Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
File:                     HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft (raw, json)
Hash identifier:          NyWdfq5kTC+GI8Ci90Pr+TtLR4uXhwabLSAQDvEdyh0=
Subject key identifier:   CD:94:0B:50:FB:F7:7C:71:14:D5:19:C5:CF:14:15:D9:73:EB:D6:52
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Certificate issuer:       /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial:       019369DA7D76F2ED74781D64278F300575F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
Manifest number:          1389
Signing time:             Tue 26 Nov 2024 19:02:26 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:26 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:26 +0000
Files and hashes:         1: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl (hash: tftYDQ7nrp5P/wgDYhMJ7xO/88HbrmSTp3d0rKu5GsY=)
                          2: Zs3HZZvhNeGlUxi0eYyrp6htg6k.roa (hash: RbjQzp0xbFwEjrDq90q8TMwd/UBrrUQ8xRO9liNoF40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:7d:76:f2:ed:74:78:1d:64:27:8f:30:05:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
        Validity
            Not Before: Nov 26 19:02:26 2024 GMT
            Not After : Nov 27 19:02:26 2024 GMT
        Subject: CN=cd940b50fbf77c7114d519c5cf1415d973ebd652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:fe:65:8e:08:eb:01:e8:a9:3d:2c:73:9b:
                    b8:26:bd:3c:df:44:71:b8:02:3d:f6:5b:e2:5b:6e:
                    52:98:ca:12:57:01:29:37:04:f7:e9:96:69:e1:b7:
                    5d:27:11:77:b8:03:18:1a:d8:1b:66:2f:94:bb:22:
                    bb:9b:42:33:82:b6:89:5b:fb:86:a2:d5:a3:80:70:
                    fc:ad:7e:fb:c2:38:03:87:14:86:bd:1d:65:45:82:
                    b4:e9:04:52:fd:a4:8f:4e:48:33:c0:29:f9:e6:69:
                    ae:d0:22:f4:c4:43:dd:81:bf:de:69:59:1c:64:b4:
                    6c:0d:6e:86:b5:cd:99:09:85:6a:10:3d:c7:ed:bb:
                    5c:fb:6b:d5:5d:ef:49:9c:e3:63:a8:44:24:10:66:
                    7b:e3:5f:5d:a8:58:70:f9:80:a4:6c:e3:d0:09:9f:
                    ac:8c:31:19:92:c8:dc:7f:82:ae:33:4a:ec:ec:18:
                    99:2d:3f:a3:af:a4:10:4b:77:e1:29:97:18:da:16:
                    d0:11:71:57:dc:cd:c6:4e:83:5e:d6:d3:c8:c3:a3:
                    41:09:54:8a:a4:ed:dc:ff:3d:41:33:c9:cd:d9:43:
                    4c:73:9b:69:56:98:bc:6f:ab:92:1f:71:42:9c:39:
                    8c:3b:65:be:e0:42:e8:18:7c:fc:77:12:8d:29:be:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:0B:50:FB:F7:7C:71:14:D5:19:C5:CF:14:15:D9:73:EB:D6:52
            X509v3 Authority Key Identifier:
                keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:73:e3:cc:1f:8c:46:60:11:09:96:17:16:f7:26:98:1b:62:
         9b:2a:02:65:78:6a:fc:83:6a:f5:8c:67:59:0a:73:82:23:50:
         d0:de:9e:27:2c:85:55:0d:50:ff:5c:06:12:78:c8:8d:b8:a6:
         50:43:0e:50:b9:31:19:dd:24:5f:de:00:fa:7f:c5:d7:15:99:
         2b:03:92:1a:d0:99:79:54:62:ee:8b:23:dd:f1:86:40:75:e5:
         27:de:be:30:88:1e:ba:25:76:44:07:b9:5f:39:d6:3f:f6:73:
         41:5c:dd:de:ea:c9:83:dd:a3:97:d3:79:a8:0b:95:5d:18:b8:
         57:8c:18:19:2a:4a:06:1d:c5:18:01:f8:04:a1:f8:c4:57:15:
         38:49:b0:8f:6f:11:00:a5:90:ed:71:45:e2:3f:42:39:c9:bc:
         4d:b0:0d:4c:cf:e0:65:d3:98:99:9e:d2:6f:b6:ce:7e:26:45:
         89:8f:d8:f6:9a:31:e3:71:ee:32:64:c0:ea:5a:e6:87:62:3a:
         9a:dd:11:2c:0a:34:d9:37:8a:a3:ac:60:fd:fa:59:7b:c9:96:
         de:d9:22:c8:10:93:4f:c7:7d:d3:82:14:a1:5a:16:59:17:7d:
         6e:d2:d2:ce:04:19:62:9d:58:ca:e4:dc:e7:fa:c0:57:95:a9:
         05:2a:a0:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2n128u10eB1kJ48wBXXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjFjNTQzODQ0YzQxN2Y2MWFkNzkzOTI0NGQzYjc1OWMy
YTQzZWQwHhcNMjQxMTI2MTkwMjI2WhcNMjQxMTI3MTkwMjI2WjAzMTEwLwYDVQQD
EyhjZDk0MGI1MGZiZjc3YzcxMTRkNTE5YzVjZjE0MTVkOTczZWJkNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R7+ZY4I6wHoqT0sc5u4Jr0830Rx
uAI99lviW25SmMoSVwEpNwT36ZZp4bddJxF3uAMYGtgbZi+UuyK7m0IzgraJW/uG
otWjgHD8rX77wjgDhxSGvR1lRYK06QRS/aSPTkgzwCn55mmu0CL0xEPdgb/eaVkc
ZLRsDW6Gtc2ZCYVqED3H7btc+2vVXe9JnONjqEQkEGZ7419dqFhw+YCkbOPQCZ+s
jDEZksjcf4KuM0rs7BiZLT+jr6QQS3fhKZcY2hbQEXFX3M3GToNe1tPIw6NBCVSK
pO3c/z1BM8nN2UNMc5tpVpi8b6uSH3FCnDmMO2W+4ELoGHz8dxKNKb6OYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2UC1D793xxFNUZxc8UFdlz69ZSMB8GA1UdIwQY
MBaAFB8hxUOETEF/Ya15OSRNO3WcKkPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlIRlE0Uk1RWDloclhrNUpFMDdkWndxUS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xNTZlY2QtZmU2OC00YmMzLWFlN2Qt
YjhjNDg1M2U0MmJjLzEvSHlIRlE0Uk1RWDloclhrNUpFMDdkWndxUS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xNTZlY2QtZmU2OC00YmMzLWFlN2QtYjhjNDg1M2U0MmJj
LzEvSHlIRlE0Uk1RWDloclhrNUpFMDdkWndxUS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnPjzB+M
RmARCZYXFvcmmBtimyoCZXhq/INq9YxnWQpzgiNQ0N6eJyyFVQ1Q/1wGEnjIjbim
UEMOULkxGd0kX94A+n/F1xWZKwOSGtCZeVRi7osj3fGGQHXlJ96+MIgeuiV2RAe5
XznWP/ZzQVzd3urJg92jl9N5qAuVXRi4V4wYGSpKBh3FGAH4BKH4xFcVOEmwj28R
AKWQ7XFF4j9COcm8TbANTM/gZdOYmZ7Sb7bOfiZFiY/Y9pox43HuMmTA6lrmh2I6
mt0RLAo02TeKo6xg/fpZe8mW3tkiyBCTT8d904IUoVoWWRd9btLSzgQZYp1YyuTc
5/rAV5WpBSqgCg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:54 2024 by rpki-client on console-fra.rpki-client.org