Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File:                     HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier:          LyGe/bjCR4gU4To788ZK6BiN7yoAwti+Cbe9KBlyXUg=
Subject key identifier:   A8:47:5E:1F:F9:F6:FB:1F:54:89:C2:2C:BF:79:12:D1:CE:98:CD:5C
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer:       /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial:       018F3BFA0856EE6DEAA71FFA42F243EAD8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number:          0672
Signing time:             Fri 03 May 2024 01:03:12 +0000
Manifest this update:     Fri 03 May 2024 01:03:12 +0000
Manifest next update:     Sat 04 May 2024 01:03:12 +0000
Files and hashes:         1: 1qBPAmBGBfAENgWGXz9hZegMQqg.roa (hash: IXc2k+je9aQ1ozmEQWrqkeLFGTdEXbRD14Ph6wUfBRA=)
                          2: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: QbfpBKds679kjhOU5eTgO+zQhRWITuuYgQcOuzCCInQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:08:56:ee:6d:ea:a7:1f:fa:42:f2:43:ea:d8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
        Validity
            Not Before: May  3 01:03:12 2024 GMT
            Not After : May  4 01:03:12 2024 GMT
        Subject: CN=a8475e1ff9f6fb1f5489c22cbf7912d1ce98cd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:67:1c:2c:af:da:ac:df:a0:fd:12:7f:b5:
                    65:cc:7c:23:8f:f4:bf:ff:9f:74:d7:b4:6d:aa:b2:
                    32:e1:08:6a:c3:7d:e6:16:0d:e0:32:f5:c4:aa:ee:
                    3f:70:b3:e9:e1:97:d2:52:13:19:11:8a:9d:77:4b:
                    47:4a:da:02:37:ec:99:26:b5:43:71:3b:04:5d:6a:
                    1c:0a:17:64:51:29:9b:18:45:29:47:e6:43:ef:55:
                    ca:f0:c2:e2:f7:de:e2:e1:15:f7:ce:46:d2:74:10:
                    1a:4f:ba:96:3f:7f:84:ce:3e:13:dd:43:1c:73:05:
                    92:51:c2:30:fa:5f:ef:23:18:55:12:e0:d7:0d:23:
                    cc:fb:d5:d8:7b:0a:97:66:96:5d:fc:8b:d3:c6:68:
                    42:33:09:4e:2b:cf:15:2f:8f:5c:25:4b:90:02:08:
                    92:e2:2d:1e:39:10:0e:7e:45:d9:af:f2:5d:ef:35:
                    7f:83:3e:6e:90:1a:c0:90:ce:55:6b:de:0d:0a:67:
                    73:fd:37:a5:60:15:cc:a8:33:35:f3:57:7d:38:0b:
                    62:c5:b4:56:a7:e0:f3:77:aa:95:f4:c1:6f:63:e5:
                    87:2e:fb:b6:55:58:92:24:e6:c0:00:77:6c:92:1c:
                    3e:47:a1:bb:d7:e9:91:2b:31:4b:89:a2:af:3f:05:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:5E:1F:F9:F6:FB:1F:54:89:C2:2C:BF:79:12:D1:CE:98:CD:5C
            X509v3 Authority Key Identifier:
                keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:8d:6d:fd:46:b5:ef:d4:6f:11:34:a9:0f:9b:00:b4:c4:11:
         7b:4c:6e:8e:7e:fb:f8:53:d0:68:c1:92:a8:1b:ac:98:60:26:
         ac:52:de:d2:b8:35:69:97:c7:94:59:c3:d0:e2:d4:10:99:cd:
         d4:fd:92:a4:fb:2c:8a:f0:77:56:94:6b:37:0e:9c:c6:78:a4:
         b8:cd:00:bb:ec:8d:82:4e:35:95:25:61:b9:3e:01:c0:b1:96:
         b3:b2:15:98:a9:3c:68:ce:db:9f:60:20:fd:a4:3e:76:96:5a:
         09:c0:c1:74:19:d6:6a:f1:49:92:4f:42:a6:da:73:87:2d:5d:
         00:9a:82:ae:2d:37:02:e5:c1:39:c7:76:83:e9:5c:fe:57:53:
         13:61:87:08:64:30:54:cf:1d:8e:93:1c:1f:b0:90:6f:71:ac:
         45:85:25:e1:61:0c:25:91:cf:f0:51:8c:81:8d:b7:b3:35:2d:
         ed:36:17:17:28:23:b1:3b:6d:8a:33:8e:f6:4a:99:4f:54:23:
         1e:0b:ad:f1:2b:da:85:3b:a5:0f:87:0b:e5:e1:2b:56:bc:4b:
         0a:e6:dc:65:cb:12:52:b1:f6:ec:b8:18:36:05:d2:80:b9:ae:
         ba:2f:2b:69:ae:84:4c:17:26:67:f9:b4:4e:3e:02:81:8e:5d:
         f3:55:37:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+ghW7m3qpx/6QvJD6tjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDI2MDQwNmU4MzdhZTM4MzgwZmNjOGQ5OTJiOTNkMGRl
MWE4M2IwHhcNMjQwNTAzMDEwMzEyWhcNMjQwNTA0MDEwMzEyWjAzMTEwLwYDVQQD
EyhhODQ3NWUxZmY5ZjZmYjFmNTQ4OWMyMmNiZjc5MTJkMWNlOThjZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthFnHCyv2qzfoP0Sf7VlzHwjj/S/
/59017RtqrIy4Qhqw33mFg3gMvXEqu4/cLPp4ZfSUhMZEYqdd0tHStoCN+yZJrVD
cTsEXWocChdkUSmbGEUpR+ZD71XK8MLi997i4RX3zkbSdBAaT7qWP3+Ezj4T3UMc
cwWSUcIw+l/vIxhVEuDXDSPM+9XYewqXZpZd/IvTxmhCMwlOK88VL49cJUuQAgiS
4i0eORAOfkXZr/Jd7zV/gz5ukBrAkM5Va94NCmdz/TelYBXMqDM181d9OAtixbRW
p+Dzd6qV9MFvY+WHLvu2VViSJObAAHdskhw+R6G71+mRKzFLiaKvPwVp5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhHXh/59vsfVInCLL95EtHOmM1cMB8GA1UdIwQY
MBaAFB0CYEBug3rjg4D8yNmSuT0N4ag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzIt
OGMwZmFjYTNjYmQ4LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzItOGMwZmFjYTNjYmQ4
LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzI1t/Ua1
79RvETSpD5sAtMQRe0xujn77+FPQaMGSqBusmGAmrFLe0rg1aZfHlFnD0OLUEJnN
1P2SpPssivB3VpRrNw6cxnikuM0Au+yNgk41lSVhuT4BwLGWs7IVmKk8aM7bn2Ag
/aQ+dpZaCcDBdBnWavFJkk9Cptpzhy1dAJqCri03AuXBOcd2g+lc/ldTE2GHCGQw
VM8djpMcH7CQb3GsRYUl4WEMJZHP8FGMgY23szUt7TYXFygjsTttijOO9kqZT1Qj
Hgut8SvahTulD4cL5eErVrxLCubcZcsSUrH27LgYNgXSgLmuui8raa6ETBcmZ/m0
Tj4CgY5d81U3eQ==
-----END CERTIFICATE-----
Generated at Fri May 3 06:23:59 2024 by rpki-client on console-ams.rpki-client.org