Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File:                     HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier:          gBADCRzYHQXDxXNy0UV623U6O4FCCUvNhSoCzmIyY3M=
Subject key identifier:   DF:BF:3E:3D:F7:17:5E:4E:45:8E:BB:70:15:25:68:6F:7E:F1:AB:3C
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer:       /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial:       01935689B8BEAFF93A96C224C06648E3CCCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number:          105D
Signing time:             Sat 23 Nov 2024 01:01:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:26 +0000
Files and hashes:         1: 2EJoKkZ69K5RmhY5gB86we8Shjg.roa (hash: VsVIqDufZXnqc37AC67OrYcli+xhq+A24tzS1rqkULI=)
                          2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: fdcvy/VVqkaHEzm6KRov6R+DsiH/YdLdp4GoSBwsZrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b8:be:af:f9:3a:96:c2:24:c0:66:48:e3:cc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
        Validity
            Not Before: Nov 23 01:01:26 2024 GMT
            Not After : Nov 24 01:01:26 2024 GMT
        Subject: CN=dfbf3e3df7175e4e458ebb701525686f7ef1ab3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:5b:00:a4:43:41:28:13:3d:0c:f0:97:cb:
                    1a:60:f0:b0:20:6c:ff:07:2c:65:b8:20:5d:39:36:
                    4a:4f:6c:12:ed:4d:d9:33:58:6e:4d:0c:46:a9:a0:
                    6e:9e:81:20:e0:78:59:80:ca:0e:ce:6c:46:b2:7f:
                    1c:f8:d3:f1:a3:5e:57:54:0f:02:84:4e:3a:8c:8d:
                    e2:04:ad:c1:11:98:9f:d1:a7:e0:07:9f:a8:db:d4:
                    a7:12:2b:4b:cd:0f:42:0e:ac:23:b8:5a:fa:45:e1:
                    49:28:57:70:4c:c0:a6:a8:5a:b3:ff:cd:03:0d:cb:
                    87:09:40:8d:51:08:1d:fb:d9:b1:5d:49:51:ce:76:
                    4a:87:04:f2:10:ce:2f:67:c6:1b:e3:2d:dd:a0:ac:
                    78:8d:6e:5c:09:fa:a6:14:68:34:ef:d6:ea:0f:b5:
                    f6:0a:e0:37:b2:79:a0:9b:9f:ae:de:55:7b:bc:d8:
                    d3:b3:a2:6f:a7:4b:ef:52:04:8c:11:5d:24:4f:53:
                    f4:f7:28:f5:6e:e1:2c:1c:bc:57:ce:b0:64:42:1c:
                    67:5b:d7:c0:4e:6e:12:2b:28:67:76:ba:50:c8:38:
                    3a:ce:66:2c:76:d8:31:7e:5c:b0:5d:5f:dd:d9:33:
                    b8:72:ef:92:eb:b5:62:31:f1:22:2a:f9:84:3b:21:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:3E:3D:F7:17:5E:4E:45:8E:BB:70:15:25:68:6F:7E:F1:AB:3C
            X509v3 Authority Key Identifier:
                keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:c3:84:6f:27:ad:ba:a3:a0:2a:77:6b:02:69:c8:ac:c7:
         4e:ea:27:d5:9c:60:4f:03:7c:46:cf:1e:2e:ec:84:51:9e:13:
         6e:8c:5e:86:d2:85:83:ce:a7:2f:a6:4b:1e:ca:e3:0a:08:67:
         5b:ce:e5:d0:38:a8:96:ad:f0:5b:d1:c0:33:2a:7c:03:67:1a:
         34:96:f4:22:9c:63:36:df:1e:2b:28:3c:77:57:92:e4:ce:ac:
         ee:08:fe:89:eb:d7:88:72:0b:42:8e:5e:1c:42:62:46:28:e2:
         22:ee:06:d6:f4:43:fb:55:18:29:90:f2:97:12:ab:11:f3:1c:
         70:48:74:00:8d:ff:45:7f:db:82:b3:20:d1:c6:e6:ac:f6:9a:
         2a:0b:d2:82:0a:b7:75:3c:8a:ce:30:95:24:0f:ae:62:73:ae:
         cb:99:86:e9:45:0e:28:fe:d8:c6:ee:84:ce:84:d7:c6:0e:3f:
         76:2f:e7:d2:5a:a7:d8:27:24:2d:3c:ce:0f:8e:ab:32:46:c8:
         b2:94:65:09:cf:4e:94:4d:79:8b:00:73:68:65:d2:e5:91:18:
         a0:81:4c:eb:85:c6:7c:75:08:89:10:ec:7b:28:7e:e3:c9:9a:
         c5:a6:16:aa:08:60:01:d8:42:3f:6c:32:21:02:31:99:cb:1a:
         9c:1c:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:25 2024 by rpki-client on console-fra.rpki-client.org