Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File:                     HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier:          eE0x/+zTP/eAVpt2wU0XfkGBGn+fVlTyHTsxcw8+SjY=
Subject key identifier:   48:E4:63:89:83:9D:CF:73:81:78:52:AB:B1:23:C9:2A:4E:E1:E5:68
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer:       /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial:       019406EAB6DD74A02FC01132F01CBA702EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number:          0429
Signing time:             Fri 27 Dec 2024 07:00:32 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:32 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:32 +0000
Files and hashes:         1: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: Hsg4jBLx0x0N7lNp3DyF9SbnX5GU/+5PYIIn2NrmEOY=)
                          2: bne_oo3EfRn38AF3NQPwMbJFd6g.roa (hash: GUEqbNxHSfMLsoXoGfkGCDzUkZZ7zSvUFjF2LJscWiI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:b6:dd:74:a0:2f:c0:11:32:f0:1c:ba:70:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
        Validity
            Not Before: Dec 27 07:00:32 2024 GMT
            Not After : Dec 28 07:00:32 2024 GMT
        Subject: CN=48e46389839dcf73817852abb123c92a4ee1e568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:3e:e3:40:18:b5:b2:28:20:d4:80:24:44:
                    8a:e9:75:0d:ab:2b:8d:18:3b:60:fb:50:a3:dc:02:
                    31:67:c0:4e:6f:27:d0:35:28:2b:f4:f1:7e:74:ce:
                    2c:c1:d1:fb:38:af:5c:d2:69:96:14:b4:80:04:aa:
                    26:4b:44:00:ca:6a:ef:59:c1:a2:51:9c:6a:88:da:
                    3c:98:08:c9:53:53:18:fe:63:90:5d:a2:05:ee:90:
                    1e:67:43:14:03:3b:73:e5:43:66:42:e3:79:dd:a1:
                    b4:fc:02:f2:b4:a9:c1:b3:19:1f:d1:75:7b:14:be:
                    5e:f4:a5:83:56:fb:10:bc:8c:b1:9f:f3:27:44:5e:
                    2e:18:f2:5b:27:80:e5:cb:c5:94:17:2c:f2:65:53:
                    f3:e5:b8:77:36:be:be:c9:d3:86:74:e5:54:54:0f:
                    bc:c3:25:68:38:9d:bd:c3:1a:ea:c4:68:6a:c7:f8:
                    c8:0b:17:31:ad:f2:45:61:19:71:8c:16:0a:b6:85:
                    2c:25:7d:6c:b4:ee:8a:52:b5:ca:9a:4a:6f:c8:37:
                    52:0d:c3:7e:3b:69:b3:5b:94:8f:34:5f:d2:54:bc:
                    6c:39:12:a1:59:02:ac:ea:ca:fa:70:fe:97:8f:38:
                    2c:c0:c6:da:e6:17:57:d6:6b:24:54:5c:b9:4e:90:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:63:89:83:9D:CF:73:81:78:52:AB:B1:23:C9:2A:4E:E1:E5:68
            X509v3 Authority Key Identifier:
                keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:af:ac:49:80:39:39:1d:00:ee:b0:8f:35:d3:00:40:b4:7f:
         aa:e3:03:4c:d6:56:ec:9c:0d:a6:cf:22:fd:ff:5b:40:31:81:
         9d:43:df:43:da:38:87:49:cb:19:f4:a8:42:42:11:f0:67:b2:
         f0:0f:d6:6d:b2:d6:e3:34:13:5c:3d:e2:4b:74:c2:bc:75:5d:
         e7:9a:78:7d:7d:f6:ca:1d:30:5f:7d:64:3e:05:9b:62:71:fb:
         86:0b:8c:55:d6:fd:14:97:27:98:43:6f:71:91:5b:da:8f:c6:
         a4:50:db:d3:9a:45:95:5b:e1:cf:0d:00:a6:8e:7c:50:c3:7b:
         76:a9:50:4f:8b:19:51:9f:10:83:28:e9:00:2d:36:73:0a:4c:
         95:38:32:ef:00:7e:c0:dc:32:39:a9:8e:4d:26:79:51:00:18:
         59:48:c1:12:0a:45:05:c9:02:31:49:c4:ef:68:2d:cd:fa:a5:
         db:ad:4e:ab:ae:02:3c:47:f8:ae:21:83:1a:d3:2e:98:87:0a:
         d8:7c:03:87:89:d7:26:f0:93:70:ed:62:3b:aa:e8:96:95:cc:
         24:6c:28:e0:25:8f:a3:7f:88:1f:97:02:bc:c1:8a:67:6c:02:
         60:d7:05:14:60:44:ca:80:ca:53:b0:df:70:2c:74:0b:53:28:
         0e:c5:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:50 2024 by rpki-client on console-ams.rpki-client.org