Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File:                     HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier:          GlGdSFuHthY2dHsZ603KPo5vIt25gt5hojMyUY5wvJw=
Subject key identifier:   F6:8D:CE:71:EB:B0:83:F1:ED:73:1E:B3:8D:61:FB:C8:67:58:50:A4
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer:       /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial:       0193568B37E94405020E1CD82DA23DD7FF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number:          127C
Signing time:             Sat 23 Nov 2024 01:03:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:04 +0000
Files and hashes:         1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: wLWtsirO0wJkyGE19QaQ8JCShnqxIrFozmk4jEf83/E=)
                          2: V-egEL-e5Qt2X3uLrylhIt81zcU.roa (hash: 2cUJGNWl9y3cpo/6ZPOX4gBqR17NLjq0JYIRqG94PYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:37:e9:44:05:02:0e:1c:d8:2d:a2:3d:d7:ff:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
        Validity
            Not Before: Nov 23 01:03:04 2024 GMT
            Not After : Nov 24 01:03:04 2024 GMT
        Subject: CN=f68dce71ebb083f1ed731eb38d61fbc8675850a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c7:4c:dd:da:bd:87:b2:e0:a2:86:c9:4b:7a:
                    a4:52:9a:41:dc:6f:ed:b4:a1:db:c0:e0:51:ea:7a:
                    db:16:de:73:7c:01:cc:1e:0a:8f:7f:77:80:a9:9a:
                    5f:4b:a6:3f:6d:c8:c8:22:c2:dc:6e:1a:c6:e0:33:
                    47:9f:06:61:74:3f:04:ed:1a:65:c3:85:c5:56:e3:
                    7a:0e:f8:93:85:d2:7e:6b:15:25:77:6b:ba:3a:c7:
                    b7:92:46:94:40:fd:88:a2:87:c4:b1:4f:03:c1:de:
                    cc:08:03:82:a7:9e:c5:1a:8b:db:6c:38:fd:99:ee:
                    be:3a:76:1c:14:58:64:6f:58:ed:cc:17:94:ee:98:
                    42:4e:c9:48:c6:51:4e:31:f2:9a:62:76:4d:2a:6c:
                    c9:58:96:81:de:8f:32:8c:ba:74:42:a1:27:4d:45:
                    0d:ca:3f:61:96:af:47:9d:4f:16:c3:f4:01:0a:df:
                    c9:41:39:0f:0c:31:c5:fd:9e:50:85:76:f0:cc:e3:
                    ea:b2:39:fb:5f:ee:31:57:77:28:63:d8:9f:f9:88:
                    ab:d0:e7:69:68:87:3a:55:d6:54:81:35:c4:e5:81:
                    3e:d0:6a:c5:e3:c6:c1:e1:4b:43:22:54:b7:aa:10:
                    1c:9a:67:ce:89:fe:b1:88:08:c5:98:06:9e:f7:80:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:CE:71:EB:B0:83:F1:ED:73:1E:B3:8D:61:FB:C8:67:58:50:A4
            X509v3 Authority Key Identifier:
                keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:89:ad:2c:49:f7:ab:4c:b3:77:3f:fb:74:a0:d7:7d:ad:
         bc:ad:fd:d8:9a:0e:f0:4f:52:2c:4c:65:e3:a8:f9:ee:21:16:
         91:ec:6f:fc:d0:33:f2:a6:49:bd:1d:19:12:12:c3:7c:47:47:
         4e:34:df:66:68:f9:fa:fd:83:32:00:6a:88:f9:c4:bd:28:0b:
         b0:b1:c7:91:88:23:89:06:f7:21:8c:1f:c5:13:0e:be:fa:a6:
         5c:4f:e7:c9:2e:04:31:d7:30:6e:6a:39:98:4e:b0:25:d5:4a:
         4e:99:3a:f3:ec:6e:2d:55:18:c4:8d:bb:f2:5f:aa:3c:3a:e9:
         d2:cc:94:c8:9d:d8:80:35:a9:07:27:7a:2b:71:ff:79:f3:9b:
         1c:03:49:0f:82:8d:80:4c:5b:30:9f:32:44:2d:14:09:b7:88:
         2a:0c:09:05:da:13:84:5e:c3:a8:d0:69:b2:cd:12:40:26:87:
         a5:55:ab:e2:50:7f:88:f4:79:3a:b5:c3:c9:5e:e2:3c:e7:57:
         9e:b4:7c:10:77:35:40:5d:62:ee:4f:38:56:4c:fa:7f:a1:ff:
         86:7b:b1:30:b8:97:a8:78:d7:eb:64:f0:c2:50:16:d2:9d:a8:
         28:28:cf:24:66:de:e4:84:45:2b:c8:07:a8:f2:19:db:fb:15:
         81:6e:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:30 2024 by rpki-client on console-fra.rpki-client.org