Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          NnhgxD9ss38iiCiaU3VR8iEs/AHMoSOVgrPQ/+r5AWk=
Subject key identifier:   BE:71:11:FE:8F:C4:41:E2:6D:0B:FF:94:9B:C1:7C:E5:14:AB:30:73
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       019406476F4751902DBF7325343F8902D88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          13D4
Signing time:             Fri 27 Dec 2024 04:02:12 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:12 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:12 +0000
Files and hashes:         1: BaEihTi1C26SE417AYiSDifgW0c.roa (hash: aMN2juILFAbzUnAtdWmCCBswxxnsYUZt5W4ZamRpASU=)
                          2: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: f7jBjjaU8is9yiu0QFJWC4bdzAXDekT7juyO+ruYBm8=)
                          3: fq44sJ-yDKII-inn7F_SCdD7J50.roa (hash: egft+tGahzOEKuItQwgce2CC9qRH/wMRfbVytAX5axQ=)
                          4: qQ2S_v1o6l5_Q6RFXmJZaKJIlsA.roa (hash: tXmmUIT0+1v7j+nxhgkj+8EyLOcGdZTKF+BbnAuS6Zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:6f:47:51:90:2d:bf:73:25:34:3f:89:02:d8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Dec 27 04:02:12 2024 GMT
            Not After : Dec 28 04:02:12 2024 GMT
        Subject: CN=be7111fe8fc441e26d0bff949bc17ce514ab3073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:ca:b3:9b:e2:0f:f7:4e:35:ae:0b:a1:d7:
                    2a:f7:4a:43:bd:b0:07:42:d4:4a:2c:45:b6:fd:d7:
                    61:bb:77:e7:f1:01:fc:d7:74:61:a8:67:0f:23:c1:
                    13:57:49:45:25:53:22:b5:55:12:bc:a8:e5:e3:7d:
                    74:84:bc:12:ca:d4:db:38:79:41:06:bf:f2:30:52:
                    88:05:de:39:e8:c1:9d:39:cd:67:e6:56:ae:b1:46:
                    08:6d:c8:5a:f3:58:37:48:cd:fa:6a:75:af:68:eb:
                    ba:80:07:65:01:83:49:c7:b3:4a:3b:38:d9:b9:36:
                    6f:99:f3:0f:6b:d4:11:ed:4a:a9:bc:2a:79:10:9d:
                    69:77:f2:3b:02:1f:fc:4f:17:66:e9:73:cb:0c:f9:
                    ef:63:cb:3e:99:7b:df:7d:85:77:c4:63:98:c1:d0:
                    cc:84:cf:4a:dd:3a:6d:6b:f4:eb:30:ff:cd:70:ca:
                    0d:e1:65:c3:9b:74:92:45:a7:b8:1a:de:be:2b:18:
                    4c:ff:be:2a:88:26:8d:28:bb:32:3e:30:86:0b:8b:
                    ac:7e:25:7f:77:50:a3:e8:ea:b9:b1:6a:29:5a:fa:
                    f0:1d:2c:b3:47:5d:5d:64:f7:9d:40:4d:a6:1e:60:
                    05:2b:ca:b7:5b:35:c6:ff:61:0b:0c:c1:94:95:cc:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:11:FE:8F:C4:41:E2:6D:0B:FF:94:9B:C1:7C:E5:14:AB:30:73
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:96:cb:38:62:d6:b5:94:04:85:1f:da:e3:7e:85:c8:5c:f2:
         9b:5a:9c:6c:00:b7:26:4b:26:e6:fe:09:39:e8:4c:de:d5:0d:
         c0:7e:00:36:68:77:17:fb:6d:a5:a3:b8:a7:67:c0:b9:b3:29:
         50:27:64:f0:c9:f6:de:1f:c7:eb:3f:72:c8:00:f4:c6:b2:a2:
         7a:ee:03:1c:3e:12:48:d4:5b:c5:98:a2:5e:66:38:ac:d3:5f:
         d8:3c:9d:f7:98:6e:96:4b:fb:91:21:78:15:20:2a:77:38:0b:
         17:e3:fa:19:f2:fa:53:38:39:93:cc:a8:09:57:fd:99:73:e5:
         75:97:cc:01:ba:d9:f4:2c:8d:56:52:86:3c:5b:41:aa:e6:9d:
         19:d8:65:72:de:80:5e:cc:07:e8:f9:00:b3:78:03:93:6c:d0:
         f9:fd:12:3e:ce:39:db:3b:a9:dd:c6:6a:04:c9:86:de:b2:a7:
         09:67:51:e6:7e:e0:60:34:ee:f4:0a:51:e1:92:d0:15:c0:10:
         17:a5:fb:35:31:df:82:fc:a5:c5:a1:b7:41:07:08:ec:6a:28:
         ea:d7:7d:47:95:5d:5e:90:2f:95:fa:07:08:00:73:b6:83:25:
         45:98:65:e9:9f:71:ae:e0:d2:fa:40:76:0a:ab:1d:f9:a2:eb:
         8b:a9:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:44:50 2024 by rpki-client on console-ams.rpki-client.org