Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File:                     HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier:          UXSboRuJx5jgI4Bpg+9ALxnX9lsLesT1rTclqqGOS3M=
Subject key identifier:   0F:61:34:8E:46:47:60:8F:CE:43:58:0E:5B:8A:D0:92:94:18:FE:3B
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer:       /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial:       018F89372942B61DCC7A04D852AEE53B50CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number:          1043
Signing time:             Sat 18 May 2024 01:00:44 +0000
Manifest this update:     Sat 18 May 2024 01:00:44 +0000
Manifest next update:     Sun 19 May 2024 01:00:44 +0000
Files and hashes:         1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: vyTcbGl1vj4CE6KKSMJqVrkSq2+tHxBBoongS1ZjVKM=)
                          2: abPR2jmYCGCdM2g_MuKwKH53ACQ.roa (hash: 5zk3AFPYv3C1J5Na4d0KqgTcctvCOKWFtY3MD7GkRIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:29:42:b6:1d:cc:7a:04:d8:52:ae:e5:3b:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
        Validity
            Not Before: May 18 01:00:44 2024 GMT
            Not After : May 19 01:00:44 2024 GMT
        Subject: CN=0f61348e4647608fce43580e5b8ad0929418fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:89:55:68:c8:1e:d4:1f:d3:a1:0e:0f:60:
                    7a:f1:94:66:cc:04:d7:37:e5:75:5d:ac:2f:13:41:
                    44:0a:56:62:06:7a:9a:2b:d7:35:cc:9f:85:b9:e8:
                    20:f3:8f:73:03:8c:8d:07:b6:f8:92:40:c3:56:10:
                    5c:3f:9d:ae:0d:1d:88:d1:05:db:e8:29:a3:e6:cd:
                    06:71:b5:0b:9b:5e:d8:4e:f2:63:cc:05:05:63:24:
                    bf:00:d8:bf:b0:04:c7:60:b6:87:69:cd:7c:7f:13:
                    51:c5:cb:20:fa:37:44:65:83:09:72:75:20:0d:c7:
                    29:ee:29:0f:d1:96:7a:b8:89:de:03:9d:2d:e2:12:
                    57:03:da:df:5a:49:5a:f8:22:ec:3e:f0:ac:cb:be:
                    b0:67:2f:4e:66:c7:8b:18:4a:da:88:40:b1:67:fe:
                    24:53:16:72:c1:27:84:5f:a0:cb:ef:1c:3b:8e:78:
                    87:07:eb:ed:f8:82:1c:ad:6c:32:44:73:3c:a2:af:
                    f4:e4:90:9c:6c:d4:ff:97:06:92:e5:d7:31:23:68:
                    d2:30:dd:2c:e1:72:97:77:ca:6d:da:1f:b8:35:29:
                    7c:a2:c4:da:c9:59:66:d7:35:13:cf:75:7e:47:fc:
                    75:7e:b0:33:c2:ca:9a:38:86:18:c7:d3:f6:94:59:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:34:8E:46:47:60:8F:CE:43:58:0E:5B:8A:D0:92:94:18:FE:3B
            X509v3 Authority Key Identifier:
                keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:e4:5a:44:00:ac:a4:24:7f:3a:14:d0:19:c3:9c:92:60:
         51:a7:21:84:39:17:b9:32:ec:77:34:48:19:8b:10:1b:e5:4c:
         b1:68:91:0d:fb:81:72:2d:ee:63:db:15:e5:be:32:79:da:d7:
         fa:5f:96:d5:0c:2d:91:a4:a0:81:06:3f:63:4b:46:96:5a:46:
         da:d3:b7:3b:ad:9d:d3:72:a8:5c:0b:d5:c5:cb:9c:ac:82:b6:
         8c:e1:ff:6f:49:9a:42:76:b6:c6:a4:38:1a:27:b6:5e:ae:3c:
         42:f6:9f:9f:06:a1:4a:bd:9b:19:1d:4c:bc:4f:bf:0d:df:1e:
         51:1d:ee:7c:09:18:52:52:92:d6:d9:ce:f5:39:65:50:51:15:
         f1:b1:0a:e6:57:25:42:68:f5:54:c3:ed:ff:e9:f9:49:98:1a:
         66:1a:ae:ba:fd:d8:ad:14:b0:d5:f1:5f:ee:93:cd:17:bd:ca:
         5e:fb:f1:a1:f1:d6:c3:08:f8:13:43:71:70:25:89:e2:68:3b:
         87:d3:8e:68:56:42:7d:fb:19:7f:3b:91:b9:7e:cd:bc:b6:bc:
         47:50:07:ad:c8:6c:99:e3:85:88:7f:90:97:93:28:07:7a:c0:
         1d:14:ba:7f:f6:6c:e6:10:c3:06:a4:0a:b1:2f:0b:21:ab:9f:
         35:02:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:34:20 2024 by rpki-client on console-ams.rpki-client.org