Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File:                     HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier:          6s3qXNCgKWmCW0/IQOcmTX6dbDNHp/VaxVbbqTT3C+w=
Subject key identifier:   77:05:AB:D6:AE:A8:C6:53:21:8A:76:5C:78:82:15:35:15:68:95:D3
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer:       /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial:       018F87ECFCF0DF9AC02B724443C9A93A577F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number:          0352
Signing time:             Fri 17 May 2024 19:00:06 +0000
Manifest this update:     Fri 17 May 2024 19:00:06 +0000
Manifest next update:     Sat 18 May 2024 19:00:06 +0000
Files and hashes:         1: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: Qap9wm19MqdWocAZDoyqv9YyiIaDwooDnkiK4G/1ubE=)
                          2: tzKg-9YAwy7JpxMOLtSFQN9qslQ.roa (hash: 18ap+dc4OLL48Vm0YNrxOhdMF36bWyeNl7dIfbOIQh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fc:f0:df:9a:c0:2b:72:44:43:c9:a9:3a:57:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
        Validity
            Not Before: May 17 19:00:06 2024 GMT
            Not After : May 18 19:00:06 2024 GMT
        Subject: CN=7705abd6aea8c653218a765c78821535156895d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:44:85:f1:cd:31:fc:71:9e:f1:c2:54:d3:
                    9f:34:90:2f:c4:06:38:f3:70:a6:30:de:7a:f7:0e:
                    10:e3:97:eb:8e:b4:20:dd:50:22:3f:01:74:0f:c7:
                    95:f3:fd:3e:6b:9c:67:5f:4a:40:65:4b:7c:ae:a3:
                    3f:e3:ff:c7:d6:49:71:e6:83:59:3f:c4:6a:f8:25:
                    47:82:da:20:05:b7:98:c4:5d:5f:37:79:fd:99:da:
                    13:43:9c:a2:81:81:c4:e2:8f:89:c9:70:7f:90:15:
                    93:3a:32:9f:b3:25:08:eb:f0:4f:97:c0:c1:a3:07:
                    91:55:0e:5c:a5:ca:8b:6e:72:47:43:96:84:1a:db:
                    50:df:55:32:0f:ca:b4:2f:eb:95:31:6e:7e:71:71:
                    05:dd:20:c6:f9:6a:72:a9:a4:c9:a6:50:4b:35:5e:
                    5e:a0:bf:5b:c4:8d:35:c3:bd:28:21:cb:96:53:2c:
                    78:cc:e4:a2:ff:95:76:83:2d:40:09:06:ac:e4:bb:
                    6c:f0:d6:c4:87:03:d7:f9:e8:8f:a0:66:95:83:e1:
                    82:33:bc:75:7e:33:58:ac:58:3d:be:51:9b:0b:81:
                    e8:e5:fa:f4:ae:77:7c:08:b8:45:75:d7:5a:e0:3f:
                    56:fc:d3:3e:8b:95:e5:11:91:ea:86:e7:86:e3:3a:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:AB:D6:AE:A8:C6:53:21:8A:76:5C:78:82:15:35:15:68:95:D3
            X509v3 Authority Key Identifier:
                keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:25:4f:47:33:4d:cc:d8:ed:68:0e:78:b6:8a:fe:1f:e7:80:
         c6:d8:1a:da:b7:db:d7:a7:fd:6f:2b:1e:b6:50:d0:0e:d2:67:
         07:bc:e0:bb:f5:13:66:ea:60:8d:94:cf:bc:ba:22:02:f2:7d:
         de:2f:88:8b:c5:ed:fd:10:48:e6:7f:12:19:69:85:1d:4e:4d:
         39:ec:b3:54:24:0d:a8:31:45:d1:74:4d:1d:93:a3:be:1b:42:
         b0:94:6e:bc:28:8d:1b:3f:c2:12:46:37:bd:7a:11:5e:1d:3c:
         c0:52:7e:ab:2d:72:92:76:3c:48:6c:91:e1:14:5c:88:48:50:
         de:cd:a9:e3:a7:8f:14:aa:7a:af:ac:fe:96:a4:a8:6c:c3:61:
         cb:2b:31:c3:d7:e2:4e:5e:3a:7b:cc:e2:86:70:af:30:2d:d9:
         54:e8:55:03:cb:48:d8:db:f4:98:af:8a:e0:5a:13:e7:f5:d6:
         92:76:7b:22:63:7b:9b:89:d7:c2:7f:ef:6d:8b:67:28:fb:91:
         da:d0:2b:35:11:6b:8c:bd:a0:d0:63:d7:1d:4f:9e:0d:87:82:
         fd:b6:36:87:2e:1e:2a:39:88:f4:80:b9:e3:17:c2:17:45:7c:
         63:73:cb:da:07:b5:54:da:62:ba:bf:91:33:2f:0d:ba:01:b1:
         f0:88:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:26 2024 by rpki-client on console-fra.rpki-client.org