Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File:                     HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier:          2PLpbVkImMN6TVeezI89gi+PF5ljbXoFfbELBT6rCes=
Subject key identifier:   43:29:EA:D2:F7:D8:F7:3D:1D:6F:2B:02:25:D9:1C:E2:5C:50:37:92
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer:       /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial:       0193579BEA61CA78F3DC2AC6922FA63C2C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: DbnjwXzvALb4Lrbb27sV0aGzzd4.roa (hash: 6riWSnLDf2foobhTLRSxKrATYvXh/0mfI+4vw9xe1iE=)
                          2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: fY6/78m3O7uDlgW8zOBErZuNgyy6TIPefvLrusMbwv8=)
                          3: Ncg0barPN98eKH5wZnCC5v2vuDI.roa (hash: FjHXVC11s57mwFd3Gxo8Ba52vzo2Q/QHXkW4y2+LSko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ea:61:ca:78:f3:dc:2a:c6:92:2f:a6:3c:2c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=4329ead2f7d8f73d1d6f2b0225d91ce25c503792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:93:d8:5a:0e:bf:5e:78:73:66:5e:16:89:
                    18:e0:1b:8d:1d:b8:92:ac:72:28:43:49:4f:7d:4a:
                    f9:0a:d1:53:36:c7:9f:f6:4e:af:75:8f:d8:1a:7b:
                    b5:e3:74:f8:24:7e:cd:bf:03:d0:57:ca:74:38:1b:
                    c3:0d:0a:c6:05:88:26:5a:14:04:2d:06:af:48:ab:
                    79:0b:f1:25:e8:47:61:27:2e:ad:7e:d4:a4:2e:dd:
                    88:da:fc:cb:6d:8f:b0:10:e4:7a:62:e3:96:60:d1:
                    e1:63:fb:a1:c0:5d:4f:dd:dc:1a:fd:f0:8a:71:de:
                    e4:06:b8:ea:4e:ec:3f:9a:db:1b:e2:fd:56:9c:57:
                    d1:bf:4a:54:10:f0:0d:37:e3:28:b4:66:b5:db:2a:
                    9c:8a:bd:a9:66:3f:5e:f9:14:8d:6a:3f:74:f6:fe:
                    e4:8d:4f:32:64:e4:72:19:8a:fe:d9:a6:be:1b:e5:
                    66:ee:90:89:ca:d8:e0:48:a8:9c:af:cb:73:49:4c:
                    b4:19:97:e6:6c:6e:08:2c:88:6c:43:03:bd:91:b2:
                    9b:98:43:f1:7b:e0:e5:04:f5:aa:22:0b:25:fa:29:
                    21:e5:fa:25:5d:ec:06:be:11:b1:70:ac:77:a6:36:
                    bb:c5:17:02:5d:bb:5c:a2:3f:d9:c1:51:17:22:79:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:29:EA:D2:F7:D8:F7:3D:1D:6F:2B:02:25:D9:1C:E2:5C:50:37:92
            X509v3 Authority Key Identifier:
                keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:33:ee:5f:47:c7:45:b4:90:15:92:f8:ec:41:63:d1:ec:d3:
         94:32:9f:45:12:e9:72:e3:4b:c8:39:ff:9c:25:e4:8d:b5:1f:
         6d:63:71:28:2a:16:23:e8:7c:92:bf:24:8b:bc:59:9e:4b:e4:
         55:d7:d8:c1:22:24:ba:4c:5e:45:e3:4f:be:08:c6:05:b7:7e:
         4d:14:b6:ce:e2:92:ed:71:18:19:e0:54:cc:31:45:c4:ae:bf:
         c6:a1:a3:68:34:c4:fb:7d:0c:02:fa:a1:5e:51:9d:62:4b:c2:
         26:7a:5f:74:3e:1f:4e:ce:f2:4f:89:06:05:e8:39:ab:2c:be:
         41:c0:e3:76:d5:44:ca:68:a8:0f:87:e4:e5:0f:03:4d:dc:8b:
         58:ea:28:83:58:e8:22:8b:51:ea:01:5e:e6:e2:03:de:35:67:
         cb:84:8d:22:04:1d:d3:c0:30:1b:d9:74:51:be:f0:dd:74:83:
         5e:7e:7f:9b:c7:55:51:5f:b4:aa:8a:4c:73:85:16:14:eb:c6:
         fd:98:95:82:2f:81:59:f1:a8:4f:79:3b:47:d2:f2:20:aa:25:
         ec:dc:13:fc:c2:49:d8:b3:97:41:f8:1c:6a:88:8f:29:ed:40:
         b5:fc:8e:69:71:ec:80:9b:82:8f:4d:18:a7:21:59:6b:cd:9f:
         af:31:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:55 2024 by rpki-client on console-ams.rpki-client.org