Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File:                     HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier:          O+yHteqjfWIXrTI4jRkk48hF/gVI5+0z31j2DhCbqsg=
Subject key identifier:   51:AD:4D:96:24:BA:ED:2A:27:53:A9:94:A7:EE:99:48:F2:BC:2A:39
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer:       /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial:       01935689EDC2B06894181A5D282E0D99417C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:40 +0000
Files and hashes:         1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: mIYyW7XC2PoVh1pCNmrVjYoezfZ1mXI8fBkXyOrVou0=)
                          2: vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa (hash: iI+w/RiaSGduazQDuOg4IY+3D7w26ZU7HplJc2OwJIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ed:c2:b0:68:94:18:1a:5d:28:2e:0d:99:41:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
        Validity
            Not Before: Nov 23 01:01:40 2024 GMT
            Not After : Nov 24 01:01:40 2024 GMT
        Subject: CN=51ad4d9624baed2a2753a994a7ee9948f2bc2a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:3b:e5:cf:d8:34:29:42:43:3e:15:ec:12:
                    2f:ef:7f:87:39:c0:24:c5:1c:a7:7a:90:2d:d4:58:
                    ed:64:06:89:56:b2:b7:e5:cc:c7:7d:55:a1:de:d1:
                    36:fc:fb:fe:3a:ee:54:74:3a:a7:91:55:35:fc:b1:
                    53:f4:9f:b7:af:4f:37:25:b3:84:f1:a3:16:5b:6c:
                    f6:4c:b9:bb:65:d9:e7:ce:2b:9f:7a:35:d2:a8:a9:
                    c4:63:89:c7:83:1f:bc:c9:c6:b8:2f:50:d0:e3:44:
                    6d:47:e2:1b:2d:36:40:e5:99:fd:bb:cf:00:69:7d:
                    cc:ee:8e:62:c3:0a:72:dc:51:d1:16:97:e0:ee:92:
                    63:b5:5e:98:e1:0d:25:2a:e2:12:b0:f3:d4:66:44:
                    e2:71:0a:3b:cd:af:e2:d5:71:38:b7:a1:a3:67:f6:
                    4e:6e:10:bd:31:fb:1a:94:41:d8:86:7a:4b:07:f0:
                    c5:01:70:bb:62:75:65:5a:b3:e2:5f:86:8a:62:99:
                    35:37:cb:7d:8d:7f:25:db:6e:69:0a:be:b9:9d:c6:
                    4c:28:48:cb:f8:1e:4f:e3:d2:d3:9a:15:d0:d3:3b:
                    33:bf:f5:60:fe:66:4c:8c:6d:28:1d:dd:30:fc:e3:
                    d8:07:c5:07:20:33:65:11:40:57:49:28:e0:96:4a:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:4D:96:24:BA:ED:2A:27:53:A9:94:A7:EE:99:48:F2:BC:2A:39
            X509v3 Authority Key Identifier:
                keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:45:65:9e:7d:73:63:d2:32:89:d3:29:8e:66:a4:7a:63:f4:
         99:ec:9f:cd:c2:d8:41:92:4e:62:4b:78:94:89:19:d7:75:84:
         57:1f:8c:51:3b:1e:1e:3e:55:74:0d:ca:50:0a:1d:3c:fc:af:
         87:5b:f9:70:49:cc:11:56:16:a0:53:55:41:fb:c1:21:39:7f:
         f1:60:86:74:b3:4f:34:2d:cc:65:85:4d:89:cf:af:a7:71:59:
         b8:4b:2d:74:08:fc:7f:c0:f1:63:a9:23:69:f5:a4:6c:cd:7f:
         6e:3a:3b:e0:de:97:4d:1d:e0:94:2f:32:38:2c:05:48:86:d0:
         b4:61:63:f6:8e:ac:48:7f:e5:c3:8f:5c:74:3e:89:1c:85:ce:
         a8:bf:71:1f:ca:fb:74:e7:05:e5:24:de:24:7f:c2:ef:d2:ad:
         34:bf:74:bc:59:bc:d5:f9:c5:c1:e6:f0:5e:3f:c1:aa:71:08:
         0d:1b:40:df:77:54:82:1a:46:12:1c:d7:1c:81:09:29:20:66:
         47:67:d2:0c:cd:07:6d:6f:06:0e:c8:1b:f5:c8:3d:31:0f:fd:
         cd:6a:3b:60:83:1c:d6:2b:cb:a6:6b:04:4d:c4:ae:4c:a8:2a:
         25:db:80:a5:b1:4e:84:f6:20:36:6a:9d:eb:22:10:68:46:b2:
         64:62:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:31 2024 by rpki-client on console-fra.rpki-client.org