Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File:                     HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier:          Z973kFQWYD5Z22rVQQJEZf8BVQ4UD/kcT/s88YWIdIM=
Subject key identifier:   CE:8F:7B:A8:03:82:B4:42:D5:F0:D8:62:B8:5F:DF:B2:BF:85:20:7A
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer:       /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial:       01936AB47ACCA534A547D8401DA7A60C5F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number:          0AB1
Signing time:             Tue 26 Nov 2024 23:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:33 +0000
Files and hashes:         1: H4-fzwsygshozktC7X5H8k82tSE.roa (hash: MJU5gTXLHGQ1L2pnGDdDs9vcL0yksRuOhUuykBvXVs0=)
                          2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: +I/A7XJ36u0qvs8X2WujcVMuqn2aCGxBgmxK97BuwmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:7a:cc:a5:34:a5:47:d8:40:1d:a7:a6:0c:5f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
        Validity
            Not Before: Nov 26 23:00:33 2024 GMT
            Not After : Nov 27 23:00:33 2024 GMT
        Subject: CN=ce8f7ba80382b442d5f0d862b85fdfb2bf85207a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:90:5b:b2:5e:71:96:e7:ee:be:72:70:15:
                    ad:33:8d:f1:94:f1:79:84:a5:93:6e:e1:4f:f4:a2:
                    f8:31:36:e2:5b:86:c7:95:f2:ef:3b:ab:32:d7:b9:
                    a7:ec:98:53:29:b5:65:67:f3:b1:8e:dd:02:04:4e:
                    d1:ed:8f:7f:4d:03:90:51:50:ab:82:88:88:a9:f9:
                    29:64:57:0c:92:6b:f4:36:dc:28:91:9a:f1:ba:2d:
                    fd:03:e0:f8:e8:12:ca:f6:f3:da:91:11:06:f5:39:
                    f1:6d:e0:52:a0:49:8b:69:1d:96:4e:d6:66:0f:8e:
                    55:29:12:c6:ea:15:73:c5:c6:f3:1d:7e:4d:62:c7:
                    5e:92:1d:1e:17:46:58:e6:ac:b5:d4:fd:a9:bf:a5:
                    40:00:b4:3c:9b:82:12:8e:3e:d3:bf:51:4d:27:d1:
                    b2:6b:27:81:2c:d1:45:96:fd:e9:43:fc:18:33:45:
                    3c:10:36:8b:dc:fc:8f:7c:02:f4:2a:3e:77:16:d7:
                    32:8e:7b:d0:94:d5:81:6c:2a:6e:40:c1:9e:8b:69:
                    1c:cb:b2:9e:71:bd:55:c1:e7:e2:d0:f2:a1:5f:88:
                    fb:4c:5e:3b:48:0e:54:eb:8d:4e:20:6c:32:4a:29:
                    a9:76:29:d4:d5:17:37:3b:6f:30:30:3a:0c:bb:85:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8F:7B:A8:03:82:B4:42:D5:F0:D8:62:B8:5F:DF:B2:BF:85:20:7A
            X509v3 Authority Key Identifier:
                keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:f9:f6:da:14:74:f0:8b:a2:1f:f9:6d:ee:39:d1:5a:90:
         e6:11:bf:20:3c:79:65:58:b8:cd:b9:60:cf:2c:08:eb:24:d0:
         e8:0d:be:5d:d3:6f:ef:bc:2d:a3:2a:36:94:d2:b2:c1:e7:34:
         d1:9c:74:c4:29:40:f7:95:4a:39:03:8c:6f:9d:26:5f:ef:0f:
         95:78:97:32:e7:21:5e:e5:56:c6:c3:e9:c4:9d:4b:af:f0:f8:
         4f:0a:a7:6e:37:b3:c7:c4:15:d6:e0:29:6c:cc:57:f1:1e:82:
         ce:2f:2e:2c:61:8f:e5:e3:4c:84:82:16:74:e9:5c:46:c3:fe:
         50:66:3e:e8:c6:90:69:e8:db:0c:33:02:d8:88:03:ae:a6:af:
         83:93:c3:3d:c0:2f:47:f2:fa:c4:e7:f3:d9:99:5a:31:ab:ce:
         c4:71:41:4d:37:8d:84:dc:e1:db:59:ac:70:1a:ce:00:e2:b3:
         10:3c:0b:bc:c3:72:68:55:86:ac:d8:ba:fb:1d:dd:8a:7c:f2:
         64:bf:2d:ad:13:7e:20:67:45:67:51:9e:c9:32:28:fb:d8:20:
         ef:fc:c8:3e:e3:72:74:c2:6f:ae:78:f5:41:cc:84:95:2e:44:
         da:77:eb:d9:0a:61:dd:81:6a:1e:61:34:fc:e4:2c:95:f5:64:
         35:89:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:33 2024 by rpki-client on console-ams.rpki-client.org