Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
File:                     HWI-1SywRCm7q1QHwW3_MFv9zAw.mft (raw, json)
Hash identifier:          y51imjrojeKxWSibbXwQ7hUsikiPEfN4foNSsBxk/Ds=
Subject key identifier:   F0:2D:A6:EF:F4:E4:95:C3:22:66:92:32:00:87:EB:AA:61:F1:57:AB
Authority key identifier: 1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
Certificate issuer:       /CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Certificate serial:       019510C780E7B5FE95BDC4DCEA762D224796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
Manifest number:          1127
Signing time:             Sun 16 Feb 2025 22:01:04 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:04 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:04 +0000
Files and hashes:         1: HWI-1SywRCm7q1QHwW3_MFv9zAw.crl (hash: Fnvtbs4Mh0m4MS1rzg+29X2D0BcSfvYKb1Bkuu98XkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:80:e7:b5:fe:95:bd:c4:dc:ea:76:2d:22:47:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
        Validity
            Not Before: Feb 16 22:01:04 2025 GMT
            Not After : Feb 17 22:01:04 2025 GMT
        Subject: CN=f02da6eff4e495c3226692320087ebaa61f157ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:12:6f:d1:46:50:c8:e5:07:b0:29:a9:8a:
                    cf:ea:70:2b:8b:d1:91:d8:f2:ee:36:18:ae:67:e7:
                    27:5a:54:55:14:d7:a9:a4:7b:eb:8a:e3:4b:e3:12:
                    19:7e:d5:62:d4:64:94:e0:a6:36:b0:e9:35:23:d9:
                    7f:b7:34:e4:5d:17:a8:bf:a0:8d:5e:20:05:4f:ee:
                    16:e2:a3:fa:19:b6:b3:86:2f:2a:64:0b:7b:9e:c0:
                    fc:e4:38:cb:53:03:e3:dc:44:53:25:ab:ef:56:58:
                    af:af:a4:d0:1b:9b:2b:ad:93:f2:c5:13:fa:fb:92:
                    32:d8:67:4a:fd:36:99:3b:e7:9a:c4:37:0f:49:8c:
                    fd:93:4e:bd:c7:cf:dc:f3:a8:7c:f3:48:45:17:8f:
                    63:17:d4:e3:c5:57:4d:af:74:66:6e:0b:bc:0a:f4:
                    62:a5:ff:7a:29:87:55:86:b1:2b:c4:c5:6d:f0:9a:
                    30:81:aa:f1:87:e0:dc:a2:33:4e:61:69:2e:c5:85:
                    6b:0e:cb:c9:08:6e:a3:58:8c:bd:26:56:e3:57:ca:
                    63:9a:16:28:ca:bd:1f:af:af:29:6d:b3:bd:d3:ab:
                    14:75:ec:4f:7b:99:64:60:1a:59:51:8f:ff:d6:4b:
                    23:01:48:70:56:96:d6:9c:1b:8f:39:a2:9c:a8:dc:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:A6:EF:F4:E4:95:C3:22:66:92:32:00:87:EB:AA:61:F1:57:AB
            X509v3 Authority Key Identifier:
                keyid:1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:8a:80:a4:35:4b:bb:be:bd:e3:6c:14:eb:21:94:39:02:
         f9:81:c9:d6:5a:d2:91:ce:7a:42:da:07:cd:fd:b2:06:e8:e3:
         3b:21:53:8c:d5:5c:aa:3d:68:50:d2:61:4f:fd:ac:60:fc:60:
         5e:6e:f4:81:e5:f0:3e:ba:26:ca:96:17:6c:c4:6a:8f:ed:38:
         c5:87:9a:ed:ea:61:c4:07:a6:4a:3d:fe:f8:22:33:19:f6:b7:
         b7:5b:40:52:14:f9:c7:5e:8a:86:0e:63:7d:55:7f:3a:cb:30:
         cb:b9:43:30:b9:04:2a:3c:b2:9c:8f:37:16:f6:99:e7:84:dc:
         19:f8:16:68:d2:89:8f:c2:ea:37:8a:99:5a:46:b1:a9:2a:5e:
         3b:cd:13:ca:4a:8e:2d:5a:9f:32:7d:f6:89:63:77:a8:b3:95:
         a6:3f:73:eb:97:f7:98:3c:5c:93:03:27:d2:54:a9:80:dc:3f:
         70:74:c6:08:2c:08:3a:f9:61:87:71:11:59:21:85:09:7d:c1:
         3e:9d:28:07:3d:cd:ae:9b:31:d5:2b:43:fb:c0:a5:5f:f1:96:
         56:75:4c:08:1d:67:d1:ca:95:8f:67:49:d8:0c:0c:3d:0e:54:
         45:59:1d:b5:85:79:d4:28:8d:c3:ab:59:8d:40:73:fe:9e:50:
         1a:89:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:21 2025 by rpki-client