Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File:                     HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier:          W1wOymWSIS+eJlRdsihLOIFmEE38z26ZsS2bwD+T1Qo=
Subject key identifier:   94:B7:43:E9:3D:A4:9C:36:20:22:87:DF:68:9C:4E:57:F4:81:12:D4
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer:       /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial:       0193576457853FE6261B3E7707FD114B8E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number:          0CFF
Signing time:             Sat 23 Nov 2024 05:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:13 +0000
Files and hashes:         1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: bjTSy5IOb7EvF6i+zpsQwLT1uldWHMxOEOpKSBXceac=)
                          2: zeMwJzRcSenbp9N5FJGOZ7XKCO8.roa (hash: GQcjOihfy3yLP6sOLC0xyX8vS5BbuzlAifVLai6J+LU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:57:85:3f:e6:26:1b:3e:77:07:fd:11:4b:8e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
        Validity
            Not Before: Nov 23 05:00:13 2024 GMT
            Not After : Nov 24 05:00:13 2024 GMT
        Subject: CN=94b743e93da49c36202287df689c4e57f48112d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:3a:c4:96:a6:67:98:35:e3:11:47:f6:de:
                    2a:a7:bf:e8:6c:eb:66:c7:96:ef:0e:5f:71:86:9d:
                    31:6b:81:9b:85:8a:d2:30:84:57:ed:da:93:c8:cc:
                    61:21:79:15:57:87:0c:7c:a5:9f:b3:59:f9:06:85:
                    ef:10:d7:54:d9:c4:50:59:ed:b6:97:20:d7:da:85:
                    68:d3:64:42:7b:f7:3c:63:f0:60:6d:d1:06:4a:ce:
                    98:eb:ea:b0:20:de:d0:32:54:a5:46:9c:c2:1b:46:
                    91:70:39:a0:40:2f:06:b8:11:a0:3b:1b:f9:0d:68:
                    45:cc:02:1d:10:27:f1:66:de:37:d9:56:ba:eb:6b:
                    5a:5e:53:fb:c6:98:bd:e7:60:44:67:41:65:b1:55:
                    82:0c:b1:eb:52:10:9e:ff:94:5c:1f:70:1e:93:82:
                    9e:ac:12:5f:8c:9a:b0:34:1e:49:6a:d4:e4:bb:b1:
                    e7:5a:4e:72:a9:8d:34:9d:94:8a:a7:72:ce:cf:87:
                    50:e5:d0:4d:42:57:fd:3f:8c:85:40:35:00:a3:46:
                    78:bf:12:81:60:82:04:a6:7a:0a:37:cf:53:6c:f5:
                    e5:7e:bd:fb:79:97:08:fa:d9:eb:92:8b:f3:b9:c6:
                    c9:69:94:e3:b0:f5:34:54:37:86:7d:95:81:6e:27:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:43:E9:3D:A4:9C:36:20:22:87:DF:68:9C:4E:57:F4:81:12:D4
            X509v3 Authority Key Identifier:
                keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:b5:e7:34:e0:9f:81:db:82:78:2f:59:20:0b:7e:ee:f0:
         ba:f4:85:51:f1:8a:f3:4b:28:57:ee:9b:dd:3d:de:73:93:a2:
         9a:5a:86:7a:04:01:53:77:ba:80:4f:6e:38:bc:45:93:45:4e:
         ab:bc:26:9e:b2:38:de:03:a9:b1:05:d9:ad:69:2c:a4:82:ca:
         09:1e:fc:45:de:ad:42:15:f4:5b:9f:ad:03:63:7c:88:fc:2c:
         01:0a:b0:47:81:4a:af:a0:b1:f7:a4:83:7f:48:99:09:84:9d:
         d4:5d:fe:86:4f:ea:07:6b:fc:45:59:7b:14:b4:ed:48:66:3f:
         a1:74:81:0d:a3:ee:d0:48:32:ad:4a:86:bc:cc:8e:87:dc:fe:
         1c:03:18:7f:96:f7:c4:8f:9a:43:2e:40:6b:f9:cb:ae:fd:9a:
         01:11:cb:61:85:15:5b:33:8e:29:91:1a:6b:e4:c7:d2:61:04:
         23:52:bb:10:7f:e7:66:73:e5:99:38:03:79:86:6d:43:44:1c:
         1f:78:aa:56:e0:58:73:05:d1:84:c5:79:be:73:aa:dc:fe:98:
         27:d5:f9:96:3f:37:ab:b6:b5:13:c4:1f:68:b7:fd:4b:69:7f:
         b0:8d:a3:bf:55:0e:8a:36:71:39:3b:27:0d:84:1d:73:b0:38:
         b8:0e:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:58 2024 by rpki-client on console-ams.rpki-client.org