Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File:                     hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier:          Zgf3k8NK4NPLkFZcnjfeCNR3vqeK0mraBkXtH7Wu0xk=
Subject key identifier:   74:E9:83:83:7D:CE:B8:5E:B8:DD:7B:C6:B7:AA:11:04:84:73:F1:B2
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer:       /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial:       018F7BB41BEE9C34A88DCA4C277A7ADDA0C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number:          1172
Signing time:             Wed 15 May 2024 10:02:32 +0000
Manifest this update:     Wed 15 May 2024 10:02:32 +0000
Manifest next update:     Thu 16 May 2024 10:02:32 +0000
Files and hashes:         1: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: mnwmeCFC2DBGjDc4o6TQOGrOD3NKyE85SHuu3qk4i2c=)
                          2: kpLt1oB6Q9zfjcxxEE_ITqjZGKI.roa (hash: yF68vHtN0vWxNPUXKz3rhJkczSu4tgXHqMX997aPDUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b4:1b:ee:9c:34:a8:8d:ca:4c:27:7a:7a:dd:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
        Validity
            Not Before: May 15 10:02:32 2024 GMT
            Not After : May 16 10:02:32 2024 GMT
        Subject: CN=74e983837dceb85eb8dd7bc6b7aa11048473f1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:d1:72:bc:36:c4:f3:26:32:4e:b7:fb:e4:
                    94:f8:d6:43:a4:e1:c3:7a:ec:47:c1:ae:16:81:82:
                    45:47:f5:05:c4:93:fd:55:d0:40:0e:6f:26:16:c7:
                    3f:96:a1:ee:f4:87:20:83:58:fe:30:1c:92:53:db:
                    cc:de:60:c0:b0:14:dd:c6:72:b1:5a:61:65:fd:bf:
                    87:f3:72:c2:6b:39:d8:94:ed:49:48:61:a1:99:b3:
                    35:10:5a:b2:a2:a5:4d:cc:74:49:97:43:c5:10:7f:
                    b2:8a:00:0a:fa:32:b1:f1:73:02:9a:d1:03:cb:14:
                    0f:16:24:d6:9b:c2:5e:6b:ca:cc:a4:e1:b8:0a:5a:
                    2d:d3:ac:a7:32:3a:17:2e:9a:b3:53:ea:29:7b:19:
                    ef:85:01:2f:00:51:4d:4b:a6:57:5d:0f:72:67:e5:
                    fd:ec:54:f0:25:b0:fa:08:27:e5:36:51:f9:b0:b1:
                    b0:74:49:98:2a:40:13:d0:c3:7c:00:6b:ff:16:09:
                    0d:86:56:cf:e2:ff:18:cb:89:39:a2:27:a3:a8:db:
                    33:67:e9:3a:b1:3c:ce:c8:f5:1c:82:9c:1e:c5:bc:
                    30:b5:78:63:de:5d:62:af:a5:26:47:c0:f2:01:77:
                    57:15:76:5f:38:98:9a:3c:3c:6d:f1:12:3c:7e:e1:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:83:83:7D:CE:B8:5E:B8:DD:7B:C6:B7:AA:11:04:84:73:F1:B2
            X509v3 Authority Key Identifier:
                keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:16:a2:22:65:4b:77:b5:6f:b4:ff:d6:1e:5f:82:d1:e4:de:
         fe:c2:08:96:69:fa:d1:42:b9:de:8a:e2:06:c6:0c:e2:36:94:
         a1:65:30:f0:d5:da:48:dd:f2:11:3e:f0:64:d2:8c:72:3b:66:
         c6:76:cb:ac:e8:14:5b:1a:11:91:6f:47:3f:73:59:a8:d4:8d:
         6e:04:cd:22:9e:8c:ad:1d:4b:23:7c:b3:a4:c3:ad:77:16:f3:
         09:2b:7d:ce:70:69:f7:f6:36:d8:29:93:5c:a2:ba:c6:f6:34:
         cf:a5:eb:14:31:3f:a3:be:21:d1:93:4b:63:df:2c:12:b3:f3:
         2d:f5:b9:77:3b:17:18:97:b2:52:94:05:26:b5:9a:55:1e:5e:
         0d:cd:b8:de:26:07:d8:49:26:2b:22:6b:5e:14:55:25:2b:ff:
         b4:a0:1a:fa:5e:f8:c8:d6:cd:a9:24:7b:3b:7e:df:0b:f4:b2:
         89:fa:8e:44:4c:85:38:a1:11:9d:9f:03:d6:14:4d:de:ba:f1:
         dc:79:88:71:cf:a9:41:bc:f2:58:05:9d:a0:7d:12:44:1d:6c:
         31:8b:ec:dd:29:6c:17:3f:b3:47:e2:24:0c:cf:53:52:ee:c7:
         d8:d7:61:c6:4b:e8:bf:3e:7c:05:d4:ac:69:24:2a:4f:45:9f:
         8c:33:a4:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY97tBvunDSojcpMJ3p63aDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjQwNTE1MTAwMjMyWhcNMjQwNTE2MTAwMjMyWjAzMTEwLwYDVQQD
Eyg3NGU5ODM4MzdkY2ViODVlYjhkZDdiYzZiN2FhMTEwNDg0NzNmMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHzRcrw2xPMmMk63++SU+NZDpOHD
euxHwa4WgYJFR/UFxJP9VdBADm8mFsc/lqHu9Icgg1j+MBySU9vM3mDAsBTdxnKx
WmFl/b+H83LCaznYlO1JSGGhmbM1EFqyoqVNzHRJl0PFEH+yigAK+jKx8XMCmtED
yxQPFiTWm8Jea8rMpOG4Clot06ynMjoXLpqzU+opexnvhQEvAFFNS6ZXXQ9yZ+X9
7FTwJbD6CCflNlH5sLGwdEmYKkAT0MN8AGv/FgkNhlbP4v8Yy4k5oiejqNszZ+k6
sTzOyPUcgpwexbwwtXhj3l1ir6UmR8DyAXdXFXZfOJiaPDxt8RI8fuF1UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTpg4N9zrheuN17xreqEQSEc/GyMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhaiImVL
d7VvtP/WHl+C0eTe/sIIlmn60UK53oriBsYM4jaUoWUw8NXaSN3yET7wZNKMcjtm
xnbLrOgUWxoRkW9HP3NZqNSNbgTNIp6MrR1LI3yzpMOtdxbzCSt9znBp9/Y22CmT
XKK6xvY0z6XrFDE/o74h0ZNLY98sErPzLfW5dzsXGJeyUpQFJrWaVR5eDc243iYH
2EkmKyJrXhRVJSv/tKAa+l74yNbNqSR7O37fC/SyifqOREyFOKERnZ8D1hRN3rrx
3HmIcc+pQbzyWAWdoH0SRB1sMYvs3SlsFz+zR+IkDM9TUu7H2Ndhxkvovz58BdSs
aSQqT0WfjDOkgQ==
-----END CERTIFICATE-----
Generated at Wed May 15 17:59:18 2024 by rpki-client on console-fra.rpki-client.org