Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File:                     HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier:          aQctKZg1Ew8+PwSol/Wcy1Hk7/5AapqcT0+TWFdPIGU=
Subject key identifier:   B6:B5:48:0A:22:02:FA:0A:DE:E7:54:11:BB:23:5D:65:5B:0C:6A:A9
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer:       /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial:       018F3D4219727F5AF275F75F8291293372A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 07:01:33 +0000
Manifest this update:     Fri 03 May 2024 07:01:33 +0000
Manifest next update:     Sat 04 May 2024 07:01:33 +0000
Files and hashes:         1: 3OFlVWdFNwLx0P8qp5KfzszVMXs.roa (hash: ECI0P51Hu2AzbRpD6pirGAX3/qhDZT0+ZCVCsgOWPxE=)
                          2: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: U+H4YBUbPAlm+EyLgjfYkZRG+rRLJDPAcpqKj9l1bVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:42:19:72:7f:5a:f2:75:f7:5f:82:91:29:33:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
        Validity
            Not Before: May  3 07:01:33 2024 GMT
            Not After : May  4 07:01:33 2024 GMT
        Subject: CN=b6b5480a2202fa0adee75411bb235d655b0c6aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:a6:6b:77:e5:7e:95:d4:69:44:2a:fd:ba:
                    f7:05:78:0c:2f:8a:39:19:3c:cc:57:d0:de:6d:9e:
                    e9:ea:7c:c5:30:ae:f7:62:18:62:55:54:de:8a:c4:
                    de:28:c3:10:08:eb:82:be:a9:3a:fc:18:2c:cb:e9:
                    61:1b:ad:66:6f:17:da:db:43:77:f8:32:44:fd:56:
                    18:b2:d9:e6:ed:98:35:11:0d:16:fb:98:e0:2c:9a:
                    a9:04:fb:8e:0e:2d:1f:a1:30:24:15:44:34:15:3c:
                    10:30:b0:ed:e0:d5:b4:27:3b:8e:3a:00:bd:0b:6a:
                    0d:25:5a:aa:85:d4:3a:25:d5:4e:16:43:4b:fc:48:
                    4f:5a:5e:43:1d:ba:4e:0d:de:be:a1:8b:b2:a4:72:
                    ca:a3:37:6b:39:12:7a:08:f5:93:e4:d0:7c:77:44:
                    4a:60:2a:84:7f:8d:1d:9d:4f:8e:b3:43:09:a5:42:
                    44:61:60:94:0f:b2:45:22:68:0d:8f:cb:38:30:5c:
                    d4:33:0e:c3:59:a9:57:b9:fd:87:33:f1:b7:32:3c:
                    0d:69:54:02:6f:db:07:cc:44:93:e0:05:ec:3c:82:
                    5f:fb:04:16:ef:32:8e:6f:dd:e5:5f:d9:78:71:4c:
                    26:0f:09:57:02:f9:d6:fe:66:9a:0e:79:91:f8:0f:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:48:0A:22:02:FA:0A:DE:E7:54:11:BB:23:5D:65:5B:0C:6A:A9
            X509v3 Authority Key Identifier:
                keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:34:32:e0:48:57:24:bc:76:2b:d3:e7:9f:ee:b6:a3:e6:3a:
         e3:06:22:3c:0e:21:05:b0:1c:6b:38:e3:e9:76:26:34:bf:da:
         00:11:26:43:13:63:30:dc:4e:17:8a:f0:da:72:10:50:13:0a:
         bf:2b:b9:25:00:aa:04:d1:44:dc:99:71:e7:fa:64:a4:77:50:
         11:bf:e9:99:98:ad:fd:64:c8:0f:60:5c:e5:a8:a2:d0:f3:06:
         0e:8d:7a:78:89:9c:31:29:de:35:fb:29:6f:e9:2a:77:43:cd:
         fa:23:ec:81:bf:15:23:cc:4e:eb:58:5c:1b:fd:05:57:99:2a:
         6b:ef:69:2a:ae:c6:17:01:73:80:d5:0a:f8:69:78:fd:13:37:
         33:63:8e:6c:04:af:31:22:b2:ce:92:49:cd:13:15:c7:4b:79:
         db:7f:3f:84:33:96:79:9c:bb:b2:a5:82:19:c7:3e:55:ac:ea:
         ef:7f:ef:c8:e1:75:68:9d:59:1e:4d:90:8a:f4:43:df:51:90:
         c4:2f:25:00:22:49:bb:c6:8b:f5:6d:ad:45:da:a7:fe:a2:82:
         a0:39:50:a4:d5:31:eb:02:36:2e:77:2f:4a:98:0f:dc:33:bc:
         73:56:5f:ea:3a:32:39:54:a8:38:6e:d1:61:63:5c:d3:ae:c1:
         ea:b1:bd:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY89Qhlyf1rydfdfgpEpM3KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5
NzljYjgwHhcNMjQwNTAzMDcwMTMzWhcNMjQwNTA0MDcwMTMzWjAzMTEwLwYDVQQD
EyhiNmI1NDgwYTIyMDJmYTBhZGVlNzU0MTFiYjIzNWQ2NTViMGM2YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoemma3flfpXUaUQq/br3BXgML4o5
GTzMV9DebZ7p6nzFMK73YhhiVVTeisTeKMMQCOuCvqk6/Bgsy+lhG61mbxfa20N3
+DJE/VYYstnm7Zg1EQ0W+5jgLJqpBPuODi0foTAkFUQ0FTwQMLDt4NW0JzuOOgC9
C2oNJVqqhdQ6JdVOFkNL/EhPWl5DHbpODd6+oYuypHLKozdrORJ6CPWT5NB8d0RK
YCqEf40dnU+Os0MJpUJEYWCUD7JFImgNj8s4MFzUMw7DWalXuf2HM/G3MjwNaVQC
b9sHzEST4AXsPIJf+wQW7zKOb93lX9l4cUwmDwlXAvnW/maaDnmR+A+jUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa1SAoiAvoK3udUEbsjXWVbDGqpMB8GA1UdIwQY
MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt
NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4
LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzQy4EhX
JLx2K9Pnn+62o+Y64wYiPA4hBbAcazjj6XYmNL/aABEmQxNjMNxOF4rw2nIQUBMK
vyu5JQCqBNFE3Jlx5/pkpHdQEb/pmZit/WTID2Bc5aii0PMGDo16eImcMSneNfsp
b+kqd0PN+iPsgb8VI8xO61hcG/0FV5kqa+9pKq7GFwFzgNUK+Gl4/RM3M2OObASv
MSKyzpJJzRMVx0t5238/hDOWeZy7sqWCGcc+Vazq73/vyOF1aJ1ZHk2QivRD31GQ
xC8lACJJu8aL9W2tRdqn/qKCoDlQpNUx6wI2LncvSpgP3DO8c1Zf6joyOVSoOG7R
YWNc067B6rG9xQ==
-----END CERTIFICATE-----
Generated at Fri May 3 11:05:37 2024 by rpki-client on console-ams.rpki-client.org