:
         70:8f:dd:e9:a5:65:fb:48:2f:df:ce:e4:0d:02:0a:bd:02:1d:
         f8:73:c2:6b:56:07:7f:2c:53:12:32:32:29:f6:a4:2f:e2:ba:
         f8:7e:b0:da:5d:28:b2:55:83:8a:38:df:7a:c6:74:1a:a4:dc:
         1c:e7:6a:de:fd:bf:94:f9:b8:c8:6f:97:4d:b1:ea:23:a6:b7:
         30:d1:db:ae:af:89:7a:e6:0a:15:da:07:60:01:21:44:89:85:
         ac:c4:55:22:d1:ce:66:2b:1e:3f:2b:f1:cb:66:80:ac:51:81:
         9e:68:f1:18:e7:47:40:d6:0b:bb:6b:7b:68:1c:5b:d1:b0:1c:
         5b:ab:c0:83:9c:2b:61:39:73:9d:e4:e4:36:66:37:97:b3:55:
         c0:3c:f2:25:33:fa:bc:75:7a:d6:92:7d:3a:87:10:31:a8:e5:
         a5:4e:d1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBB9ziYqT8S159qewpZ4mIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMWMyMzU3ZTcwYjk3ZDAzZWQ3MGMzZDY4OGNlNTA3YzY3
NThkNTQwHhcNMjQwNjIyMjIwMDM5WhcNMjQwNjIzMjIwMDM5WjAzMTEwLwYDVQQD
Eyg1YmQxYTQzMTZlNjllOGY2NWUxZmJmOWM3ODk2M2M1ZmNlYWI4ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SmZrU85dBP4S9XVtGp8Mxjavb/2
VgqiNemvSLZ2tFLtkTQlkwrJORGLMUFZuARRmJje7WxmBLpnlfStwPcdd5we0PDk
jVGNKAHwNvqATpdMxwGd5Yv+bHCrplQchtzYVWjsLfZ6FDFk1s279notMGqRCn3f
iSeuoBG5Deee0+jy9FDVnubn+nuawIZyqcWxTA0gzL9J69OfDS8NqHx0QFf/nkny
4pKLxnP2td/Tj1OCtzRM5VNOhA8uY0fMqshDVsDUecSTGTVHEOPUpEtfvEajb8/B
A1uTKme7H6r4SUYQxkvhZe+KUqEUKKTaOs9wEz1DYPpCtIIuitrliMekrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvRpDFuaej2Xh+/nHiWPF/Oq45pMB8GA1UdIwQY
MBaAFB4cI1fnC5fQPtcMPWiM5QfGdY1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYt
NmRkY2ZhYzk3MGY3LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYtNmRkY2ZhYzk3MGY3
LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESDiJ/L1
eZJtOgI0s272Z42OUrGSEfZLHAtcBWYOC24Feg/9ORvWxZDkqMFpzEaCLFRzA0rG
LNQmF5siMoi4RW0C9W139qPABi1uAWSxaJ9ObmSNHaNm5zu8cI/d6aVl+0gv387k
DQIKvQId+HPCa1YHfyxTEjIyKfakL+K6+H6w2l0oslWDijjfesZ0GqTcHOdq3v2/
lPm4yG+XTbHqI6a3MNHbrq+JeuYKFdoHYAEhRImFrMRVItHOZisePyvxy2aArFGB
nmjxGOdHQNYLu2t7aBxb0bAcW6vAg5wrYTlzneTkNmY3l7NVwDzyJTP6vHV61pJ9
OocQMajlpU7RFA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:17:14 2024 by rpki-client on console-ams.rpki-client.org