Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File:                     HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier:          jsccO5hw8OgNw/qePaI6nHq2NfytdqcQB7gDsgDnmE4=
Subject key identifier:   70:96:16:CA:C8:7B:F7:95:DE:0D:C0:8C:96:44:37:A5:0C:47:C6:AB
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer:       /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial:       019356BFB291A1EA0004BC70983F0CD8E5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number:          0190
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: SirZnEUx7y6SZ7rfqqbI5NNLMfAapQRZn8VUzsp6np0=)
                          2: dhxjZXga5HQ-Nlop2lX4sWTaXFY.roa (hash: m6vwqkglds4xxYLdp1RbIIfeBbsIchd3ZYd3C/wnz4Q=)
                          3: m7Mr37sdaBmc_Av9_sBguWgBYqU.roa (hash: P0gLOSKo7l96cc32PLwprdrpO7FH0A03b/BSroXxYe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b2:91:a1:ea:00:04:bc:70:98:3f:0c:d8:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=709616cac87bf795de0dc08c964437a50c47c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:ca:86:d0:44:9e:68:f2:d9:ef:ab:40:06:
                    68:66:ae:c9:8e:29:97:c8:c3:64:df:8b:26:25:29:
                    c2:3e:21:fb:a2:c2:2e:cc:ff:fd:31:ee:04:e4:2e:
                    56:27:e7:df:f0:9c:60:9e:67:7c:bf:8d:16:90:41:
                    ef:b1:d2:80:9e:69:a3:eb:fc:f2:ae:69:af:c4:77:
                    ca:71:f2:3d:86:2a:bf:60:2d:f4:fd:1d:75:32:86:
                    79:d8:f0:90:f4:a2:a7:df:40:14:e1:f2:fa:b3:7c:
                    65:0c:cf:69:f2:ed:80:12:36:ca:65:51:d7:0d:8d:
                    c8:3a:bf:6e:48:8f:f4:7a:fb:38:aa:2c:70:8c:58:
                    a4:07:d7:ea:9c:59:d0:2e:4a:9b:24:d4:81:38:6d:
                    3e:2f:3d:e2:11:a8:95:6b:96:2a:0e:f2:b4:95:01:
                    e4:20:8a:d8:5c:5a:d0:b0:67:be:bd:e7:16:72:5f:
                    25:d6:33:24:b9:b6:d2:9d:da:34:0b:9a:ce:f5:7a:
                    52:51:bf:cb:2a:1e:b9:2d:e1:7a:2b:e4:76:7b:ea:
                    f7:a1:0d:8f:e1:2d:bb:28:17:75:c4:5f:b5:23:26:
                    ee:d1:4b:59:59:c0:91:54:6a:b3:7b:68:6d:81:fc:
                    75:03:35:8f:04:7b:83:26:15:2e:e5:fd:d9:1f:9b:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:16:CA:C8:7B:F7:95:DE:0D:C0:8C:96:44:37:A5:0C:47:C6:AB
            X509v3 Authority Key Identifier:
                keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:39:19:f7:a6:5b:19:4b:e2:53:48:d4:36:cf:e5:63:53:42:
         63:29:98:89:12:ad:24:de:7c:66:68:e0:63:3d:58:9a:64:06:
         01:5f:2b:4d:ab:b0:fc:9f:2a:c9:d0:f5:30:05:18:f5:47:7b:
         58:a2:8d:ec:8b:ee:a5:a1:a1:6b:58:5c:44:1c:c4:4f:6a:31:
         92:a4:ec:6b:af:f9:46:65:19:76:22:d4:07:c7:8d:1e:e3:83:
         c3:d5:65:de:65:9b:f9:06:ab:cb:06:c8:87:cc:4b:99:4d:2a:
         cd:78:00:e2:c8:47:9c:4d:7e:a3:26:c1:ec:18:43:79:91:31:
         bb:81:d5:65:69:e1:87:65:05:aa:a3:8f:39:e5:da:be:b0:ea:
         ca:2f:66:87:6d:35:9f:8f:16:65:e7:52:49:0c:a2:5b:e5:c5:
         80:b1:71:31:14:cc:d4:b9:3b:eb:5b:23:35:7f:95:65:00:7b:
         72:ae:32:17:38:57:e6:2e:d1:20:20:36:01:51:75:f2:0c:37:
         4a:2e:f3:e7:bf:d6:61:f9:e0:c8:36:92:4b:6f:c8:4c:cc:ac:
         11:f7:6c:85:69:1d:65:a5:51:3b:32:ba:b6:2c:44:c1:86:5f:
         04:73:98:f0:d0:1f:74:6c:63:3a:da:f4:95:3c:40:7f:47:8f:
         d5:8c:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:24 2024 by rpki-client on console-fra.rpki-client.org