Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File:                     HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier:          y8Qc1IrHDnb/cuGCccZBuwTeY9ODZ6BoTeIQADXK4rE=
Subject key identifier:   2E:B4:FE:F4:5F:4B:F3:82:B9:3D:21:51:9F:1B:87:99:64:B5:EA:93
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer:       /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial:       01901EC6B1C8752F8C15D6680677601709E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 02:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:56 +0000
Files and hashes:         1: BpYgfk3-41r-12o106KRT2kT9RI.roa (hash: 8Gf1OvvavvUeVCfHG7QnneJlS0dIPjqoWoG7ePHtK98=)
                          2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: 4M7qqUyMUDLiuKbEKKtNXYxeiy6nT1iNrcBrbRBCBcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:b1:c8:75:2f:8c:15:d6:68:06:77:60:17:09:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
        Validity
            Not Before: Jun 16 02:00:56 2024 GMT
            Not After : Jun 17 02:00:56 2024 GMT
        Subject: CN=2eb4fef45f4bf382b93d21519f1b879964b5ea93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:12:9f:f1:6e:6e:1e:62:db:26:b3:a7:4d:
                    f2:ab:6e:ed:bc:a9:d7:03:de:26:1c:33:6e:40:8a:
                    d4:90:76:26:ca:92:bd:d9:e7:16:c0:12:81:98:f1:
                    5c:80:14:82:d0:d4:26:83:fc:7f:25:aa:88:ff:88:
                    74:08:05:78:e9:7a:27:fb:aa:76:c0:f9:04:e4:f8:
                    51:0c:b5:46:ad:b5:44:62:84:b4:a7:b4:b4:b5:6a:
                    4c:a2:d6:2f:1e:49:4d:16:67:e3:8a:fd:41:23:b7:
                    5d:06:08:68:e9:db:63:30:8e:06:4a:cb:4f:ac:00:
                    89:a1:97:75:36:fe:de:76:a1:93:60:f2:3a:90:50:
                    60:46:94:9d:7c:53:6a:c7:c2:c6:99:86:db:6f:73:
                    00:14:35:c7:1c:dd:0f:53:bc:ae:02:05:f5:9c:16:
                    59:db:67:f7:00:34:35:bf:b4:d1:d9:91:4e:c8:f2:
                    8d:38:1a:9a:01:b0:2f:79:60:c4:fc:88:59:6c:e6:
                    8a:0c:e9:9f:fb:ff:5f:9e:6a:ac:d7:70:4d:4e:2c:
                    03:c0:2d:3a:c6:bd:8f:c0:b2:3c:b9:98:8d:2d:c5:
                    6a:eb:6c:4a:7b:1a:b4:88:f8:7f:c1:30:b0:61:dc:
                    bf:59:df:e5:7c:91:ba:3b:85:a4:ac:76:cc:72:9b:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:FE:F4:5F:4B:F3:82:B9:3D:21:51:9F:1B:87:99:64:B5:EA:93
            X509v3 Authority Key Identifier:
                keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:77:36:0e:30:c4:21:6c:ba:69:9f:17:66:f4:a4:09:e9:3e:
         a9:6d:80:39:f1:b7:b6:6a:23:f5:ef:13:b7:c9:87:86:5c:53:
         aa:8e:52:c6:73:2b:97:37:e3:72:2f:5d:d1:32:62:bc:3e:e8:
         fd:bd:c1:a0:67:ee:6b:2e:af:05:af:34:40:a1:b5:1b:71:2f:
         b8:f4:d3:b3:5e:51:76:06:f3:06:c5:4d:b9:3b:62:e2:0f:52:
         24:86:ee:e1:62:3a:f7:f7:ff:d4:c2:21:aa:f6:dc:d8:f2:44:
         b0:8a:13:fd:3a:bb:a3:30:00:5a:d9:66:a6:08:82:e6:f0:45:
         f1:f8:4f:90:74:8f:c2:c6:1c:45:be:48:a5:b2:97:34:87:78:
         40:85:f0:65:9d:27:a2:18:04:6b:33:10:84:74:15:2c:29:7f:
         e3:9d:12:ab:d4:49:db:f3:c3:bf:76:35:04:6c:cd:b5:e4:9d:
         dd:73:87:8d:21:1d:04:98:45:85:62:b3:c2:0b:62:e9:bc:2c:
         d0:26:78:3d:1a:c3:66:e0:11:6c:3d:cb:54:b0:98:1d:b8:8c:
         10:a9:79:ad:05:f7:c3:bd:5e:f0:ca:06:21:d8:69:bb:d4:6c:
         83:15:b7:3f:8a:cd:75:47:1a:e0:d2:50:52:8b:83:b0:8f:1c:
         50:7c:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:51 2024 by rpki-client on console-fra.rpki-client.org