Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier:          xd08Q/b8NmItEyE8ETG/QFDB2O2OpAPdwc2tSRXIeYc=
Subject key identifier:   04:38:98:AB:81:12:F1:D2:4F:F2:99:8D:05:8E:0A:83:7A:99:98:ED
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer:       /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial:       018F40B0ECB827762DFB666C3428B95D2323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number:          087A
Signing time:             Fri 03 May 2024 23:01:27 +0000
Manifest this update:     Fri 03 May 2024 23:01:27 +0000
Manifest next update:     Sat 04 May 2024 23:01:27 +0000
Files and hashes:         1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: uqjdbt0o5wCkLn1v3JzG0iP7oZQIeA1POToM9TMOrtg=)
                          2: glzmuLP9p33EkxQbfpt1NZeugwg.roa (hash: 0h1DdJNF8BnB3VhY8eobyi3DOeHfjESlJJRNSVrmFRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:ec:b8:27:76:2d:fb:66:6c:34:28:b9:5d:23:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Validity
            Not Before: May  3 23:01:27 2024 GMT
            Not After : May  4 23:01:27 2024 GMT
        Subject: CN=043898ab8112f1d24ff2998d058e0a837a9998ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:37:fd:a3:ce:51:51:98:e1:f7:cb:35:5e:
                    7e:27:86:38:3d:33:5a:2e:3d:77:e5:73:89:fd:40:
                    8d:aa:67:7d:82:91:ba:c1:6c:e9:c6:2d:2c:59:23:
                    72:d3:27:0b:86:84:50:61:fb:94:c1:bd:32:54:6f:
                    75:14:a2:9d:ac:a9:6e:e9:06:1c:44:48:62:d6:8d:
                    3a:f1:75:4f:40:7b:54:5a:70:bd:d2:36:89:b7:96:
                    3b:99:e7:00:4b:12:c3:a7:a0:c5:c9:7c:af:ff:a0:
                    90:d3:2a:7a:9c:aa:cf:c6:9d:ae:4f:ec:14:20:a1:
                    86:83:ab:58:96:c5:8f:c8:48:ea:37:78:da:ac:9f:
                    84:1a:54:13:49:ff:d1:3c:d5:00:2f:85:4f:9c:38:
                    80:27:03:51:96:5b:45:5b:d6:14:55:ed:41:fd:fd:
                    16:4f:4b:be:11:59:98:f0:00:02:28:b2:bf:6e:0b:
                    42:a3:88:23:26:7b:c5:d0:53:9a:0b:04:e5:1f:c1:
                    9b:56:66:e8:f2:00:92:c5:82:29:a7:94:73:0f:47:
                    bc:21:1f:2a:ec:bc:ad:ce:bf:3b:d4:d0:f9:e4:ab:
                    53:85:4a:e9:f6:ed:b1:cf:99:e1:cf:50:cb:94:24:
                    01:24:33:4c:8c:83:f9:f8:6f:5f:6d:f5:f7:88:3b:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:98:AB:81:12:F1:D2:4F:F2:99:8D:05:8E:0A:83:7A:99:98:ED
            X509v3 Authority Key Identifier:
                keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:8f:3b:be:6c:ad:55:68:5a:a0:9c:ee:e6:9e:cd:d2:3f:
         46:de:93:22:8b:7d:6b:f5:ae:83:c2:3c:96:47:10:dc:fd:16:
         5c:2d:08:75:f7:65:9a:fd:46:01:e4:9a:dd:30:4b:3b:76:7b:
         ee:bf:43:3f:72:5b:5a:3d:b9:1d:0c:d6:8b:c4:d3:8c:21:2b:
         08:9c:a4:25:8a:6f:65:7b:12:ac:42:e1:5e:db:0f:e7:af:81:
         71:b0:cb:8e:90:9a:7d:9e:b0:9c:9b:1c:9b:10:6e:61:a8:2d:
         a9:cf:1b:67:91:f6:69:45:ff:5c:36:84:98:71:1c:21:41:20:
         b7:54:59:2c:c8:7d:93:82:00:b2:f7:5f:ef:83:f5:2b:3f:4b:
         c6:ff:59:af:bf:d4:2a:80:3f:bb:9f:fb:bd:93:90:60:e6:23:
         c7:ac:8b:bc:7a:5e:24:4e:31:59:85:35:91:83:0b:f2:e0:1c:
         cf:8d:01:f6:f1:98:43:4c:8f:2a:7d:0e:8d:ab:e9:fe:ec:2d:
         d9:23:3c:a8:ee:85:de:28:38:99:17:c2:7e:b4:4b:ac:9a:22:
         34:dc:c2:f9:38:4b:94:7b:39:6f:ca:62:68:d2:8e:ed:c6:f4:
         d4:7f:d5:be:5b:bc:b9:93:d3:ed:90:d2:9f:84:64:3f:9d:60:
         70:0a:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:55:22 2024 by rpki-client on console-ams.rpki-client.org