Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File:                     HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier:          jhx0P2rLYm681BlLmV+gpAVNMBVHVxyyzv9MtB+T0E0=
Subject key identifier:   81:19:9F:96:EE:1F:C4:A6:58:5B:96:C8:8C:07:D4:D2:FC:E4:27:11
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer:       /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial:       01903BBE64FE7BD3CC0BB568992F95FD582A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number:          11D7
Signing time:             Fri 21 Jun 2024 17:00:51 +0000
Manifest this update:     Fri 21 Jun 2024 17:00:51 +0000
Manifest next update:     Sat 22 Jun 2024 17:00:51 +0000
Files and hashes:         1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: Jf8IO07Y9u5NVKHzda1xerK0iBzobNzBI/YZ+1tU9Bs=)
                          2: c6jmPxm6QNo7BT0i7_LRupo9C-U.roa (hash: 4i6Qq9Xs0mMF9rLEDQxasHhaWU6AsnktyD8wJFZZeFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:64:fe:7b:d3:cc:0b:b5:68:99:2f:95:fd:58:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
        Validity
            Not Before: Jun 21 17:00:51 2024 GMT
            Not After : Jun 22 17:00:51 2024 GMT
        Subject: CN=81199f96ee1fc4a6585b96c88c07d4d2fce42711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:78:2a:a8:35:f8:83:7e:23:d4:2f:df:c1:
                    ea:d8:b5:85:4f:b3:69:ef:22:fe:c5:78:e0:fa:d5:
                    c5:c4:51:b0:ef:30:73:76:9c:10:8d:12:9e:7b:ee:
                    8d:f1:ba:be:24:36:f8:a9:e1:16:96:6b:ed:b1:f5:
                    1c:4e:43:2e:9b:1b:80:db:83:50:2d:fe:ef:a1:96:
                    61:99:9e:08:f5:ff:b1:cf:a3:bc:b5:e5:5c:39:38:
                    95:53:9c:a7:9a:47:0b:18:45:a8:c0:b8:cf:ee:28:
                    5f:25:07:1a:f5:de:e7:9a:8d:d6:ed:90:a6:8e:b2:
                    10:8b:79:f1:87:85:a3:a9:28:f7:0d:07:d0:20:2f:
                    58:00:6e:6f:d3:5c:61:83:58:d1:9e:e1:e8:00:47:
                    f5:da:4d:45:09:06:18:4b:9e:ac:5a:33:0d:86:d6:
                    6d:b5:b1:3b:1a:bf:7f:c5:05:63:28:76:c7:73:07:
                    fc:d7:2c:33:c4:ed:7a:cd:21:3b:69:62:cc:af:4c:
                    f3:92:a2:60:a6:ef:a7:fc:35:c5:9e:89:a0:dd:9e:
                    eb:5f:35:53:dd:b7:8d:75:79:29:fb:98:f1:1c:01:
                    71:f2:a0:2d:e2:99:12:4b:05:94:5f:58:df:0f:1b:
                    38:98:62:6f:a5:c3:ea:b5:71:73:14:94:aa:2a:b6:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:9F:96:EE:1F:C4:A6:58:5B:96:C8:8C:07:D4:D2:FC:E4:27:11
            X509v3 Authority Key Identifier:
                keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:81:e3:63:18:36:7d:8c:e5:1a:18:f7:15:b9:3f:ea:f9:
         22:f7:34:a5:ae:d7:22:60:70:0b:fa:da:98:20:6d:29:f1:ef:
         fc:71:61:41:d4:8d:a5:cc:ae:31:92:8d:d9:ae:fb:cf:6b:1d:
         ff:83:08:66:26:8f:3b:67:e4:e0:30:0d:bf:ea:ff:b4:e2:34:
         23:1d:dc:a3:79:17:2b:f6:cc:35:3b:ab:5a:b4:9b:02:c7:d8:
         0a:e7:ed:ac:04:dd:34:2a:f0:8b:52:f2:18:98:a2:03:44:2d:
         e1:48:1f:e6:ff:8f:3b:ae:b1:ff:96:36:24:a3:ef:6d:8c:ce:
         2a:c5:6b:62:47:f1:ec:87:2c:b9:29:42:43:7f:72:9e:44:16:
         e7:41:28:ed:5d:01:a1:79:52:0d:af:db:84:a4:33:86:f3:39:
         42:91:bf:b0:57:cf:b3:25:4f:9f:23:cf:60:db:77:22:80:f6:
         5f:41:71:eb:29:ba:c8:60:00:9b:bb:b9:85:0f:0c:48:7f:cd:
         88:c2:40:1a:74:67:d6:ca:da:b4:a1:04:f3:b6:3f:d9:03:e6:
         76:ac:a8:dd:48:cb:80:c1:b5:d5:b2:94:6d:a1:3c:ee:b1:d2:
         83:4e:d2:ce:01:52:47:ca:64:67:ef:c6:75:09:4d:c1:82:60:
         76:a1:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:06:15 2024 by rpki-client on console-fra.rpki-client.org