Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File:                     HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier:          0LY1EwZfnoGtqT/OC5z5p94BpHLHlpzqBnYJXnWhfq4=
Subject key identifier:   C6:57:49:7A:1F:88:9C:C3:25:CD:65:17:81:3D:3E:3C:33:6E:4D:6F
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer:       /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial:       01901DEB934736643264FC64ACA3AF5AC998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number:          111F
Signing time:             Sat 15 Jun 2024 22:01:36 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:36 +0000
Files and hashes:         1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: /RMLgjPLpFru4NOJ+Mbuq80B1ncuOIG/wj2Rgzih9ZY=)
                          2: tjZDIne6Lh06R4o5e-okODsmQgw.roa (hash: SpruQ9gTaT5Np0Jbcr249Zlgr0yF1KQPIhU/7j1iDQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:93:47:36:64:32:64:fc:64:ac:a3:af:5a:c9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
        Validity
            Not Before: Jun 15 22:01:36 2024 GMT
            Not After : Jun 16 22:01:36 2024 GMT
        Subject: CN=c657497a1f889cc325cd6517813d3e3c336e4d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:b7:95:6d:b9:98:1f:8d:65:f5:6d:a7:a9:
                    cc:fa:2d:98:1c:ca:a5:b7:4d:1e:75:f1:5e:74:6e:
                    ae:ca:98:c2:92:f0:ef:a6:f8:0c:d6:48:f3:ba:04:
                    f4:ba:74:81:4b:1e:b9:6d:04:0b:72:73:8b:39:d9:
                    e5:4d:c7:8b:aa:f8:a8:00:6c:45:a9:e9:30:0a:0b:
                    8e:31:b3:e5:6e:6f:f2:9c:b5:b7:17:73:0d:d3:b0:
                    58:d1:c0:82:07:7d:7a:07:c0:f4:89:df:29:49:74:
                    88:9e:e1:f3:91:7f:30:84:49:39:96:f4:00:8f:b8:
                    9d:ec:5e:ae:cb:e8:74:8d:8b:8c:b9:70:8c:60:f4:
                    5f:50:d7:c2:6a:05:4b:50:f9:3a:ad:13:3f:60:a7:
                    77:98:9f:39:c8:60:02:ed:58:09:49:4d:1c:e1:18:
                    4c:f9:e1:08:a1:b8:35:9b:c8:80:b0:e5:36:fa:9c:
                    c7:fb:5e:08:e1:0f:47:fc:c6:25:5c:2d:2a:50:7e:
                    6e:26:ec:18:9f:40:c3:94:5b:d5:00:9d:f9:d0:b3:
                    c6:32:5b:79:e6:db:5a:e9:ee:a5:3d:e7:03:24:9d:
                    99:4d:35:06:bf:e8:d7:c9:d9:43:5a:0d:c8:a6:8d:
                    50:27:1d:63:c8:a1:a2:05:d6:69:49:98:0d:95:b4:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:49:7A:1F:88:9C:C3:25:CD:65:17:81:3D:3E:3C:33:6E:4D:6F
            X509v3 Authority Key Identifier:
                keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:36:27:3b:70:da:15:f4:1a:12:d7:64:49:8e:5e:50:2b:
         6c:f2:b3:2c:a6:4c:77:ea:8a:5d:37:21:26:3c:de:44:e0:e0:
         be:fd:a9:92:fe:af:f3:3d:11:4f:b3:5b:12:0f:b2:a7:d7:26:
         2b:0e:80:09:fd:76:6e:b1:c6:b9:3a:5b:ed:53:11:db:2f:8c:
         16:74:6e:2a:af:cd:72:31:e0:5d:61:76:3a:bb:c8:a8:0f:ef:
         a6:ac:fb:20:30:95:dd:03:b6:10:d2:0e:75:5c:40:4e:69:6b:
         69:7c:22:d9:76:94:ae:91:72:a0:95:6c:b8:29:ce:d8:15:ce:
         a1:3e:0f:e8:05:6a:ff:af:8c:32:cb:2b:47:0c:ee:6d:a4:66:
         06:60:87:67:d8:25:cf:84:62:46:33:8a:2b:b6:52:7e:26:f2:
         77:dc:3a:61:ca:24:d6:f3:13:c1:7e:26:26:49:9c:2f:d7:4d:
         43:bf:4f:be:12:d1:e9:d1:0b:5b:da:77:67:1e:6d:01:e5:5d:
         f7:5b:a5:87:36:7d:d9:d7:f0:d7:de:99:38:72:1e:17:74:c8:
         74:f2:76:b8:34:d0:f7:5a:0b:87:27:e7:41:33:e1:10:e2:36:
         e2:46:7d:95:78:54:9a:38:ac:65:b6:44:c5:f5:25:6a:3f:61:
         7b:19:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:40 2024 by rpki-client on console-fra.rpki-client.org