Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File:                     HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier:          5LTWBgejZKMIzxJ5q/Sdr1LTWt8TIqvkaws+rO5FtYA=
Subject key identifier:   E9:A0:8E:22:03:C8:37:CF:54:28:E2:5B:23:AC:DB:5A:12:70:BE:B4
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       018F570371015E6968419743F66537B62BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number:          074F
Signing time:             Wed 08 May 2024 07:03:14 +0000
Manifest this update:     Wed 08 May 2024 07:03:14 +0000
Manifest next update:     Thu 09 May 2024 07:03:14 +0000
Files and hashes:         1: Guq8UY9UwoB1dEGM-Fnv-Bt3kbk.roa (hash: fZrrHAcMYEBP85C5Rrhowm33LmVIMCYVNB82IeneJFw=)
                          2: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: jH4D9TWYS2uDibncCtl5k3GHvWGcx8LRvMLbgxRmT9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:71:01:5e:69:68:41:97:43:f6:65:37:b6:2b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: May  8 07:03:14 2024 GMT
            Not After : May  9 07:03:14 2024 GMT
        Subject: CN=e9a08e2203c837cf5428e25b23acdb5a1270beb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:77:8d:b4:eb:fd:e9:06:77:4e:dc:23:b3:f7:
                    fc:50:e2:06:68:d4:14:dc:83:a5:06:aa:96:74:fe:
                    e2:c4:e3:f7:11:69:7a:f4:14:23:b2:8e:37:13:cd:
                    61:ae:e5:4c:88:b8:fd:95:59:49:00:73:42:e6:02:
                    d6:ab:24:80:e0:a4:4c:d3:c8:db:1f:67:50:0d:25:
                    c7:0a:42:5c:04:94:4f:09:63:20:a5:d9:dc:be:7b:
                    bf:f1:06:3c:c8:8b:2d:d0:37:0c:c2:53:a5:09:47:
                    2b:ab:3b:d8:76:a5:57:4a:4b:9a:80:20:cf:c5:13:
                    c0:e2:a2:28:17:97:5d:00:1a:b1:e2:55:77:c2:04:
                    2a:98:2e:bc:4c:47:53:75:7a:06:23:ec:0c:e6:b7:
                    7e:09:34:ae:c0:92:8e:da:3e:34:15:61:16:97:10:
                    9a:80:cb:e1:98:77:57:62:0c:03:95:43:d3:30:26:
                    d4:08:77:1d:30:69:bc:63:59:b3:e0:d3:b4:54:1d:
                    24:2a:5c:40:f2:c7:81:8c:61:53:bd:3b:ca:9d:22:
                    6e:ab:81:4f:fa:e8:0f:85:c0:eb:48:8c:58:06:7a:
                    dc:5c:6f:5b:4a:77:56:48:6e:7d:b8:bf:2d:f8:75:
                    4f:bc:4c:7d:7f:4b:a1:2d:17:e5:88:07:61:a0:58:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:8E:22:03:C8:37:CF:54:28:E2:5B:23:AC:DB:5A:12:70:BE:B4
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:19:c7:24:25:07:60:e4:76:cc:a2:b2:4b:3d:63:71:58:
         6a:e8:fb:9a:94:c8:a1:e1:e7:d2:5a:78:e4:f7:28:16:47:8f:
         9a:0f:03:1d:a7:c0:e9:e0:63:ec:d6:eb:0d:d9:8c:bb:03:77:
         2e:0f:ae:27:03:61:4a:f9:1f:4e:42:e6:5a:4b:f5:bc:63:31:
         53:66:9b:ad:f6:21:5a:39:de:84:ae:fe:5c:ae:b3:82:84:28:
         bd:14:17:03:21:b7:40:78:e5:2d:04:9f:cd:5a:2d:51:95:90:
         58:a0:33:a8:6c:76:01:9c:03:34:b2:c4:06:4c:ea:96:7b:d2:
         ec:3b:ab:e4:84:10:e7:7f:ea:9c:3e:50:cb:45:cb:10:62:7f:
         1f:54:b9:8f:e2:92:ab:8b:33:82:c0:f8:dd:06:8c:48:b4:22:
         5b:ca:05:50:cc:9c:62:a8:dc:5b:25:f2:bb:b4:8e:2c:9a:52:
         8b:12:e9:92:8b:7a:08:66:87:a7:7c:8c:0f:e4:de:6f:02:f3:
         58:3f:52:db:8d:96:9a:55:99:cb:95:d7:07:f0:84:e8:2b:e7:
         ab:5d:a9:39:47:75:b6:9c:31:40:b4:08:75:86:30:3e:ad:e4:
         36:60:03:ba:c8:10:33:26:ae:1a:97:f0:8f:7c:ae:aa:ae:a5:
         0b:ae:e3:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XA3EBXmloQZdD9mU3tiurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2
ZjIxY2UwHhcNMjQwNTA4MDcwMzE0WhcNMjQwNTA5MDcwMzE0WjAzMTEwLwYDVQQD
EyhlOWEwOGUyMjAzYzgzN2NmNTQyOGUyNWIyM2FjZGI1YTEyNzBiZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XeNtOv96QZ3Ttwjs/f8UOIGaNQU
3IOlBqqWdP7ixOP3EWl69BQjso43E81hruVMiLj9lVlJAHNC5gLWqySA4KRM08jb
H2dQDSXHCkJcBJRPCWMgpdncvnu/8QY8yIst0DcMwlOlCUcrqzvYdqVXSkuagCDP
xRPA4qIoF5ddABqx4lV3wgQqmC68TEdTdXoGI+wM5rd+CTSuwJKO2j40FWEWlxCa
gMvhmHdXYgwDlUPTMCbUCHcdMGm8Y1mz4NO0VB0kKlxA8seBjGFTvTvKnSJuq4FP
+ugPhcDrSIxYBnrcXG9bSndWSG59uL8t+HVPvEx9f0uhLRfliAdhoFh4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmgjiIDyDfPVCjiWyOs21oScL60MB8GA1UdIwQY
MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt
NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx
LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2YZxyQl
B2Dkdsyisks9Y3FYauj7mpTIoeHn0lp45PcoFkePmg8DHafA6eBj7NbrDdmMuwN3
Lg+uJwNhSvkfTkLmWkv1vGMxU2abrfYhWjnehK7+XK6zgoQovRQXAyG3QHjlLQSf
zVotUZWQWKAzqGx2AZwDNLLEBkzqlnvS7Dur5IQQ53/qnD5Qy0XLEGJ/H1S5j+KS
q4szgsD43QaMSLQiW8oFUMycYqjcWyXyu7SOLJpSixLpkot6CGaHp3yMD+TebwLz
WD9S242WmlWZy5XXB/CE6Cvnq12pOUd1tpwxQLQIdYYwPq3kNmADusgQMyauGpfw
j3yuqq6lC67j5A==
-----END CERTIFICATE-----
Generated at Wed May 8 13:12:50 2024 by rpki-client on console-fra.rpki-client.org