Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          AQEziTeNFKRkdZ1QVzI+R/hFCf4dyqTXlrwVS7Q0WXE=
Subject key identifier:   A6:5A:5F:08:E2:FA:B6:A1:CF:7C:92:B5:2A:1E:04:A5:71:AE:B5:55
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       01935764C0BA57A6130C30F3AF93643C86FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          0EBA
Signing time:             Sat 23 Nov 2024 05:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:40 +0000
Files and hashes:         1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: rbKNcw9vrG9uLDmSys7TIshlm4YSGhRPXv6KRQsqkKA=)
                          2: N6FbEhrmlwrPH0a-lL0_2pklkCs.roa (hash: 9Jb307uMw7xAEOullrKFrMlSAqQ1S6RUYWgoKFYGXFU=)
                          3: QBVzoGO2y5JONjcgs01P8XiWWXU.roa (hash: 1gThm4VAQ/SxpvYX7hf0J7At9lDsXmuYS33U8A3WfAA=)
                          4: _Lp28N5uSIsMygtBTs2j8aSjatA.roa (hash: TsUMRvL0QS251fu6aevz87QvZZIW8eHWURsmjwWdw7Y=)
                          5: ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa (hash: MDlSKIEnwZnHcClE0/IidM/980MMkhPGrzWnRvjCtq4=)
                          6: rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa (hash: 4wVDdHTde2CXd7XubFnG6UvyGcKJ4FGZ6/P+q8IUIzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:c0:ba:57:a6:13:0c:30:f3:af:93:64:3c:86:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: Nov 23 05:00:40 2024 GMT
            Not After : Nov 24 05:00:40 2024 GMT
        Subject: CN=a65a5f08e2fab6a1cf7c92b52a1e04a571aeb555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9d:49:3b:92:03:19:42:38:62:fa:90:05:18:
                    46:23:24:e4:04:3f:26:45:80:6e:b9:26:aa:c1:e9:
                    23:61:af:00:42:06:87:e4:31:12:a6:a1:e4:ae:f8:
                    2c:d9:8d:a7:f9:15:c6:fa:7f:2f:4f:17:d7:1a:9b:
                    88:b9:15:bf:d6:c2:58:3b:09:bb:11:7b:e0:3d:4d:
                    a0:5e:53:2b:52:ae:10:ee:08:7b:ce:14:9b:5d:b8:
                    2c:79:5d:e1:bf:81:01:d5:c8:da:df:a0:0a:d0:ac:
                    1f:3c:e1:67:e6:a1:8c:5c:1f:79:0c:28:b3:55:78:
                    df:a9:41:32:bf:4b:86:e1:f9:e1:80:21:8f:35:72:
                    1f:a5:ad:d8:ba:bd:e4:17:a8:85:a1:fe:8b:7c:60:
                    7b:ff:9a:39:6b:0d:8d:a2:96:98:8c:50:d0:7e:06:
                    fa:06:19:61:a6:d8:f6:b8:be:ca:fa:08:f2:72:fb:
                    81:a2:b2:fd:d7:90:df:50:5d:68:ac:b8:fd:bd:00:
                    82:a9:a6:a3:07:6a:58:dd:96:54:15:35:d9:04:94:
                    19:51:5f:61:59:4e:ec:21:55:52:98:33:3d:d1:f8:
                    51:5e:1f:b2:1e:9e:5f:76:ef:ad:c5:f1:dc:68:de:
                    0a:ad:44:92:49:70:92:cf:0b:52:70:b9:37:36:f7:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5A:5F:08:E2:FA:B6:A1:CF:7C:92:B5:2A:1E:04:A5:71:AE:B5:55
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:e0:5d:f8:26:08:d7:2c:08:ff:12:e4:d7:1e:e6:f0:e0:
         bc:2b:69:3a:3e:67:e7:ec:63:2a:dc:94:c1:66:45:7b:83:9c:
         4f:1d:52:70:2c:bd:d7:88:88:a9:9e:91:42:8c:b2:a1:39:e5:
         8e:73:1e:ac:b9:c5:af:28:8f:b7:a7:f5:ff:6a:8a:67:f3:af:
         05:b4:aa:6a:ee:a8:a9:c7:88:96:78:b2:90:25:d7:de:fe:21:
         15:73:0d:eb:d7:2a:a3:d5:8c:f1:24:a4:ec:08:49:23:2a:b1:
         e8:d2:ab:e7:bc:92:7e:55:f9:ec:9f:f3:1b:eb:3a:4a:d6:5f:
         bf:8b:4f:57:b4:2f:db:0c:68:09:0c:37:17:5e:04:2d:55:68:
         3e:5c:f3:72:a0:64:49:6e:4f:7b:af:8e:6d:66:5f:95:91:04:
         f1:3a:73:19:eb:f3:ca:47:3d:a2:e2:3f:a0:a9:4d:05:09:07:
         36:bc:8d:5d:d0:c5:f7:9f:26:d7:f4:8d:01:2b:ae:d5:93:ba:
         18:28:0e:a9:aa:33:05:40:d6:d4:03:83:02:f6:71:8a:7f:b1:
         33:c0:34:bb:80:47:01:86:5e:8e:3d:f6:ca:05:b2:18:98:bf:
         38:1b:cf:03:f6:fa:dc:7e:8a:f9:7e:d3:3c:43:8a:e1:ed:c6:
         6d:ee:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:09 2024 by rpki-client on console-fra.rpki-client.org