Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File:                     HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier:          vuziq9u+qb490I7Xg6MRhaXoZr9nlHpQ4iffn6nO7qc=
Subject key identifier:   D5:17:1B:EA:49:6C:35:12:25:87:BB:F6:6C:8D:1F:14:EB:9B:60:39
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       018F51DB4543CA907EC0EF6129BA42E1D603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number:          1073
Signing time:             Tue 07 May 2024 07:01:15 +0000
Manifest this update:     Tue 07 May 2024 07:01:15 +0000
Manifest next update:     Wed 08 May 2024 07:01:15 +0000
Files and hashes:         1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: Se/WRpzLaZjrg+NFLb+UfEJJ0B+cMseXs3ZXT/7dnY0=)
                          2: jST4G8U5T2nuYRuh7a87izWqaHk.roa (hash: JGboW1aHV2Dgx/IXrSluk7A/dTvPu3DBgLskG8KPAjQ=)
                          3: ljV-KSzeT_fFae-RhEwCLRgiw3k.roa (hash: W5OCtWOpUFp49NNJfuL4QZvqxBS3H/UtxcdgREEuXNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:45:43:ca:90:7e:c0:ef:61:29:ba:42:e1:d6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: May  7 07:01:15 2024 GMT
            Not After : May  8 07:01:15 2024 GMT
        Subject: CN=d5171bea496c35122587bbf66c8d1f14eb9b6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:9f:e2:32:89:ac:7a:4a:a9:ec:82:f2:db:
                    1b:da:af:1b:1d:2f:87:e4:5b:49:96:ac:d2:1e:44:
                    6c:66:67:d2:7c:c5:21:37:c1:c4:48:58:cc:8b:78:
                    56:ea:99:7a:a3:22:ee:95:94:3e:54:3b:68:df:50:
                    99:09:eb:6d:d9:cb:92:e4:50:c9:5d:80:9f:07:e0:
                    23:06:53:64:a7:53:b8:e3:0e:df:eb:cf:35:41:bb:
                    ad:2a:b9:43:3d:a5:8d:46:a3:49:1d:43:9d:9d:d4:
                    c8:62:59:c1:4b:a6:e4:17:f1:46:53:6a:a2:9e:af:
                    c4:70:6b:3c:cf:1f:d8:fa:c4:93:50:6a:ed:1e:60:
                    2f:a4:9f:c6:bc:f3:69:42:87:22:b7:3c:5b:00:7a:
                    39:8d:ba:4c:03:9a:a5:bb:3f:06:bf:c8:ce:eb:19:
                    17:ad:46:23:ae:22:ae:0e:31:d7:50:3b:54:5e:d0:
                    b1:93:25:88:af:99:04:6d:19:08:fe:6a:0f:db:3b:
                    64:85:a9:5c:89:97:88:31:e8:81:4f:71:85:8d:11:
                    ef:3c:36:37:e0:03:80:4a:6e:19:5a:2f:91:f3:03:
                    a1:1f:e5:a4:f0:17:3e:03:2d:1f:9f:75:7c:fe:86:
                    33:96:d3:44:82:96:c7:6c:f0:9f:85:3c:58:89:f8:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:1B:EA:49:6C:35:12:25:87:BB:F6:6C:8D:1F:14:EB:9B:60:39
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:15:4d:2f:47:92:26:31:a0:e3:e1:86:9c:16:76:9d:3b:
         45:0f:09:20:e1:2c:77:bc:4c:bf:ba:b6:71:53:47:f5:87:52:
         97:96:55:b4:99:2c:af:ea:1a:00:44:26:c0:d0:31:a7:75:68:
         3e:90:5f:4f:e8:f1:a9:98:1a:51:dc:2b:24:84:bf:fb:4e:03:
         64:12:49:23:87:58:d5:fc:d5:8e:46:a0:03:31:65:a1:88:84:
         76:df:a3:aa:a5:9d:95:10:0f:71:cc:0f:ba:ba:92:a0:92:0b:
         60:8a:07:4b:ec:bf:86:cb:71:5d:17:7d:f0:bc:bf:94:cc:6f:
         aa:82:a2:32:67:d3:19:83:13:03:d5:40:af:a4:7f:d9:31:b8:
         c0:36:01:f9:48:fb:4a:fd:7d:fd:3c:d5:3b:8e:13:7c:68:40:
         ba:51:64:d9:81:f4:bd:a3:33:7e:70:48:65:99:af:52:18:97:
         76:16:66:ee:02:5e:54:d6:23:8e:7d:c7:cb:6d:ef:bc:b2:3d:
         05:9f:98:45:90:e5:c6:76:ee:71:fc:dc:1f:77:04:7f:fc:74:
         62:a2:e6:e0:c0:ca:0a:c4:fb:7d:94:ca:a6:12:a5:c1:34:da:
         60:95:54:03:da:a0:cb:2d:fb:8a:c2:d3:ee:a6:1a:c4:37:e3:
         9c:b1:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:00:36 2024 by rpki-client on console-ams.rpki-client.org