Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier:          DQYH9hpoe7mGVDicLvRqhrxZCDXltWSciLRekmg3Pwk=
Subject key identifier:   20:13:00:92:BF:14:4A:02:33:AB:76:68:85:7A:5F:2E:9E:A1:C8:19
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer:       /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial:       0196515B30312B253AEEC245A967140C33A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number:          0C23
Signing time:             Sun 20 Apr 2025 04:00:52 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:52 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:52 +0000
Files and hashes:         1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: 0b0F3NIE66AyYO9QBlCDOf5pTMRKP+mHMIaVh1S45Bg=)
                          2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:30:31:2b:25:3a:ee:c2:45:a9:67:14:0c:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Validity
            Not Before: Apr 20 04:00:52 2025 GMT
            Not After : Apr 21 04:00:52 2025 GMT
        Subject: CN=20130092bf144a0233ab7668857a5f2e9ea1c819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:1a:a7:01:14:3f:c3:62:a7:c7:a3:eb:05:
                    1c:31:79:71:2c:0d:5e:e7:70:af:8f:6d:fd:ec:c5:
                    3f:34:31:5d:7d:20:77:c8:2c:7a:89:ac:ff:82:56:
                    25:48:0f:0b:ee:4b:be:b7:50:ff:fb:70:03:9a:22:
                    6e:52:0b:08:bc:04:5a:4c:50:f1:39:97:f9:86:e2:
                    5f:b2:af:3b:d0:05:dd:5b:7e:8f:51:94:7c:c2:d1:
                    3a:9a:5e:3b:4e:39:b1:80:9c:81:9c:ac:fb:b1:2c:
                    90:bd:c9:da:74:b7:86:b4:48:ca:2a:d1:06:f1:e3:
                    37:7b:bc:2c:23:39:ba:ad:53:f0:c5:bf:3b:aa:65:
                    15:f0:be:69:0e:43:c4:9c:33:c1:75:15:ea:24:d5:
                    b9:f0:1f:de:69:d3:17:73:18:43:c4:d2:91:39:22:
                    ad:69:a3:7a:84:36:11:9f:4c:3f:ee:c0:5a:57:e1:
                    9e:8b:ac:6b:f4:07:35:72:b3:b8:c1:de:bf:3d:77:
                    3a:16:c8:b4:10:c5:6c:81:4f:f2:ee:24:de:d5:0a:
                    60:ff:33:c7:d0:5f:f6:bd:b3:65:09:b7:7f:3b:2f:
                    74:42:bc:aa:0f:bd:19:b4:e8:07:30:bc:04:33:3e:
                    61:75:2e:7a:ed:57:93:31:52:36:34:27:72:74:e7:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:00:92:BF:14:4A:02:33:AB:76:68:85:7A:5F:2E:9E:A1:C8:19
            X509v3 Authority Key Identifier:
                keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:a5:32:f4:02:73:d5:6f:53:07:7d:ae:e8:d7:f2:14:68:
         7c:18:1c:e7:1b:de:db:05:1e:f5:8d:11:ea:c0:c8:c4:f1:88:
         cd:bb:fe:be:2d:16:79:df:f5:a2:a7:39:d5:53:00:c0:74:18:
         a9:42:57:66:72:1f:ad:1b:11:bd:b0:d4:2f:e3:9d:60:88:c5:
         b2:f2:89:63:e5:43:bb:22:22:df:09:a5:7a:8b:c8:62:5b:01:
         c3:7c:22:d5:97:c4:4b:e1:e2:58:41:70:c1:53:42:09:1f:a7:
         68:f2:df:0f:ba:7d:59:dd:8a:49:cf:2c:8c:ae:67:86:83:8d:
         43:ee:6d:a7:c2:9c:c8:18:bf:e2:5c:c5:f4:8e:ad:53:23:fa:
         c4:2e:cd:f7:1c:6c:41:27:23:dd:e8:5a:23:36:45:6b:d7:05:
         14:ce:2b:eb:12:e4:17:7e:ee:f2:d6:75:fd:1c:32:a9:e6:2b:
         d1:cd:c2:b7:e0:79:fe:49:0c:ba:77:7f:3a:bc:1c:2a:61:c8:
         16:fa:f2:4a:7e:c9:d1:aa:7c:fd:e7:41:4d:d6:fa:50:31:36:
         12:9d:ef:18:2b:f4:9f:e7:ba:91:2d:c6:11:2d:ab:fc:a1:de:
         a5:da:29:88:e5:23:43:d8:ab:35:0d:60:09:dc:33:99:f8:8a:
         99:50:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:07 2025 by rpki-client