Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          1ixPYBFR4Sal2kgUXd9GifMnyGxhf2egE0ykDk4EMgs=
Subject key identifier:   DC:C5:EA:0D:70:1E:3B:77:44:2B:BC:79:3F:52:83:9D:A8:38:CD:EB
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       019047C3312DF099FE894C24ACBA1E69A319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          1134
Signing time:             Mon 24 Jun 2024 01:01:32 +0000
Manifest this update:     Mon 24 Jun 2024 01:01:32 +0000
Manifest next update:     Tue 25 Jun 2024 01:01:32 +0000
Files and hashes:         1: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: B4wK4ddLlZoR7VARBOcnSn0bQR0J8ol6k1E5O45yMho=)
                          2: zp6z3WfXpBxhmUQVIX6JARr0tS4.roa (hash: rFyV9K4VUGMQTtUgBLXZI8iM3oPqLL1AUtOF072Sv6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:c3:31:2d:f0:99:fe:89:4c:24:ac:ba:1e:69:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Jun 24 01:01:32 2024 GMT
            Not After : Jun 25 01:01:32 2024 GMT
        Subject: CN=dcc5ea0d701e3b77442bbc793f52839da838cdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:4c:8f:31:e7:86:e6:fb:27:32:06:a0:77:
                    9f:1f:11:99:ba:c5:8a:d0:a2:bd:d7:cc:02:b9:34:
                    0a:78:68:37:c7:bc:53:0b:2a:2a:59:b4:94:30:77:
                    8e:1c:cf:53:02:b9:94:e6:f7:f0:49:c8:58:94:52:
                    93:75:a3:04:60:06:9c:da:a7:9b:b0:8c:66:ab:4b:
                    ef:d3:ec:f0:58:57:58:bc:67:2e:d2:9d:98:4a:b3:
                    fb:f6:43:0f:27:c4:ee:1f:f8:4b:6a:28:d3:e1:10:
                    43:cb:3c:bd:b1:d9:3f:c1:4a:01:56:00:1b:b6:be:
                    9f:5b:04:41:19:43:3f:5b:19:6f:62:b3:4b:5b:6c:
                    ed:7f:28:6a:14:bc:97:bf:79:20:70:c3:95:56:0f:
                    fe:7e:f7:fd:7a:d1:ec:9c:03:c3:29:a7:b3:18:ab:
                    cc:de:d1:ec:7f:55:88:f8:9d:4b:39:95:c4:5a:81:
                    75:01:bf:3c:c6:ad:e3:df:81:59:52:a5:47:42:52:
                    81:d2:1a:75:65:c9:47:c6:36:a4:af:9c:8f:d0:1f:
                    d7:51:d3:42:47:ca:38:2f:99:70:ae:8d:7a:40:0c:
                    23:60:cd:a1:60:04:2b:bf:40:79:09:58:58:5d:73:
                    31:bc:55:a9:f6:07:08:12:71:2e:24:04:10:06:b0:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:EA:0D:70:1E:3B:77:44:2B:BC:79:3F:52:83:9D:A8:38:CD:EB
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:d0:55:fd:85:35:13:e3:fe:98:fc:6d:9c:07:1f:ee:42:
         43:82:6a:fc:b7:a9:bd:7f:92:5f:19:47:6b:bb:01:dc:41:77:
         cd:e7:56:59:9f:1b:e0:a1:dc:7a:44:9f:32:7c:6d:f5:5c:87:
         7c:f9:ba:c6:bd:18:9a:46:cb:83:63:15:49:43:bb:b2:18:f6:
         9d:26:ad:33:5f:7e:b2:fb:5e:d6:30:b5:1e:89:4d:96:b7:e6:
         58:98:77:8c:cd:7a:a3:39:d8:b4:b0:f5:22:f4:8c:7e:8c:78:
         a2:9c:18:81:99:fc:42:0c:fd:d1:03:36:78:7c:9e:c3:c5:de:
         89:cc:c0:12:f2:f3:95:77:94:b8:87:c2:44:bc:95:cf:d1:8c:
         c4:43:f4:8d:50:0d:bc:bd:fd:21:84:87:c3:79:5e:52:fc:e2:
         71:2b:f4:3a:79:dc:0d:0a:03:b1:de:4e:0f:d4:52:32:de:67:
         12:ab:d5:78:5e:4a:50:fa:c2:87:6d:21:7a:32:af:9f:d2:82:
         de:1f:3a:62:84:d6:b7:16:2e:8d:a2:7e:a7:51:0d:f7:6c:a9:
         21:9b:bf:93:ef:b8:8b:5d:73:05:f1:eb:1e:46:99:0f:8f:5e:
         60:ce:80:0b:93:e2:66:a9:83:9c:17:e1:c0:81:9e:be:e4:17:
         76:1e:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:36:22 2024 by rpki-client on console-fra.rpki-client.org