Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
File:                     HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json)
Hash identifier:          U+lPbjJJYs7Huhb2U2e87D9fwFxBIurrDnBhdhJMyVw=
Subject key identifier:   3A:7B:77:4C:A7:FF:94:DB:D3:1E:44:6F:57:07:28:86:B0:9E:7F:31
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Certificate issuer:       /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial:       018F50241CB5E575579CCAE0CEADB92DC224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
Manifest number:          0840
Signing time:             Mon 06 May 2024 23:01:34 +0000
Manifest this update:     Mon 06 May 2024 23:01:34 +0000
Manifest next update:     Tue 07 May 2024 23:01:34 +0000
Files and hashes:         1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: 1GQmnuHT4J8RQeN/gUF8kd2HH5i5m2jxc55/DqEbcDk=)
                          2: lIMMzuelmTtgqjOxHaRTqdqqmCg.roa (hash: oAXORQQzBcD1CuqGWWvy24tc3Kzv/fZflGEe6S8skYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:24:1c:b5:e5:75:57:9c:ca:e0:ce:ad:b9:2d:c2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
        Validity
            Not Before: May  6 23:01:34 2024 GMT
            Not After : May  7 23:01:34 2024 GMT
        Subject: CN=3a7b774ca7ff94dbd31e446f57072886b09e7f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:45:f7:1d:7f:54:d9:6a:1a:ac:29:45:4a:8c:
                    3d:74:eb:3f:83:c5:90:7d:e0:b5:3e:a7:c9:c7:3c:
                    11:8c:78:8a:af:37:e9:67:c1:ea:ac:44:a3:fe:c3:
                    b9:b4:14:6e:ce:1f:a2:f7:89:cb:80:9f:58:3f:04:
                    42:62:b8:df:50:cb:4f:e3:54:2d:c4:fe:32:4e:2c:
                    bd:0f:45:79:ce:75:61:c4:a7:23:8c:28:83:3f:07:
                    f3:24:71:aa:6d:b3:15:90:7c:6f:5a:83:85:81:a1:
                    8c:e4:8a:2d:1d:93:bb:bf:7b:b0:55:86:f2:d9:9b:
                    fa:c1:5a:a2:e6:0f:c4:4f:8e:35:3b:25:58:1f:8e:
                    a9:43:bd:0a:9e:89:39:92:31:39:85:74:23:22:bf:
                    df:8a:31:36:6a:9b:c7:f0:2b:9e:db:58:b4:6d:36:
                    c2:9b:f3:c7:15:bb:b2:6f:e6:e7:97:28:87:8d:02:
                    74:47:56:fe:84:eb:31:0a:4f:e3:25:34:f2:36:94:
                    5c:07:9e:b2:33:0c:a5:b6:ce:02:d7:e9:41:5b:89:
                    a9:1d:2e:2d:17:e5:3e:90:3e:d1:c0:07:bc:28:76:
                    6e:93:d5:f2:cc:47:37:07:f4:93:ac:e8:fa:3a:ef:
                    81:9d:28:9b:00:9f:ca:8a:fc:ca:18:61:ee:06:8c:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:77:4C:A7:FF:94:DB:D3:1E:44:6F:57:07:28:86:B0:9E:7F:31
            X509v3 Authority Key Identifier:
                keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:39:93:d7:97:d0:2f:d1:06:1f:57:f9:ce:c7:40:61:b3:
         f0:8c:e0:43:f3:1f:2d:7d:5e:c5:3a:87:5f:25:0e:b9:57:3d:
         a6:d3:63:18:69:a0:9c:1b:30:28:03:ce:bc:68:5f:88:6f:c1:
         8b:08:23:ee:e1:de:3f:55:8c:57:2f:e3:15:1d:46:88:8f:9b:
         91:c4:46:be:f5:f0:25:90:87:cf:f6:6a:84:08:6f:e5:1c:cf:
         15:7f:89:95:ab:34:da:03:2f:71:7a:65:15:95:8e:d8:88:82:
         6e:ed:2c:9e:4b:3d:1d:73:8f:16:03:55:c1:db:e6:0e:15:b4:
         e2:83:bc:c1:60:2f:bb:25:7c:df:68:df:5b:e1:e3:f3:fc:11:
         89:a0:05:5e:bd:c7:cc:48:e0:97:c5:cf:ba:8e:91:79:89:d3:
         a3:81:9c:fd:88:48:56:4c:0f:e9:35:2a:f6:fc:9a:c2:4b:c0:
         e7:c8:b1:c7:74:46:f0:36:a4:70:5a:6c:e2:60:5f:e8:5e:43:
         05:d5:66:7a:6c:88:94:c6:e4:ae:51:f5:a4:aa:6b:9a:68:ec:
         37:d8:f1:ca:39:41:61:74:2c:ba:ba:13:e5:6a:e3:41:fe:cb:
         09:e0:08:3a:03:9c:11:ae:da:85:cb:21:e6:50:44:89:e1:70:
         63:1e:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:08:50 2024 by rpki-client on console-ams.rpki-client.org