Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File:                     HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier:          YLlLrBLCtW4Mb0i3cBYQ3hQ+bMbgxAdvzxYssRtq54A=
Subject key identifier:   A4:E4:19:FE:98:3F:BA:68:58:52:95:02:2C:57:D7:31:DB:EE:7A:79
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer:       /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial:       0192381418B8B11969D39832436BD7963D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number:          024C
Signing time:             Sat 28 Sep 2024 10:01:34 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:34 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:34 +0000
Files and hashes:         1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: 601ILcGNVRqcQM5b8kD94a5GCeLZ2dNcF1EcUVmljZU=)
                          2: J1unj-KmXl3DMRFy-jdSyCL1JdM.roa (hash: pEPMgI14iUoGcFn85bI039mZGEUyIxQKOcrztRlqUdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:14:18:b8:b1:19:69:d3:98:32:43:6b:d7:96:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
        Validity
            Not Before: Sep 28 10:01:34 2024 GMT
            Not After : Sep 29 10:01:34 2024 GMT
        Subject: CN=a4e419fe983fba68585295022c57d731dbee7a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:8a:a7:e3:32:1b:dd:0c:ad:19:9a:a4:8f:
                    55:0a:3f:b0:93:c5:89:e0:66:38:8a:9a:b7:14:ef:
                    69:59:5a:cd:99:cb:76:c3:4b:8b:00:41:bd:33:36:
                    cd:a9:88:e4:4d:cc:b5:ff:bf:47:3e:cb:a6:48:b0:
                    80:4a:1b:e7:07:bd:77:4e:cf:5e:a5:fa:91:50:d0:
                    c5:40:28:65:b4:62:c6:6c:34:30:db:1a:ac:13:52:
                    e4:f5:b4:ac:a6:3e:a0:3b:df:c8:d6:b0:a7:3c:81:
                    80:eb:ac:93:04:88:20:f1:6c:19:ad:ea:ae:87:ff:
                    6c:1b:ae:94:a4:bd:0c:c8:58:2f:34:56:b6:11:b5:
                    fe:04:5a:cc:d1:93:11:5e:05:ba:b3:0e:98:07:1d:
                    50:fd:70:e3:99:2e:51:e6:0c:89:54:c2:8c:5b:d5:
                    c1:47:35:1f:1e:e4:1d:63:78:f4:14:25:1c:d9:ef:
                    3b:c4:b2:55:e0:9b:b9:41:96:dc:cc:7d:67:db:d0:
                    24:ab:b7:4f:29:33:72:1c:34:0a:d0:00:a9:75:4b:
                    50:fd:09:4b:f5:56:20:5e:ff:34:46:92:c9:f0:28:
                    39:41:fb:08:f7:43:36:b9:80:73:a3:4c:32:54:5f:
                    d2:7f:ff:ec:b6:4c:de:12:59:c6:91:4e:92:cf:cb:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:19:FE:98:3F:BA:68:58:52:95:02:2C:57:D7:31:DB:EE:7A:79
            X509v3 Authority Key Identifier:
                keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:25:5f:06:92:e3:5f:aa:7e:9c:3d:f8:3c:25:5a:95:2f:
         77:d8:9b:54:14:ef:18:a9:64:73:38:b1:24:2f:fc:e1:01:dc:
         74:94:37:3c:46:1d:ec:5f:bf:fc:6c:72:54:39:db:0f:ce:c4:
         5f:41:f5:0a:a1:1a:b5:9a:2b:e6:49:9f:74:69:89:5e:a7:12:
         b8:62:0c:c6:95:b4:1e:07:4d:b2:d0:b8:40:1a:a2:c8:58:f8:
         ba:f3:8a:7d:79:81:f4:b3:fa:02:24:1f:4b:e8:c8:a9:06:71:
         e0:4d:96:25:d3:94:27:96:06:1b:6d:77:b7:be:75:11:8c:47:
         01:bd:a0:6b:b4:87:3a:62:26:92:46:21:af:df:b9:99:e0:f0:
         a2:f9:db:98:f9:f0:98:cf:28:60:fd:d3:1e:24:ed:c1:76:65:
         04:73:5b:d8:97:d9:ff:39:1b:ed:d6:fc:8c:69:3b:a6:17:f6:
         a4:e8:2d:1e:3d:1b:66:fc:ba:6f:b1:61:c8:b4:e7:df:bf:92:
         de:e6:82:2f:54:e8:e7:94:87:75:e3:2d:bf:76:93:76:ed:be:
         f5:10:ff:7f:93:e3:f9:d7:e5:17:82:22:76:47:65:76:aa:f4:
         05:0b:2e:c6:f9:ec:9e:2a:cd:b0:0f:a6:d1:ac:f9:d3:a3:3a:
         20:c2:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:07 2024 by rpki-client on console-ams.rpki-client.org