Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File:                     HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier:          cfLm4/Yyf1hzafCYbClHT4UANU0cNoRR02RRIS4OudM=
Subject key identifier:   F5:10:58:E7:CA:61:67:F0:25:9D:EC:00:67:5A:E4:44:16:86:E7:2C
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer:       /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial:       0193674545A6D28DEAB2369A048AEE4C3C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number:          0E79
Signing time:             Tue 26 Nov 2024 07:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:13 +0000
Files and hashes:         1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: Ky03p8MAuCQ54I1xoUlNShrjvc7iYpJqUS+Ywn2kZqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:45:a6:d2:8d:ea:b2:36:9a:04:8a:ee:4c:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
        Validity
            Not Before: Nov 26 07:00:13 2024 GMT
            Not After : Nov 27 07:00:13 2024 GMT
        Subject: CN=f51058e7ca6167f0259dec00675ae4441686e72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:42:5c:eb:95:4e:91:79:19:52:34:ab:42:
                    27:6f:a5:02:c7:5f:09:eb:a2:49:1d:f5:f6:e5:de:
                    37:f2:5f:bb:d6:07:1c:67:86:89:da:af:36:f9:4d:
                    fe:c4:43:fe:7a:43:21:8f:10:3e:00:5a:e4:be:78:
                    e0:1f:65:2f:86:cb:02:eb:8c:26:fa:b4:de:53:e3:
                    0c:26:6f:bb:f6:dd:e3:88:ac:61:28:0d:86:bf:59:
                    30:ba:74:79:00:3c:49:6c:14:07:9e:3c:f1:9d:5a:
                    0d:c0:3a:cf:53:b3:0c:ed:5a:bb:5f:e9:27:30:59:
                    7b:36:2a:f5:c2:40:f3:67:c8:a5:8a:69:22:64:42:
                    c2:c1:ff:a4:99:1d:f0:bb:e9:bf:a2:36:10:c1:de:
                    e4:de:db:dd:42:cb:9b:96:1f:12:ef:63:f9:3f:d1:
                    63:b7:af:83:b6:7b:79:1c:c5:0c:76:cb:29:6b:c0:
                    a2:38:ad:8c:c5:b8:25:33:93:a2:cf:f0:3b:55:60:
                    0a:35:a2:c5:37:b9:60:51:6e:87:a8:6e:54:3d:fb:
                    3b:bc:b6:5a:c9:00:9f:71:26:4f:0f:73:05:cf:4f:
                    22:fa:75:81:e8:04:e4:d3:e2:e1:2a:d9:6a:41:82:
                    fe:7d:19:04:a9:8a:63:b4:df:d3:de:9f:55:d4:6c:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:10:58:E7:CA:61:67:F0:25:9D:EC:00:67:5A:E4:44:16:86:E7:2C
            X509v3 Authority Key Identifier:
                keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:98:73:b0:17:23:ae:9e:2c:e6:12:8f:43:7e:96:d1:5d:9f:
         30:90:44:fd:72:cd:0d:cb:54:fa:d1:93:32:3a:03:c7:b3:f9:
         12:6c:09:32:6c:b5:7c:b1:66:f9:b0:c5:1b:21:a8:4b:a1:c7:
         82:3e:95:69:23:b9:20:cf:84:ca:21:e5:45:ca:b8:56:12:3a:
         d5:4c:a0:33:6c:11:0e:01:93:03:f0:58:2d:21:57:be:8a:f6:
         f6:e6:18:17:dd:81:ef:df:6f:2d:56:eb:35:32:5c:45:e9:86:
         11:2e:db:48:67:cf:08:97:77:58:04:45:3e:bf:74:c5:e5:6d:
         5b:cf:08:4b:b7:dc:a3:5e:93:05:a2:00:ce:37:e6:8f:5a:70:
         4f:7f:30:80:8c:a8:60:69:0a:48:40:fe:4a:e1:a8:b6:0a:56:
         a0:5e:d3:61:b6:6c:f8:68:25:31:b6:07:66:ae:41:12:c3:3e:
         b8:c3:79:f0:81:82:47:ad:c1:af:33:ae:30:4b:fd:9e:90:34:
         fe:9c:f4:de:51:ad:7c:1a:3f:95:a8:73:79:b4:ea:cf:92:ca:
         1f:ff:2c:87:6d:e7:19:31:a5:2b:bf:78:ad:12:fb:93:0c:01:
         69:3f:f7:63:93:3e:9a:41:e3:30:16:d8:38:bd:d0:b2:14:27:
         13:7e:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:39:31 2024 by rpki-client on console-fra.rpki-client.org