Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          e3Nc5VNjNohKDFJSodrGks7WJmkXDYMZOmVCQqbmbeI=
Subject key identifier:   30:0D:A9:A0:4E:05:22:D2:F6:6E:75:7F:08:D4:05:F8:E3:31:6F:35
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       019356F67434E976EAD7B77B3435E5127BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          10B3
Signing time:             Sat 23 Nov 2024 03:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:12 +0000
Files and hashes:         1: AowOtO1H6kaN3cJqp89CzccGR2U.roa (hash: Rd9fp9AjL5AHCt40XcUrljzPdfglDXiODmvDMo0P8+Y=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: sWcC4r4nx18r6IdPBhBuysUHlOyejp4gduZq/gGIQ3o=)
                          3: dlv-naHwwybt8R3O-nXgjQLlKgA.roa (hash: MJmY1yz4Z+k2e4k6bqdDO4pQmNPRn86i3apCvU0JMAs=)
                          4: hJ-LD-rw40r7Ig_MPZhvIn-Q6T4.roa (hash: XYNREJQvCSJCtYhZ5Ppaw/vyoJcreYRERFNhuK+VGGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:74:34:e9:76:ea:d7:b7:7b:34:35:e5:12:7b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Nov 23 03:00:12 2024 GMT
            Not After : Nov 24 03:00:12 2024 GMT
        Subject: CN=300da9a04e0522d2f66e757f08d405f8e3316f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:3a:b0:ec:a2:8b:69:14:96:54:23:a1:10:
                    87:05:55:1d:79:99:67:f7:f9:26:26:6c:b0:5d:ee:
                    df:38:45:10:e8:c9:1d:0c:90:d9:e7:da:6c:77:94:
                    54:44:53:04:3b:0d:0a:46:a5:b2:8a:ac:25:2e:2e:
                    5d:c8:94:91:df:bf:38:07:f3:6a:87:ff:ff:e4:f3:
                    a9:6f:ed:87:0f:5f:25:51:36:76:4f:86:da:ef:fa:
                    2f:f6:00:0e:cf:27:71:dd:e8:db:72:3c:01:11:5c:
                    09:d9:95:91:7d:4f:ba:3d:8e:7d:9b:57:2b:f6:d8:
                    f1:fa:13:84:4e:b5:9a:59:63:d6:30:2c:6b:43:f4:
                    3d:0a:3a:5d:03:2b:7b:e5:94:5e:e3:53:f9:f2:22:
                    85:b8:56:3e:86:f4:3b:2f:e6:8b:a7:9e:96:6e:d9:
                    50:f3:d3:49:77:50:bb:95:c9:76:7c:97:6d:89:9c:
                    9f:ae:e4:e1:41:d6:2f:a3:05:bd:63:c8:22:17:ec:
                    19:43:a0:8d:ec:fe:0a:3d:be:c3:76:d7:bd:04:a3:
                    6b:43:d7:fe:da:11:d8:6f:fd:ff:9b:87:89:24:5e:
                    fb:13:db:61:81:ca:24:64:ad:06:86:4d:50:1e:f4:
                    1e:63:87:c7:ec:66:47:16:b8:00:3e:9e:5b:09:18:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:A9:A0:4E:05:22:D2:F6:6E:75:7F:08:D4:05:F8:E3:31:6F:35
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:82:83:51:e8:1a:98:d5:e4:86:f7:5d:13:2f:b1:e9:c5:a0:
         21:1e:01:80:22:cb:ec:7a:07:b9:7c:f8:cb:76:90:65:ab:77:
         bf:10:a8:82:a7:9c:61:e5:68:61:d9:22:24:37:c2:48:a0:f5:
         90:8b:a4:25:5f:72:83:23:f5:fe:29:3f:e5:a6:85:ae:c9:5b:
         3f:99:1f:b2:ac:42:b5:c0:09:e3:e0:be:96:d2:54:61:90:54:
         d6:e3:bf:32:56:c5:6f:ad:d0:53:a1:6b:58:d4:37:09:01:55:
         80:40:2b:93:f1:b4:20:57:77:6c:d0:f5:92:a6:46:8b:11:6e:
         df:34:02:87:47:54:f3:ce:fc:02:51:5f:65:a4:c6:62:52:30:
         ed:ff:d1:72:88:b6:b1:bf:c0:fa:cc:7d:0b:12:1b:8a:e3:53:
         58:98:11:2b:a2:fc:67:2c:66:ff:4d:cd:ee:b3:48:4a:57:13:
         a3:4e:6d:79:95:bb:0d:db:ce:28:03:88:d0:54:ff:b4:a6:d4:
         e5:e1:39:51:3f:8f:74:fe:a0:d7:d8:3f:c4:4b:ac:44:45:86:
         41:46:0c:b9:6f:fd:f3:e1:b1:e7:9e:ec:bc:78:2e:3b:e5:eb:
         bd:b6:8a:98:5f:55:70:1f:ff:f2:55:62:da:11:42:f7:3a:04:
         fb:43:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:13 2024 by rpki-client on console-fra.rpki-client.org