Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          F/XgGnFVPyZtQABaLViy3xk/g84zUwskniiqOSAzSdo=
Subject key identifier:   05:AD:9A:F3:F9:4F:35:93:EF:C5:44:94:FD:DD:2C:44:7A:6A:8A:5B
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       01936A0F97DA42E1507C58369D801EA3805B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 20:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:26 +0000
Files and hashes:         1: A3ZwUm2cvRyDaQLdGlS3jxcUlBw.roa (hash: YCSlGkod9otKzYIoFhczf4fWnevysAgTCmasrW6/gbo=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: 9Zy+78yAYFuv0yw0jeOSndHxJEd6zJbGwbwrlrgvtQs=)
                          3: WuR_tfBCiX280lIcK8wWXeeU7JM.roa (hash: j09kBCrloWfzbGwGMoeGOloevFBOYgmaBJTYDzXEnzc=)
                          4: kAdBD6bImGsRRtw3CCA9gqbM28I.roa (hash: OgkJ7EQ0yl5QtvTXUd45VgwmMYIzi1O1jqBK0JxNPkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:97:da:42:e1:50:7c:58:36:9d:80:1e:a3:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Nov 26 20:00:26 2024 GMT
            Not After : Nov 27 20:00:26 2024 GMT
        Subject: CN=05ad9af3f94f3593efc54494fddd2c447a6a8a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:66:1a:05:d1:58:e0:01:40:d2:d7:0c:f7:
                    0e:07:e9:65:05:04:50:5f:38:ca:80:72:c2:09:a3:
                    df:ff:84:22:dd:2c:3a:17:c2:b4:59:2a:e0:a1:28:
                    52:19:32:bf:69:bf:fe:56:c0:86:1f:d5:ca:ba:6f:
                    c1:1e:18:41:f1:29:9a:31:24:93:0e:bd:c8:3a:69:
                    b8:80:be:95:c1:f0:e2:1d:79:2b:1d:13:7a:08:5e:
                    d2:1a:44:2f:7a:dc:c2:21:86:e7:a5:91:cc:25:6f:
                    3e:2c:be:7f:15:89:7c:9d:d1:f5:01:31:53:79:35:
                    4c:80:44:f2:9e:29:56:e2:34:17:8d:59:9e:33:27:
                    fc:2f:d6:a2:f8:10:b1:06:c7:05:f8:b3:ab:74:9c:
                    a8:b4:1a:07:46:b3:ef:b6:f3:a9:c3:64:74:83:aa:
                    9a:b9:d7:75:3d:83:1e:b6:4e:57:88:90:68:7e:bb:
                    3b:3a:3c:0b:e5:cb:7b:bf:06:99:86:e8:c1:d4:29:
                    e0:27:ed:e1:71:e3:23:6a:10:47:ad:fa:46:96:1b:
                    58:86:82:af:01:1c:23:58:65:b9:49:1b:f5:92:7b:
                    86:9a:05:06:c9:bc:71:18:fa:4c:48:12:c9:d3:e5:
                    3d:0e:f2:36:4b:f4:f8:80:17:a8:11:fa:02:9b:c9:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:9A:F3:F9:4F:35:93:EF:C5:44:94:FD:DD:2C:44:7A:6A:8A:5B
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:33:ec:7f:04:c2:03:1b:c0:d1:e6:80:7b:a1:9a:15:f6:b4:
         e2:55:23:de:76:00:0e:2e:62:95:0b:53:5f:3a:d8:a5:f6:3f:
         3c:f2:69:78:16:27:7d:9c:e3:2d:a7:0b:92:64:7c:fd:77:ca:
         54:5e:1d:1d:19:c4:cd:cc:8c:22:2f:5b:45:15:d7:c1:48:d2:
         d7:3f:31:c2:38:9c:69:87:e8:9b:19:9f:7b:7d:be:88:69:10:
         d0:8b:c4:5b:fb:7e:4b:4b:e9:42:48:08:39:0d:cf:3e:f1:e2:
         a3:1a:01:ce:2e:3a:a6:a3:8c:8d:62:6e:b6:32:26:d0:e7:68:
         0c:2a:f2:5c:f3:89:7c:65:b8:b4:74:3a:a1:69:a3:c1:48:89:
         42:d6:5f:2d:0c:54:28:c6:86:1d:20:28:d7:d8:08:17:aa:9e:
         a6:a2:1a:46:ea:2d:04:0e:80:d2:f9:6f:aa:92:3f:72:a0:dc:
         dc:00:7d:56:8b:71:4e:c1:4e:66:0a:87:0a:c5:fb:ef:69:1f:
         3c:a2:ef:ae:c2:4d:da:d1:56:54:6b:6b:6a:f8:85:43:d6:43:
         c9:b9:5b:de:d9:56:e8:cd:15:76:f5:26:70:c4:ec:d8:73:c2:
         b6:65:73:3f:0f:62:bd:b8:d2:aa:51:28:2b:f6:0b:0d:be:cc:
         a0:22:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:04 2024 by rpki-client on console-ams.rpki-client.org