Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File:                     HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier:          qwRSJu1vuO0LFeIxYjum9SAwAbmLsJoGkpxu+QNwDj4=
Subject key identifier:   CC:38:13:FC:26:79:BB:AE:53:96:CE:F1:8B:C8:56:24:6B:AE:4C:19
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer:       /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial:       018F43B3BF879DFD01A3CBDFAE08D43E42ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 13:03:24 +0000
Manifest this update:     Sat 04 May 2024 13:03:24 +0000
Manifest next update:     Sun 05 May 2024 13:03:24 +0000
Files and hashes:         1: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: xo2Rr7mWNYxIgWq1TuNjaK3zIehnryqRkZzz83FVF9A=)
                          2: vRosif45qelQNlYh_0VC2Sh8Cu0.roa (hash: 2Tyr6othV1TEwiYaahl7/aOc6dchFGOX5OmZSVDpEoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:bf:87:9d:fd:01:a3:cb:df:ae:08:d4:3e:42:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
        Validity
            Not Before: May  4 13:03:24 2024 GMT
            Not After : May  5 13:03:24 2024 GMT
        Subject: CN=cc3813fc2679bbae5396cef18bc856246bae4c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:a4:ef:5f:6f:c5:9f:45:d8:a4:f9:db:8b:
                    71:64:98:2b:ca:18:cb:2e:8a:f7:31:16:be:fd:a1:
                    50:b6:b4:fa:b3:14:75:f7:7b:fb:b2:5a:a0:eb:9c:
                    09:0e:e8:1e:e4:a4:fb:9b:75:ed:27:3d:90:be:5c:
                    13:3f:03:e5:cb:77:fa:69:6c:b1:29:b4:df:51:f7:
                    13:bd:ee:5a:32:68:34:58:50:41:28:ee:15:14:1a:
                    40:92:9b:fa:d0:42:32:06:48:e9:28:8c:ae:e4:07:
                    6a:07:27:a9:45:0a:69:41:0f:1b:31:a3:72:e6:18:
                    1b:93:58:6e:e5:0d:3d:3c:13:d3:06:d6:6f:10:6b:
                    4c:d8:d3:7d:d9:31:1a:7e:a5:9f:cd:74:73:f0:e0:
                    d3:dc:d3:f1:76:5e:58:ae:68:1d:04:71:84:52:37:
                    0a:b4:1b:4c:70:b8:b7:db:5b:90:79:95:db:9f:c0:
                    78:57:1f:47:a7:9f:c0:de:60:5c:c9:4c:95:4c:33:
                    c8:ed:b3:bd:d2:13:a3:eb:b0:a8:9d:40:fc:d9:4e:
                    a5:c6:c5:b6:a6:21:8c:10:79:06:f5:1d:fc:ee:c1:
                    3b:65:01:a3:f3:68:67:c0:61:c2:8d:4a:24:76:b0:
                    2e:f0:27:87:76:be:2e:33:9d:19:e4:54:ad:86:79:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:13:FC:26:79:BB:AE:53:96:CE:F1:8B:C8:56:24:6B:AE:4C:19
            X509v3 Authority Key Identifier:
                keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:4d:83:75:2b:62:f2:2c:da:2f:6c:a4:48:40:47:f6:10:
         d3:9e:9d:09:b7:be:b3:79:c2:cb:36:74:c6:6d:16:a9:06:8b:
         8d:f5:eb:8d:88:42:f4:3c:56:82:9a:61:97:96:6f:3b:6b:63:
         63:ac:43:19:ad:af:70:7b:a4:5f:a1:eb:2e:9a:77:4d:a1:45:
         ff:72:1b:7c:67:b5:6b:b7:75:59:b9:a5:9e:65:08:6f:b5:70:
         b3:cb:b6:a2:32:74:c9:74:4b:b7:52:e7:a3:5e:44:6d:15:d0:
         79:a2:ba:23:95:50:65:5e:f8:1a:a9:51:48:36:e3:37:4f:75:
         d9:8b:76:31:e6:da:fd:bc:aa:47:24:72:04:74:2c:27:2c:ee:
         52:0f:10:20:12:21:63:9c:35:cd:4e:0f:e0:ab:19:bb:f0:0f:
         44:fd:2f:6b:86:50:f6:91:0f:95:1e:b9:6d:40:ea:d6:18:c0:
         90:b7:e1:bc:a2:7f:9a:85:54:ea:cb:01:98:51:67:37:df:1e:
         5e:4e:68:4f:01:01:10:19:4d:c2:d0:02:2e:86:5e:95:d9:28:
         08:47:ef:01:8e:42:08:88:55:81:99:2e:af:f3:ff:20:ca:d4:
         39:cb:ea:12:78:3d:cd:85:12:dc:7f:0f:6e:9b:65:4c:a9:1e:
         31:42:ac:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Ds7+Hnf0Bo8vfrgjUPkLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDJiMjQ4OWY0NzEzOTYyZDEwNTExMmIyNTI3NmViODFm
MWFjOTAwHhcNMjQwNTA0MTMwMzI0WhcNMjQwNTA1MTMwMzI0WjAzMTEwLwYDVQQD
EyhjYzM4MTNmYzI2NzliYmFlNTM5NmNlZjE4YmM4NTYyNDZiYWU0YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbWk719vxZ9F2KT524txZJgryhjL
Lor3MRa+/aFQtrT6sxR193v7slqg65wJDuge5KT7m3XtJz2QvlwTPwPly3f6aWyx
KbTfUfcTve5aMmg0WFBBKO4VFBpAkpv60EIyBkjpKIyu5AdqByepRQppQQ8bMaNy
5hgbk1hu5Q09PBPTBtZvEGtM2NN92TEafqWfzXRz8ODT3NPxdl5YrmgdBHGEUjcK
tBtMcLi321uQeZXbn8B4Vx9Hp5/A3mBcyUyVTDPI7bO90hOj67ConUD82U6lxsW2
piGMEHkG9R387sE7ZQGj82hnwGHCjUokdrAu8CeHdr4uM50Z5FSthnnkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw4E/wmebuuU5bO8YvIViRrrkwZMB8GA1UdIwQY
MBaAFB4CskifRxOWLRBRErJSduuB8ayQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYt
MDkyMWQxYmJmMzQ5LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYtMDkyMWQxYmJmMzQ5
LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgtNg3Ur
YvIs2i9spEhAR/YQ056dCbe+s3nCyzZ0xm0WqQaLjfXrjYhC9DxWgpphl5ZvO2tj
Y6xDGa2vcHukX6HrLpp3TaFF/3IbfGe1a7d1WbmlnmUIb7Vws8u2ojJ0yXRLt1Ln
o15EbRXQeaK6I5VQZV74GqlRSDbjN0912Yt2Meba/byqRyRyBHQsJyzuUg8QIBIh
Y5w1zU4P4KsZu/APRP0va4ZQ9pEPlR65bUDq1hjAkLfhvKJ/moVU6ssBmFFnN98e
Xk5oTwEBEBlNwtACLoZeldkoCEfvAY5CCIhVgZkur/P/IMrUOcvqEng9zYUS3H8P
bptlTKkeMUKsCQ==
-----END CERTIFICATE-----
Generated at Sat May 4 18:36:23 2024 by rpki-client on console-fra.rpki-client.org