Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
File:                     HwGmewzRspUViU7OlrUurL4EG9Q.mft (raw, json)
Hash identifier:          gsVLo2J8faL2dfBuXnEm/oTyxdlBX+DZhqu7uIUFJ8E=
Subject key identifier:   6D:F3:98:43:5D:11:E3:3A:8D:BA:48:54:A5:95:EF:3C:21:17:5E:06
Authority key identifier: 1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
Certificate issuer:       /CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
Certificate serial:       018F41C4F0DA53B3F189E3B3F0362E0D0B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
Manifest number:          0486
Signing time:             Sat 04 May 2024 04:02:56 +0000
Manifest this update:     Sat 04 May 2024 04:02:56 +0000
Manifest next update:     Sun 05 May 2024 04:02:56 +0000
Files and hashes:         1: HwGmewzRspUViU7OlrUurL4EG9Q.crl (hash: 8pre3eVNBrp+lN3IPiC8F7mhmVOcgty6d/VP1fPxhLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:f0:da:53:b3:f1:89:e3:b3:f0:36:2e:0d:0b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
        Validity
            Not Before: May  4 04:02:56 2024 GMT
            Not After : May  5 04:02:56 2024 GMT
        Subject: CN=6df398435d11e33a8dba4854a595ef3c21175e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:cb:5e:b9:05:7d:d9:14:dc:e7:96:2a:a6:
                    f5:7c:27:b5:4f:9b:9b:52:c0:89:6a:95:89:75:60:
                    d4:20:a3:41:e5:a6:aa:f4:6a:19:a3:f1:fd:da:02:
                    ba:89:1e:03:e7:92:a9:bb:29:41:fc:21:64:8a:88:
                    a7:e8:67:da:c2:ff:2a:6c:0d:4a:c0:72:63:d9:a2:
                    b7:52:da:fb:02:7e:c1:46:a3:4c:c1:86:b3:0a:e0:
                    f8:3a:52:7b:dd:62:08:e7:bb:63:7b:e3:e6:b8:a8:
                    01:32:aa:7c:f9:97:68:b8:0a:da:77:b8:cb:d9:b9:
                    d7:08:1d:e2:c4:96:b7:64:ce:57:fb:ad:ff:5a:18:
                    05:0d:d7:19:0e:90:c1:f7:78:b2:b4:11:9b:3b:5f:
                    7f:1b:d2:2b:79:d7:78:4e:c2:98:84:67:86:aa:dc:
                    5f:f0:b6:4f:67:d1:a6:a4:e8:13:8b:92:77:25:6c:
                    16:1b:4c:48:d0:f1:b9:f6:ae:56:2f:64:aa:e9:2c:
                    d0:d3:c2:64:1c:8b:19:5d:4f:1f:b4:65:45:65:2a:
                    e7:89:76:41:f6:8a:c6:27:f9:1e:c1:53:de:66:f2:
                    d8:b9:49:7d:23:30:ca:9c:19:a7:f0:7a:89:ca:60:
                    5a:75:51:dc:41:c1:bc:72:50:87:1e:d7:c2:7f:32:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:98:43:5D:11:E3:3A:8D:BA:48:54:A5:95:EF:3C:21:17:5E:06
            X509v3 Authority Key Identifier:
                keyid:1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:8e:02:89:31:78:b4:fb:35:ba:5d:7a:e1:cb:2f:68:98:
         ea:7f:2c:61:ad:d0:07:79:4a:db:bd:95:f7:07:7f:0d:97:20:
         d2:57:0e:4f:81:e0:6d:ff:df:52:19:de:31:0a:4e:2d:15:05:
         92:9b:63:a7:26:ad:0f:67:fb:79:d9:0a:93:c1:f1:0e:b6:ac:
         ef:8e:57:ee:40:c4:a8:34:61:84:4c:91:13:54:32:d7:e1:41:
         a8:06:24:bb:31:0b:12:81:da:2c:8b:7b:06:ea:f9:b4:5a:b6:
         b9:83:1d:5d:fc:bd:ea:24:e5:24:ad:d8:dd:38:46:83:44:94:
         41:0c:ec:c5:ba:94:ec:64:af:f4:f2:e9:a4:2f:63:f1:e5:fb:
         86:39:58:7c:58:76:a2:dd:e9:e4:62:7c:cd:4c:ef:ea:ed:97:
         de:eb:e7:c7:41:90:5c:a1:44:1e:50:65:89:1f:be:25:01:2c:
         26:3a:46:17:2c:cb:39:89:cf:f6:c5:58:9f:db:df:64:52:9d:
         95:33:a3:52:48:26:28:fb:d0:7b:d3:e5:b7:e8:9f:93:b4:5c:
         de:9a:32:08:8b:e0:60:71:a7:c1:a6:95:cc:3a:96:42:84:9c:
         69:22:24:85:c4:3a:4d:bf:85:48:7d:74:3f:25:df:aa:25:18:
         66:18:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:01:08 2024 by rpki-client on console-ams.rpki-client.org