Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
File:                     HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft (raw, json)
Hash identifier:          gujabFhoCNjPSiAfvyC8cwHL/tQ2S4Ezbca39tvtQWk=
Subject key identifier:   BB:CD:A6:E7:8F:C7:CD:DC:DD:C8:3D:AB:73:79:F7:D9:2A:CE:9B:C0
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Certificate issuer:       /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial:       018F53264488F64ABABF40D1C16E17B70187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
Manifest number:          116B
Signing time:             Tue 07 May 2024 13:02:47 +0000
Manifest this update:     Tue 07 May 2024 13:02:47 +0000
Manifest next update:     Wed 08 May 2024 13:02:47 +0000
Files and hashes:         1: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl (hash: F+VnAYY2FiGTi/gJ/GUhu/NrSEte+pNbjBYaezemaQM=)
                          2: Zs3HZZvhNeGlUxi0eYyrp6htg6k.roa (hash: RbjQzp0xbFwEjrDq90q8TMwd/UBrrUQ8xRO9liNoF40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:44:88:f6:4a:ba:bf:40:d1:c1:6e:17:b7:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
        Validity
            Not Before: May  7 13:02:47 2024 GMT
            Not After : May  8 13:02:47 2024 GMT
        Subject: CN=bbcda6e78fc7cddcddc83dab7379f7d92ace9bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:4d:07:d6:5e:19:5d:1b:d0:9f:fa:14:e3:
                    41:54:fd:28:b9:dd:5e:a0:2c:7b:45:6b:e0:18:58:
                    8e:f3:23:35:33:2d:1d:73:62:f4:92:94:fe:b0:f6:
                    d8:e3:c5:f1:aa:69:4c:0c:8e:24:80:ab:e5:dc:ac:
                    21:ca:5a:9e:60:e3:5d:99:c0:08:ad:38:25:41:6a:
                    68:79:18:c1:46:0a:d2:f2:92:4b:d0:79:11:0d:35:
                    4a:98:ec:b1:df:79:cc:21:29:c4:2a:4a:a2:b8:d5:
                    26:cb:41:60:86:f7:00:d3:a7:4f:49:8e:e7:6c:6d:
                    8d:78:e5:ec:92:fe:c3:c0:f9:ad:16:0d:5a:3c:ac:
                    34:6d:ed:d1:48:d9:08:0b:7d:bf:ff:53:30:96:c5:
                    55:bd:30:07:5a:b7:87:9d:85:bb:33:ca:b4:a6:5e:
                    13:ab:2a:a6:c1:10:d7:42:07:9e:49:89:24:8c:64:
                    32:d8:a9:c3:71:d4:5e:d9:22:27:5c:17:71:c3:cb:
                    09:0d:c3:53:93:94:9f:cc:32:cc:59:cc:58:f5:16:
                    c7:5e:73:66:83:9c:e6:fa:8c:32:a4:fe:be:e9:92:
                    5e:8a:5d:10:21:6f:b3:e9:01:a9:ab:e5:6c:e8:5c:
                    13:03:d1:b9:4a:c1:3f:d4:29:84:f9:b4:cc:59:16:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:A6:E7:8F:C7:CD:DC:DD:C8:3D:AB:73:79:F7:D9:2A:CE:9B:C0
            X509v3 Authority Key Identifier:
                keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:43:23:7c:a8:cb:28:04:a4:93:09:6c:b0:1e:7c:bf:54:6e:
         3a:fa:4a:f5:0f:43:bf:6c:4f:96:67:e1:df:11:60:2d:5b:62:
         6b:76:ae:88:3d:1f:31:9b:42:ba:36:39:e0:09:e5:72:5d:7e:
         63:7c:fd:63:df:e4:14:d1:be:6e:a5:b8:2d:fc:b3:02:09:88:
         9b:05:21:28:6f:50:44:16:5d:96:4f:84:40:e7:a8:3c:90:06:
         d5:4b:0b:61:67:1d:73:41:87:20:22:bd:c8:f7:df:80:ae:12:
         ae:76:f3:52:b6:91:11:b9:6d:14:fb:f5:6c:67:d3:e2:cc:7c:
         ba:93:db:da:6c:e0:c7:04:02:f5:75:17:4a:51:89:59:2a:ab:
         fc:98:5d:25:3f:ad:40:c5:fe:e2:6d:f4:e6:cf:fb:42:57:61:
         42:64:2e:a8:9f:3c:77:b5:d4:ff:a4:df:96:da:73:03:07:b5:
         a2:2f:d6:5c:2f:ee:76:60:ac:ec:57:bf:04:e7:00:fd:5b:f4:
         f4:08:ff:ef:c0:23:ae:c7:9f:43:75:9e:d0:f6:52:2a:fc:b9:
         17:f2:cb:c5:81:5f:a6:c1:7f:32:6f:52:65:58:7d:bc:88:0a:
         74:f5:3b:56:9d:fb:bb:9d:5d:76:72:86:1d:61:bb:a5:8d:a0:
         44:bc:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:26:40 2024 by rpki-client on console-ams.rpki-client.org