Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File:                     HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier:          n1K1vLatgLEFenjKun95ZbXcxdQRKtceHjfVwUW5F0w=
Subject key identifier:   FB:C2:6A:08:0A:C5:23:E5:9E:B1:EB:63:76:C9:30:1D:7E:BF:02:76
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer:       /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial:       018F3DE79645CC1BC0B51CDF01D05F89A94D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number:          0CBE
Signing time:             Fri 03 May 2024 10:02:18 +0000
Manifest this update:     Fri 03 May 2024 10:02:18 +0000
Manifest next update:     Sat 04 May 2024 10:02:18 +0000
Files and hashes:         1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: TFIA0NzqaRjeojNU0PfQByEw6fd7ScKR2WtPGs7juDw=)
                          2: UOaogj34cmZGe8Y0_eCCF00NfBQ.roa (hash: g6xRVJRa2Cc/f3C1Krl5SKQG40ohwUHFnEz8v4ULSbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:96:45:cc:1b:c0:b5:1c:df:01:d0:5f:89:a9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
        Validity
            Not Before: May  3 10:02:18 2024 GMT
            Not After : May  4 10:02:18 2024 GMT
        Subject: CN=fbc26a080ac523e59eb1eb6376c9301d7ebf0276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:d5:52:b7:26:e8:dd:c5:48:e0:af:fb:d0:
                    e4:e9:eb:f5:7b:9d:dd:fb:df:b7:f9:2e:6e:55:1f:
                    0d:79:c9:fd:da:da:96:4b:bf:52:a2:b9:ac:57:c0:
                    47:a7:7a:dc:84:ce:29:37:ec:6f:46:b7:5a:99:52:
                    12:28:34:12:e3:93:e7:a6:05:c6:71:09:b5:f4:4e:
                    fd:db:11:3c:50:2d:88:a7:c8:cb:0e:cf:88:a5:d7:
                    75:b3:ad:b4:f6:20:10:44:fb:60:d4:c8:38:40:b0:
                    85:e0:ab:d7:47:a6:b4:d9:85:00:04:f8:89:4d:35:
                    57:f3:09:79:56:d4:14:1d:5c:7c:a9:0e:5c:86:40:
                    b7:46:3b:60:61:ee:3e:c8:a0:d4:e8:33:c6:78:5c:
                    b4:be:9c:40:50:13:b7:66:c9:f6:94:60:2a:0e:9b:
                    b5:87:59:d8:c3:bd:89:ae:b5:ed:45:b8:c7:8c:07:
                    1c:c5:5d:8d:95:9f:1f:02:c0:12:dd:64:d1:c2:96:
                    51:71:03:67:80:8c:4f:d5:f4:42:c6:df:eb:24:fb:
                    97:dd:b7:b4:56:f9:1f:76:dc:1e:82:87:39:f9:d4:
                    b3:d7:46:d2:66:5d:cb:c2:4c:f0:17:45:cd:c9:a7:
                    64:0c:9f:20:49:8a:b6:2b:04:87:fb:76:a7:48:f5:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C2:6A:08:0A:C5:23:E5:9E:B1:EB:63:76:C9:30:1D:7E:BF:02:76
            X509v3 Authority Key Identifier:
                keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:74:3e:95:0f:f3:fa:6c:a1:b6:60:2f:9e:68:7d:5c:90:
         80:6e:68:81:7d:47:da:01:3a:a4:27:1e:4c:8c:6e:14:3d:b1:
         fd:9c:90:7a:ca:99:97:cf:f9:64:6b:83:73:66:59:5b:71:62:
         02:2e:54:10:a3:1d:e5:e3:87:33:85:61:2e:81:bd:df:9b:74:
         18:30:0f:35:f1:9e:c2:1b:cb:e5:d5:30:18:14:31:f9:2f:ac:
         75:f6:1d:23:2d:38:68:b4:44:d0:69:e2:fe:24:25:18:86:c1:
         bf:28:68:ae:5b:f8:ba:b9:29:d9:7b:f5:b1:5b:ae:57:b4:7f:
         91:12:09:98:29:4b:29:d0:87:95:7b:4f:89:7f:44:e0:59:d1:
         bd:d7:8f:da:42:29:36:6d:f6:37:98:18:73:5b:b5:e7:5b:c6:
         ab:d7:db:4d:41:28:1a:75:73:fb:48:54:65:e8:b9:91:29:dd:
         be:63:06:1c:4c:ff:53:6f:5f:5a:8a:52:e7:b7:fb:0f:ff:46:
         f2:c6:0e:73:2a:d3:e8:39:fd:f5:18:be:76:a7:a1:40:f3:d0:
         ec:bb:be:00:19:c4:2a:35:40:7e:66:4e:63:30:1b:f7:c0:f3:
         a4:39:1c:a3:47:85:3a:ac:bc:1d:eb:8d:51:50:74:ef:c1:95:
         6a:b6:71:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8955ZFzBvAtRzfAdBfialNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjQwNTAzMTAwMjE4WhcNMjQwNTA0MTAwMjE4WjAzMTEwLwYDVQQD
EyhmYmMyNmEwODBhYzUyM2U1OWViMWViNjM3NmM5MzAxZDdlYmYwMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbnVUrcm6N3FSOCv+9Dk6ev1e53d
+9+3+S5uVR8Necn92tqWS79SormsV8BHp3rchM4pN+xvRrdamVISKDQS45PnpgXG
cQm19E792xE8UC2Ip8jLDs+Ipdd1s6209iAQRPtg1Mg4QLCF4KvXR6a02YUABPiJ
TTVX8wl5VtQUHVx8qQ5chkC3RjtgYe4+yKDU6DPGeFy0vpxAUBO3Zsn2lGAqDpu1
h1nYw72JrrXtRbjHjAccxV2NlZ8fAsAS3WTRwpZRcQNngIxP1fRCxt/rJPuX3be0
Vvkfdtwegoc5+dSz10bSZl3LwkzwF0XNyadkDJ8gSYq2KwSH+3anSPVV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvCaggKxSPlnrHrY3bJMB1+vwJ2MB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOZ0PpUP
8/psobZgL55ofVyQgG5ogX1H2gE6pCceTIxuFD2x/ZyQesqZl8/5ZGuDc2ZZW3Fi
Ai5UEKMd5eOHM4VhLoG935t0GDAPNfGewhvL5dUwGBQx+S+sdfYdIy04aLRE0Gni
/iQlGIbBvyhorlv4urkp2Xv1sVuuV7R/kRIJmClLKdCHlXtPiX9E4FnRvdeP2kIp
Nm32N5gYc1u151vGq9fbTUEoGnVz+0hUZei5kSndvmMGHEz/U29fWopS57f7D/9G
8sYOcyrT6Dn99Ri+dqehQPPQ7Lu+ABnEKjVAfmZOYzAb98DzpDkco0eFOqy8HeuN
UVB078GVarZxZg==
-----END CERTIFICATE-----
Generated at Fri May 3 12:22:10 2024 by rpki-client on console-fra.rpki-client.org