Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File:                     HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier:          uij4ulrpDos+Fj5ai1a1knSAuCmSCaTSK30dC9CvqLg=
Subject key identifier:   81:A6:54:5C:3F:1D:82:F2:AF:E8:2A:1E:46:5F:4B:CC:C3:2C:87:CA
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer:       /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial:       019358792468634458CD7CB11BAAD7005CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number:          0893
Signing time:             Sat 23 Nov 2024 10:02:34 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:34 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:34 +0000
Files and hashes:         1: 1qBPAmBGBfAENgWGXz9hZegMQqg.roa (hash: IXc2k+je9aQ1ozmEQWrqkeLFGTdEXbRD14Ph6wUfBRA=)
                          2: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: fHM2Ojr06VwKs6XQNj9wWKYAza5kz622kQf3iFiHugo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:24:68:63:44:58:cd:7c:b1:1b:aa:d7:00:5c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
        Validity
            Not Before: Nov 23 10:02:34 2024 GMT
            Not After : Nov 24 10:02:34 2024 GMT
        Subject: CN=81a6545c3f1d82f2afe82a1e465f4bccc32c87ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:fb:bd:bb:69:9f:bf:d6:aa:d9:0b:7b:8e:
                    62:cd:ff:42:18:e3:5c:83:3e:ac:0e:78:3e:8b:58:
                    59:2d:a2:5d:37:09:05:7a:06:f8:2e:85:2d:00:57:
                    49:8f:54:90:4b:75:fb:b6:d3:aa:37:12:4f:f5:d2:
                    55:b6:28:87:8a:92:8f:b7:55:c8:e4:b7:ec:7f:32:
                    9d:ef:4d:f6:05:aa:d0:0b:7e:c3:7f:c8:c7:26:98:
                    61:62:40:c1:b0:70:d6:88:a6:be:7d:99:95:a9:85:
                    8c:eb:df:5a:9b:2d:64:88:92:b0:b0:86:b4:e5:d5:
                    94:f2:f9:3e:47:8e:dd:02:14:50:ad:39:5c:d0:b0:
                    f9:2a:e4:6a:61:08:b3:b5:17:ae:b1:d2:c2:99:4c:
                    3d:f7:33:60:d7:99:4e:3c:91:da:b0:66:d7:cc:8d:
                    d5:ba:dd:83:05:5f:c4:e9:02:4d:3e:74:03:7b:84:
                    1a:22:01:a2:47:64:be:7a:94:d9:a8:4b:2a:72:11:
                    d5:f2:c2:cd:5d:ea:ea:7b:7b:5c:1f:18:2d:93:56:
                    b1:52:b0:99:6f:b5:ac:1b:9c:f5:34:d2:07:8d:02:
                    a7:99:5f:fd:66:3d:8c:2e:d2:6b:ad:5e:1d:26:6c:
                    92:28:8f:e9:21:05:a2:aa:3f:e8:a2:dc:44:79:41:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:54:5C:3F:1D:82:F2:AF:E8:2A:1E:46:5F:4B:CC:C3:2C:87:CA
            X509v3 Authority Key Identifier:
                keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:06:ac:db:0e:42:c0:4f:da:47:17:06:38:2e:d4:27:15:
         c0:fa:59:48:d7:05:0d:e5:f6:93:38:12:75:65:fb:3c:2c:50:
         32:37:2e:e7:ee:0f:f6:70:7b:0f:3a:c5:5e:f6:ec:7f:00:04:
         da:29:0b:5e:7e:2d:42:e5:6b:db:ce:28:34:12:39:c3:8e:f1:
         6a:4b:28:a7:5f:f9:cd:ce:0e:64:9c:74:c2:28:e5:a1:5e:73:
         bb:88:1b:a3:84:4a:55:90:06:78:4d:fc:64:70:62:ee:5f:14:
         68:9a:2c:81:74:7c:bb:d9:9d:10:59:01:96:ac:f5:05:2e:10:
         65:11:0b:45:a5:e1:96:54:8b:b1:53:4b:40:c0:03:f9:b4:27:
         ac:b0:c8:82:44:b8:4a:7c:d0:3d:d5:7d:d8:fb:aa:6a:73:15:
         c8:ea:f8:c9:9e:f3:f2:f4:e6:7b:0a:cb:fc:8c:be:35:32:3d:
         bf:bb:08:6b:84:38:d0:6b:ef:47:7e:8d:29:b4:86:fe:e3:cb:
         a1:43:5a:4e:00:e4:83:b8:6a:15:6c:d5:01:21:fe:a2:47:60:
         c1:2b:24:78:ad:e6:ae:2f:1c:9b:a8:7e:8c:d6:d9:06:ca:22:
         00:84:7f:96:b9:45:27:35:ab:70:8b:62:bc:f0:46:f3:ad:cd:
         62:4e:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:35 2024 by rpki-client on console-fra.rpki-client.org