Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File:                     HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier:          VXpPbODFk9EdALaWCudGnpcgTDWJHCi5HKFickG/voo=
Subject key identifier:   68:DF:91:3A:38:69:5F:4C:0A:7D:B0:5D:81:56:99:85:E0:61:5A:60
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer:       /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial:       018F8F046790D18B839DDDC66827E95EE67B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number:          117F
Signing time:             Sun 19 May 2024 04:03:01 +0000
Manifest this update:     Sun 19 May 2024 04:03:01 +0000
Manifest next update:     Mon 20 May 2024 04:03:01 +0000
Files and hashes:         1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: 38dfefp1Znpj7dlfvYLX6U+AIa2zH76ZJrHz/qQtUvY=)
                          2: hbmQ_G3fPa7CCkk-jq5zlzk9ikQ.roa (hash: CwUJZDJcRG66i3mH/5DhoXzoQtzWyIRgBnkuUGgYOB8=)
                          3: olN9MI_xWeqJPEy3ZoC17rEizZ4.roa (hash: lXI6TnqJ7/9bfcPq9RwBu9V6cBsDdGCPlSbhwhPTPxY=)
                          4: rFL_OsVIi0buKDrmwpl3OKxwweI.roa (hash: Ouu2ILqHrWU4UauB2kXGCTyshrJkoQahNCFtzVuD3bU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:04:67:90:d1:8b:83:9d:dd:c6:68:27:e9:5e:e6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
        Validity
            Not Before: May 19 04:03:01 2024 GMT
            Not After : May 20 04:03:01 2024 GMT
        Subject: CN=68df913a38695f4c0a7db05d81569985e0615a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:bc:a4:51:98:29:ab:c4:e7:75:64:03:80:
                    52:e5:28:4c:62:60:69:47:14:5a:58:2b:4c:76:1b:
                    16:10:de:4b:78:9e:65:78:8b:2f:30:64:02:5a:7d:
                    08:0b:54:b7:68:af:cd:b4:dd:a2:66:66:da:7f:80:
                    3c:db:f5:f3:3c:eb:63:6e:2d:e8:74:31:75:67:fb:
                    d9:13:0c:49:65:5c:de:4c:22:cc:65:89:2e:9c:2e:
                    23:31:75:36:bf:a7:58:00:16:ed:04:3f:55:c7:48:
                    64:b0:41:f1:70:2c:fa:6f:40:ae:21:5a:65:46:15:
                    ed:19:2a:b5:1c:64:b8:28:03:8c:51:16:3c:e7:08:
                    89:4c:d5:98:96:49:58:a7:64:1f:5a:65:6b:47:62:
                    31:ea:44:0f:ba:81:83:f3:09:f5:4a:98:bd:d3:91:
                    5d:e5:ab:d3:b5:60:06:02:b1:ca:d9:17:17:c6:68:
                    11:b1:55:b9:93:4a:73:5d:58:98:56:72:22:a7:84:
                    c2:5e:3b:0f:46:45:4c:8e:67:f1:d7:92:bb:a4:7e:
                    c5:3c:8f:4d:a3:24:87:ea:02:6e:60:f0:d1:e8:0c:
                    03:7f:a3:90:ac:f3:ff:5b:3e:45:89:35:ea:21:82:
                    98:a2:e5:83:11:21:2c:fa:8a:44:03:5c:44:fc:c5:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:91:3A:38:69:5F:4C:0A:7D:B0:5D:81:56:99:85:E0:61:5A:60
            X509v3 Authority Key Identifier:
                keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:01:e2:ed:82:8c:55:69:71:48:aa:62:29:94:98:76:98:52:
         33:25:90:aa:06:28:fe:92:db:e5:37:f4:81:4e:5d:09:ba:7f:
         c2:e3:9e:52:1c:ae:2b:5d:5a:bd:71:6a:69:ea:ed:b7:9e:ac:
         fb:1d:51:a0:98:66:82:88:f6:d3:d0:58:eb:f8:d9:a1:f8:4b:
         85:2f:a9:01:c2:b7:34:55:97:9a:e6:a3:a7:75:ef:e9:e2:9d:
         77:f1:bc:30:b8:9c:76:e3:78:44:86:3c:c8:42:90:5a:64:28:
         b5:73:5f:9a:43:1f:8a:cc:2f:0c:12:78:5e:16:90:af:1a:21:
         ad:ed:83:ff:bb:43:79:70:ae:99:1b:f5:14:80:a4:a9:f2:92:
         0b:2f:4d:24:b4:08:09:df:f8:11:4c:55:18:8f:e9:3c:3a:81:
         71:0e:9d:6c:ac:e5:03:cd:c2:98:38:68:4b:c3:e8:8d:ce:64:
         5b:96:61:1c:5e:49:ad:ea:a3:62:4c:8c:fb:31:5b:9b:ca:1a:
         f7:c1:20:7a:91:cf:ff:73:5a:48:0d:c3:ba:5b:85:87:00:b7:
         9f:f7:35:88:cd:39:bc:ac:26:33:3c:05:fe:69:d0:47:7a:29:
         3b:f9:15:d4:cf:ed:b0:2b:ce:61:01:31:ed:ff:58:07:56:3e:
         fd:a2:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:52:11 2024 by rpki-client on console-fra.rpki-client.org