Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File:                     HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier:          cVZAuF7ryhWtrODde4NN3fpdPAt6040F3dezaxJlvS0=
Subject key identifier:   4C:C9:69:1E:A6:D0:5B:C1:80:5B:C7:88:94:D4:6F:0D:93:96:32:42
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer:       /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial:       019355E3E1B5F48007D900BFBF7C0877283E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number:          025B
Signing time:             Fri 22 Nov 2024 22:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:18 +0000
Files and hashes:         1: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: Wdov6iDTGIdY/S1aTEe9MR3fnFtvV9Wj6zeD/2o9Y34=)
                          2: JJ9vwwZaKnMPELFMUCGNjq5QjEM.roa (hash: ml/5eGilszv/9/LobqtjckMSRZR4StjwrnwtPv5wSPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e1:b5:f4:80:07:d9:00:bf:bf:7c:08:77:28:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
        Validity
            Not Before: Nov 22 22:00:18 2024 GMT
            Not After : Nov 23 22:00:18 2024 GMT
        Subject: CN=4cc9691ea6d05bc1805bc78894d46f0d93963242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:cd:89:db:78:be:c5:aa:f4:58:9f:57:a5:
                    28:21:bf:bc:7a:0f:4f:ea:af:ed:b5:63:b2:b7:06:
                    60:33:a4:61:7f:0c:ea:5c:36:88:05:d6:53:03:dd:
                    64:6e:ab:2c:e5:d2:db:86:1a:b3:c3:fc:2a:a2:e2:
                    25:9f:bc:e9:9c:55:2f:1c:aa:39:49:c4:1a:53:90:
                    e0:47:21:63:dd:e3:6d:aa:85:34:43:de:b7:c9:22:
                    b3:39:b5:d7:28:fd:37:d0:dc:b4:f9:dd:5e:1f:7f:
                    41:4f:53:fd:af:96:e1:f3:1f:ce:10:69:18:be:63:
                    8d:3f:68:98:66:bf:ea:3b:98:10:a4:6a:c4:c8:e2:
                    36:c8:60:1e:39:b8:cc:fa:67:6b:d7:10:5f:42:8a:
                    df:35:ae:38:b8:33:cb:9c:cd:0e:86:f6:41:1f:9c:
                    86:3b:83:ff:0c:32:2e:93:ba:68:b2:b1:f2:09:ea:
                    b9:6e:82:df:5f:fe:3f:f1:db:55:8b:0b:8c:98:9e:
                    ee:4e:7a:fa:94:51:6a:09:2a:02:52:6a:01:55:f3:
                    a3:c6:6d:9f:4c:61:94:89:dc:c3:f6:70:93:19:ec:
                    af:10:cd:76:74:df:f1:5d:f1:24:8c:c4:d6:fc:13:
                    70:d1:0f:1d:e2:e1:7f:52:52:a3:0f:d8:4b:5b:a8:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C9:69:1E:A6:D0:5B:C1:80:5B:C7:88:94:D4:6F:0D:93:96:32:42
            X509v3 Authority Key Identifier:
                keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:ac:5f:53:96:00:ea:b7:9a:eb:68:3b:f9:42:4a:92:af:
         0f:59:d0:e4:c9:ce:4a:0a:dd:98:0b:fb:23:43:b2:56:b7:a6:
         a8:ba:e9:d5:fc:6f:69:af:bc:a8:dd:ea:6f:88:53:49:bc:53:
         8a:94:9d:95:2c:2b:76:83:e2:7c:cb:96:f5:c7:a7:48:fc:ea:
         97:3c:78:c1:cf:9b:53:8b:8c:15:03:f5:b9:a2:8a:60:6a:18:
         09:22:1f:ce:c0:82:67:0a:7f:b5:94:13:f0:2e:2e:26:88:14:
         e2:5a:7a:73:31:d2:a0:5f:ec:80:87:16:80:3d:1b:ac:f9:ce:
         93:81:f9:84:ec:fa:38:3b:38:e7:98:99:db:0e:fb:54:f8:be:
         d4:d1:d5:5c:ad:ee:de:db:63:c3:22:ba:5b:a4:a7:8d:46:5a:
         36:45:a1:f6:44:0b:aa:7f:43:9c:a5:b3:2f:03:f1:12:95:90:
         95:6b:e1:90:15:15:c8:73:b5:a0:11:72:ff:0b:7a:ad:29:1a:
         76:66:58:80:85:ab:3c:69:a9:a2:da:69:3d:51:6e:7e:10:6a:
         74:07:55:bd:02:25:11:55:29:aa:2b:f2:08:f6:6a:4b:42:8b:
         51:01:d5:7a:eb:c6:09:74:7d:f0:7d:a9:8b:02:71:c9:77:6b:
         51:79:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:49 2024 by rpki-client on console-fra.rpki-client.org