Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File:                     HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier:          x+q4icxRGMc4Dof7kVoIixq3UWqNyjQNzb/1LLUxMAU=
Subject key identifier:   D8:2C:CD:A1:90:60:72:93:DD:3C:44:5C:44:EC:BD:6A:B7:17:78:26
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer:       /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial:       018F2D29C733DF94B81D6FA790B2DC17261B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number:          0DDD
Signing time:             Tue 30 Apr 2024 04:01:03 +0000
Manifest this update:     Tue 30 Apr 2024 04:01:03 +0000
Manifest next update:     Wed 01 May 2024 04:01:03 +0000
Files and hashes:         1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 6C/FCEfHHQiEIOR84W8/QOxoqTc64hwP5CyjS+ELZqM=)
                          2: XH2TX0aX7JErOl6drYYdh8S-WxM.roa (hash: Ug8150MoxV3FmzoyRuNTFq8/LJYcdQ8Tx+D+WMNR85c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:29:c7:33:df:94:b8:1d:6f:a7:90:b2:dc:17:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
        Validity
            Not Before: Apr 30 04:01:03 2024 GMT
            Not After : May  1 04:01:03 2024 GMT
        Subject: CN=d82ccda190607293dd3c445c44ecbd6ab7177826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:91:20:b3:30:a0:91:05:e0:bf:bb:13:e3:
                    15:32:1a:0c:b4:16:6e:1a:a6:1b:84:90:89:9e:42:
                    be:94:69:67:61:9a:a6:01:8f:c7:33:0f:d6:a0:b0:
                    45:0a:4c:71:5d:f0:64:79:95:03:57:a4:74:c5:bd:
                    f6:b6:fc:da:32:44:b7:47:7e:5f:b5:d8:44:b9:4a:
                    15:b4:74:33:ee:b9:5c:55:ba:84:33:36:a5:c8:bb:
                    69:96:bc:d1:f7:70:e0:44:38:bf:de:27:ad:4d:91:
                    4b:5e:5e:2a:00:c2:f2:cb:39:57:03:72:9a:1e:46:
                    1c:fe:1b:62:e7:b2:f4:30:c2:ab:3d:0a:bd:6f:6c:
                    87:b9:d5:b3:7d:fb:27:29:18:a3:2f:69:39:87:59:
                    e8:56:d4:66:73:e8:b1:53:b0:9c:45:d6:99:9f:8f:
                    09:b4:05:1f:5d:69:79:16:8b:9d:3b:33:c3:e9:c3:
                    89:18:4d:4f:84:97:60:fe:cc:33:7f:59:1f:63:56:
                    c5:88:12:e2:be:5f:52:ed:bd:89:d2:fd:60:71:1d:
                    41:ff:63:b1:a2:db:6a:be:7d:93:0d:57:d8:b6:3b:
                    3b:03:d9:b6:19:5d:10:14:29:b4:1e:f1:5b:77:da:
                    3f:0c:60:6c:3c:3a:b0:6d:29:f6:73:7f:01:14:a9:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:CD:A1:90:60:72:93:DD:3C:44:5C:44:EC:BD:6A:B7:17:78:26
            X509v3 Authority Key Identifier:
                keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:75:37:df:c9:c3:17:69:4b:cd:6a:dd:e9:ec:9e:76:b3:
         50:b4:f8:f5:4f:8d:cc:90:49:88:93:5a:4b:c6:e3:05:e1:92:
         e7:a1:2c:c2:d2:34:e6:64:3e:6b:bc:c7:7b:ba:27:01:26:e5:
         8f:c2:b7:7e:d9:55:1e:9d:a2:12:4a:18:71:ec:c0:f3:d1:7c:
         28:f9:0e:1d:2a:f8:36:c9:69:91:6c:03:e6:66:09:be:24:b0:
         88:b9:c8:71:80:31:1e:86:d6:01:6d:27:7e:0c:b9:6c:03:09:
         ee:a6:a4:1b:9c:1c:8d:b0:7b:6c:03:8c:95:9e:a4:d8:ca:e0:
         78:c7:5a:08:73:77:d6:28:9d:9c:fd:e5:0a:4e:dd:8a:4d:d6:
         03:65:ca:75:a9:4a:ce:89:2d:41:94:c7:ca:2d:c6:e1:1c:c1:
         ee:06:7b:b2:98:1b:b4:55:6c:f0:d5:bb:e7:39:47:38:f4:f2:
         55:fb:d4:f5:d7:36:60:89:55:0f:c8:80:0e:6b:50:9a:c1:f2:
         09:fd:1e:6d:13:3b:a2:f5:57:c2:b9:88:82:55:c8:58:cb:38:
         c0:56:83:4c:e9:d2:4d:e6:c2:67:67:c5:23:67:81:69:7e:89:
         d6:8f:67:bb:71:c9:69:65:9e:c8:7c:23:cc:92:9e:6c:60:b9:
         ca:d8:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:53:31 2024 by rpki-client on console-fra.rpki-client.org