Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File:                     HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier:          7STg0wew3co7hOuXSo82Tkw4Ja7o9HIb6HvD3t5exlU=
Subject key identifier:   F4:A9:F6:91:DB:C7:8B:32:8D:D6:77:44:DC:9D:B8:29:E9:17:EB:08
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer:       /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial:       018F3FD55449D29259782D23D53749EE50CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number:          0B52
Signing time:             Fri 03 May 2024 19:01:36 +0000
Manifest this update:     Fri 03 May 2024 19:01:36 +0000
Manifest next update:     Sat 04 May 2024 19:01:36 +0000
Files and hashes:         1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: 6yU5Wtd7An1kZ9XHvU1DHePgf2gy4Fj1ILqDtgpDAMY=)
                          2: ncoBLA1HDUTqidFJmrj7JUto9Aw.roa (hash: 9FMViztroUpmlun2KH3GUKCRJy1G+1yGs8243QRCjI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:54:49:d2:92:59:78:2d:23:d5:37:49:ee:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
        Validity
            Not Before: May  3 19:01:36 2024 GMT
            Not After : May  4 19:01:36 2024 GMT
        Subject: CN=f4a9f691dbc78b328dd67744dc9db829e917eb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:80:03:3c:35:28:f7:61:42:84:cc:a5:b6:
                    59:58:d7:4c:d3:63:c0:13:31:74:0f:e6:39:fc:5b:
                    43:c0:92:9c:6b:5b:12:14:a6:d4:ad:d5:e0:45:bd:
                    06:70:85:e5:f0:59:5c:02:68:46:85:f6:e4:5d:0e:
                    02:c5:be:0c:a0:a2:32:7e:32:d1:b1:6d:9d:f4:27:
                    a2:b2:dc:48:de:41:d9:eb:b9:0f:de:7b:98:1a:1c:
                    11:f8:50:1f:de:9e:b7:6a:d5:70:6c:76:bd:1e:a0:
                    65:c7:36:68:c0:c5:f6:25:98:13:15:df:d7:12:3a:
                    cf:df:48:44:4d:cc:19:d3:ec:a4:4e:f7:83:17:97:
                    d9:15:28:ff:83:83:39:85:05:0c:c4:72:9d:af:3a:
                    04:dd:02:85:7c:fd:17:5f:5e:c6:eb:11:ce:c1:e7:
                    30:b6:42:13:91:1b:e1:d7:27:ee:f6:dd:57:b2:4d:
                    bd:f7:34:73:00:d0:91:51:40:36:ee:0d:49:da:69:
                    6e:3b:ab:a3:39:77:5f:48:99:c9:5d:d7:9f:06:aa:
                    7f:25:f8:c6:fe:fe:95:51:41:20:6b:25:ee:35:f1:
                    64:4b:f8:8c:f3:18:50:52:88:dd:37:fb:df:d8:38:
                    87:96:1c:da:98:f6:ba:75:5a:c4:f0:7c:3c:67:94:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:F6:91:DB:C7:8B:32:8D:D6:77:44:DC:9D:B8:29:E9:17:EB:08
            X509v3 Authority Key Identifier:
                keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:ca:c9:60:3d:f4:25:97:10:c8:d2:e4:cd:ee:70:e1:eb:
         bc:c1:3e:c5:44:34:60:6b:58:2d:c3:bc:15:00:62:08:85:5c:
         b5:ac:9c:4b:35:f2:b6:ea:13:41:d3:8c:9d:23:68:00:9d:aa:
         c7:e4:c9:ed:13:f2:6c:55:29:39:d9:ff:4e:cd:d8:95:73:aa:
         aa:39:21:3d:2d:5d:0b:14:89:f9:c9:31:a7:8e:82:e9:6f:61:
         35:08:32:25:d6:54:a1:41:64:aa:71:5c:a2:2d:c4:ed:8c:f6:
         41:7e:28:73:ee:40:5e:1c:79:5f:bb:a9:64:b8:83:f1:60:15:
         2a:52:fd:b4:a9:ab:b4:85:00:68:11:81:e9:8c:14:38:12:bc:
         d9:dd:65:c1:f0:ce:c1:b4:a7:0f:fa:ab:35:97:73:36:2e:45:
         e2:c1:a4:a0:a7:00:ee:61:bd:97:61:42:a2:2d:ec:a4:fe:a2:
         cc:60:60:ff:a2:cd:50:ec:3d:d8:88:7a:af:0a:7a:71:b5:6c:
         34:22:27:c8:47:83:ee:23:cd:62:62:f0:f6:58:2e:72:1d:2e:
         ee:80:5d:bb:0d:b5:fa:78:1c:a7:1c:79:e7:c9:6d:19:bc:42:
         d2:10:a2:da:54:17:4e:28:46:b8:0f:01:d0:fb:7f:c0:67:1d:
         ad:c5:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:54:19 2024 by rpki-client on console-ams.rpki-client.org