Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          cYlV3bk+jbbTPZF7/gc7cMNHtco9FpsT31ZfqpYSmXY=
Subject key identifier:   01:C2:E8:52:80:BB:8C:BC:B9:A6:F3:C1:66:C0:6F:55:24:BC:F0:01
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       018F34ACAE91F81349374265BFC6345CDCE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          07ED
Signing time:             Wed 01 May 2024 15:01:23 +0000
Manifest this update:     Wed 01 May 2024 15:01:23 +0000
Manifest next update:     Thu 02 May 2024 15:01:23 +0000
Files and hashes:         1: AcbtCpkeifKVOqAmc3abPlNBcnU.roa (hash: UqtYT3ct7MBJJ18t4PNMtydmsIoHfWhqOCweV21ggVc=)
                          2: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: RznuFPcLkB1xwmHqsWg6/UjQKAc6r82pmJ1x8wF1xIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:ac:ae:91:f8:13:49:37:42:65:bf:c6:34:5c:dc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: May  1 15:01:23 2024 GMT
            Not After : May  2 15:01:23 2024 GMT
        Subject: CN=01c2e85280bb8cbcb9a6f3c166c06f5524bcf001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:fd:f9:90:01:ed:3b:f7:24:8e:31:fa:f9:
                    4c:c5:bb:25:c3:72:cc:80:45:91:47:a4:6f:d8:c1:
                    74:a7:10:1b:71:64:78:10:2a:e9:4b:28:a8:c4:7b:
                    75:57:92:4a:e4:50:2e:0a:6f:a0:26:23:80:1f:f8:
                    f5:96:72:d9:ec:81:6a:6c:a2:80:13:3b:e6:85:28:
                    40:75:2b:7a:a2:fd:30:e3:61:90:f7:13:60:28:c6:
                    74:1e:f4:42:96:d4:ec:57:bc:bd:7d:44:9d:fc:13:
                    5f:73:95:10:c4:b1:7e:4c:0d:39:71:b9:8d:65:40:
                    e0:08:42:02:60:f9:33:f0:42:cd:56:04:b1:e0:05:
                    d0:94:38:47:be:c2:07:ed:84:a1:f9:c1:2e:7f:e5:
                    e1:90:37:1a:fa:7f:79:1d:b3:b2:e5:db:bb:f4:d7:
                    78:04:c1:eb:9a:d0:3a:13:10:e3:40:37:0e:84:86:
                    95:6f:1f:f4:1e:44:38:66:dd:80:72:fa:80:d2:f2:
                    6a:81:09:e9:a6:28:d1:34:5e:db:49:74:1a:96:da:
                    46:3c:96:bb:82:d7:00:55:9e:89:06:6a:91:4e:8a:
                    f1:7e:63:80:2e:9a:39:cf:21:84:93:34:d2:f2:7f:
                    21:f2:77:b0:6b:02:3d:d7:7b:6a:1f:2e:62:0c:06:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C2:E8:52:80:BB:8C:BC:B9:A6:F3:C1:66:C0:6F:55:24:BC:F0:01
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:70:e8:9f:f6:02:f2:e6:37:26:df:49:93:6e:fb:f4:10:69:
         1f:f4:dc:37:65:0b:18:2f:66:6e:3f:24:e8:2f:2b:4f:6f:e3:
         ea:65:4c:80:a2:a5:7b:be:d5:6b:fe:ef:77:f8:2e:c8:36:2a:
         bd:cb:8c:4d:cf:4e:39:b2:ee:23:e2:eb:f0:fc:8d:3e:8f:ad:
         1d:10:e0:3c:6c:38:3c:a5:cf:2a:e4:f9:c0:37:61:9a:a2:15:
         2b:32:06:b6:ec:49:64:49:c6:6d:8e:ed:9f:eb:20:07:01:d0:
         b7:53:f1:ca:23:97:14:35:59:2e:92:f8:db:22:43:33:7e:0d:
         36:1f:03:26:d1:9d:45:9f:dc:23:52:eb:90:df:3b:02:e6:44:
         21:5d:6f:ce:ad:65:b1:7c:4e:7c:a9:f0:fe:94:e8:66:d2:b6:
         b7:92:f3:20:3a:13:fb:96:cb:b1:d3:e5:f7:4f:7a:47:2d:66:
         1d:5f:ce:67:59:63:86:17:df:83:98:da:c7:9b:be:e2:e3:b6:
         5e:7b:44:62:ef:ce:f4:20:6c:e9:7a:e5:77:12:dc:8a:10:b2:
         50:b3:3b:2d:98:91:42:72:bb:2c:5d:5c:2f:07:e9:0d:2c:c9:
         3f:67:cb:73:1d:dd:72:4a:fc:8e:40:c5:8a:df:e4:da:5b:ce:
         d8:55:8d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80rK6R+BNJN0Jlv8Y0XNzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz
NDQ4YTAwHhcNMjQwNTAxMTUwMTIzWhcNMjQwNTAyMTUwMTIzWjAzMTEwLwYDVQQD
EygwMWMyZTg1MjgwYmI4Y2JjYjlhNmYzYzE2NmMwNmY1NTI0YmNmMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJH9+ZAB7Tv3JI4x+vlMxbslw3LM
gEWRR6Rv2MF0pxAbcWR4ECrpSyioxHt1V5JK5FAuCm+gJiOAH/j1lnLZ7IFqbKKA
EzvmhShAdSt6ov0w42GQ9xNgKMZ0HvRCltTsV7y9fUSd/BNfc5UQxLF+TA05cbmN
ZUDgCEICYPkz8ELNVgSx4AXQlDhHvsIH7YSh+cEuf+XhkDca+n95HbOy5du79Nd4
BMHrmtA6ExDjQDcOhIaVbx/0HkQ4Zt2AcvqA0vJqgQnppijRNF7bSXQaltpGPJa7
gtcAVZ6JBmqRTorxfmOALpo5zyGEkzTS8n8h8newawI913tqHy5iDAbM7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHC6FKAu4y8uabzwWbAb1UkvPABMB8GA1UdIwQY
MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt
YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3
LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHDon/YC
8uY3Jt9Jk2779BBpH/TcN2ULGC9mbj8k6C8rT2/j6mVMgKKle77Va/7vd/guyDYq
vcuMTc9OObLuI+Lr8PyNPo+tHRDgPGw4PKXPKuT5wDdhmqIVKzIGtuxJZEnGbY7t
n+sgBwHQt1PxyiOXFDVZLpL42yJDM34NNh8DJtGdRZ/cI1LrkN87AuZEIV1vzq1l
sXxOfKnw/pToZtK2t5LzIDoT+5bLsdPl9096Ry1mHV/OZ1ljhhffg5jax5u+4uO2
XntEYu/O9CBs6XrldxLcihCyULM7LZiRQnK7LF1cLwfpDSzJP2fLcx3dckr8jkDF
it/k2lvO2FWNeQ==
-----END CERTIFICATE-----
Generated at Wed May 1 18:41:34 2024 by rpki-client on console-ams.rpki-client.org