Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File:                     HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier:          OPDQRYX/4Oa/RwYYzjn7n+hRvU39TwbgB7TR95jgvGU=
Subject key identifier:   75:E5:E4:37:2D:20:5C:CC:ED:BD:82:12:B5:FB:C8:6A:1C:D5:AA:CB
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer:       /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial:       01935764B583A69CDC216C9522251A707317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number:          0A66
Signing time:             Sat 23 Nov 2024 05:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:38 +0000
Files and hashes:         1: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: BjdNyGEY69V+b6hfASeXLS+dnA7dd4Gxmbdev0jSyAQ=)
                          2: pz9l9AAtrG4dZzEHx79kfvYxZ7o.roa (hash: xF+N40qpwkCtIJp//AEgr81bu0FY5a4kMwVzjbJbjDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b5:83:a6:9c:dc:21:6c:95:22:25:1a:70:73:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
        Validity
            Not Before: Nov 23 05:00:38 2024 GMT
            Not After : Nov 24 05:00:38 2024 GMT
        Subject: CN=75e5e4372d205cccedbd8212b5fbc86a1cd5aacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:03:4c:47:77:81:4e:d0:e1:66:d7:c6:e1:
                    46:38:60:1b:98:29:40:42:eb:00:dc:93:b3:f3:5b:
                    f8:3c:c5:81:96:fd:83:b7:88:6d:c6:56:5f:20:6c:
                    e5:90:b7:4e:f9:3c:ce:ba:5b:f7:23:39:35:1a:e3:
                    87:00:01:65:da:87:8b:4d:5c:e6:11:f8:d6:89:e3:
                    cd:a8:57:41:59:76:46:a6:f5:43:9d:05:25:78:bc:
                    69:5d:e8:2c:9b:9e:10:94:68:49:33:12:9b:4b:de:
                    a9:41:2d:a5:0a:d9:2d:8b:34:53:f8:1e:63:c0:72:
                    c5:96:ae:7f:14:3b:40:fd:e6:50:cc:26:e0:2a:f0:
                    d2:d2:97:66:83:13:ca:4f:49:da:76:a4:d4:6b:1a:
                    33:3d:09:c2:65:b5:27:b7:1b:da:78:e5:5e:3e:08:
                    7d:25:60:a6:f1:e3:d8:14:29:93:b8:d4:44:80:7b:
                    ac:5e:1a:1d:e2:22:43:53:17:fc:b4:5d:b9:06:d0:
                    38:c9:d1:43:29:5d:1a:3c:44:ec:70:19:12:df:cb:
                    da:9e:7b:f5:30:cd:80:3d:98:71:b9:74:e2:5a:56:
                    a1:d4:ff:24:34:36:f2:de:47:69:f7:82:b5:53:e2:
                    4c:95:5b:84:b7:69:13:d2:b4:09:8d:6c:30:c3:27:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:E4:37:2D:20:5C:CC:ED:BD:82:12:B5:FB:C8:6A:1C:D5:AA:CB
            X509v3 Authority Key Identifier:
                keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:c4:95:3c:19:ed:f1:ea:46:d2:24:65:1d:98:01:ba:ae:
         88:1a:96:18:e0:a5:24:8d:01:b4:18:8f:70:89:66:f3:c5:2a:
         28:9c:2b:ed:29:7f:ad:4c:9c:c9:2c:b4:5d:46:7e:73:5d:e0:
         62:52:c0:43:a1:1b:96:cc:bb:a2:99:ca:45:7d:3f:99:4e:a7:
         9c:96:c3:fc:9c:50:9f:28:bd:81:b1:ef:ca:a3:c2:2c:1e:60:
         ec:00:a4:b8:68:57:c3:f4:d1:d5:f7:91:70:4f:dc:1f:22:a8:
         d7:85:28:0c:fc:55:79:0c:c4:5a:3a:ad:2b:22:b0:c5:93:01:
         37:e1:37:51:30:74:08:0a:a2:db:c7:96:1d:6c:dd:cc:ca:4e:
         fe:68:65:f1:10:f3:c7:35:f7:ae:12:e2:61:20:38:8c:b2:6a:
         e1:92:70:9f:b3:6e:68:04:b7:24:5a:b3:a6:aa:04:56:2c:14:
         d6:b3:6d:d4:cd:93:4d:e4:b4:c1:c4:93:78:d6:11:10:ca:4e:
         fd:d7:cb:5a:95:ec:c7:fd:44:28:85:a3:01:d7:62:07:7e:e2:
         e1:ee:48:3f:92:b6:a5:97:37:26:7a:68:9d:7d:31:b5:df:cc:
         d1:f3:3c:0c:76:16:b5:c6:b5:ce:1a:da:07:7b:a5:e6:07:ad:
         50:c1:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:09 2024 by rpki-client on console-ams.rpki-client.org