Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          4VKsqA+bcQ5ko7K+Y/3OqCFcS8ASg1A49CWBAR9HmHc=
Subject key identifier:   0E:83:7B:E1:F6:4B:51:07:BC:37:F1:7D:68:DC:44:CF:46:6B:89:8A
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       01938E8AC2864DBC2826B51C56C08740BE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          138E
Signing time:             Tue 03 Dec 2024 22:01:18 +0000
Manifest this update:     Tue 03 Dec 2024 22:01:18 +0000
Manifest next update:     Wed 04 Dec 2024 22:01:18 +0000
Files and hashes:         1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: PCBP8WY1h9s6oyYupmlZBeF356am4NNfkzFCnT4uZJM=)
                          2: h20u2QWGWGt_GuyRKG7Cif5pCqU.roa (hash: ch11LaY6G2BN8seRyYH7ZOIULH+aChWideO/hlkZVvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8e:8a:c2:86:4d:bc:28:26:b5:1c:56:c0:87:40:be:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Dec  3 22:01:18 2024 GMT
            Not After : Dec  4 22:01:18 2024 GMT
        Subject: CN=0e837be1f64b5107bc37f17d68dc44cf466b898a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:ee:41:9a:a8:1c:29:2a:e1:0b:35:17:16:
                    29:fd:d8:5d:cd:9b:03:8c:6e:ee:58:c7:95:e1:3b:
                    65:76:29:68:1a:51:7e:f4:11:5a:c1:5f:fe:37:22:
                    e7:6b:f3:f0:19:62:d7:c7:0d:cc:17:7d:c2:51:ce:
                    4e:99:c0:51:49:fe:ab:dc:d4:19:7a:a7:58:44:c6:
                    22:cf:bb:75:43:db:06:bb:ec:88:06:ca:c5:92:ae:
                    1f:a9:2c:38:47:03:e4:fc:08:07:0d:9c:6d:f7:b2:
                    9c:f0:47:bf:b6:f4:52:62:77:48:22:bb:b3:3b:12:
                    28:91:47:c8:27:39:0d:67:96:70:6a:84:56:9b:7a:
                    85:38:29:d3:f7:d5:db:bc:09:e2:28:62:e8:e6:88:
                    f7:4c:af:6e:18:11:53:4a:92:44:d6:fa:a7:f3:9a:
                    13:a9:7a:f9:08:74:97:30:30:5e:ff:cd:64:d7:44:
                    82:b1:7e:71:16:d2:1f:ea:f7:0d:e4:26:7e:ef:a3:
                    6e:fe:99:71:58:aa:5a:cd:ff:94:01:a6:63:a7:ea:
                    87:9a:f9:80:b2:50:8f:53:4c:5e:d0:c5:6d:76:15:
                    91:f9:55:20:70:f0:ad:2d:6a:50:d1:90:67:db:7c:
                    b5:dd:af:c2:0a:7b:7b:5d:d8:f9:f5:ca:8f:ee:74:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:83:7B:E1:F6:4B:51:07:BC:37:F1:7D:68:DC:44:CF:46:6B:89:8A
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:49:72:6c:58:fc:53:21:fc:f8:3a:e0:a8:c4:d8:ae:ff:
         10:c3:89:ec:56:e1:1e:ac:3c:19:fb:97:ef:1a:bc:09:3f:9f:
         75:ea:3c:b9:51:cf:85:4f:4d:74:8c:e4:c4:a4:2d:e5:a5:a5:
         32:6c:37:6f:22:d9:d5:32:1b:f0:67:2b:2f:32:85:c2:09:6e:
         45:ea:0b:1d:82:b3:3c:0b:b6:3f:3b:6c:fb:4f:0f:2f:fe:79:
         5c:66:9e:e2:4b:07:23:de:98:72:2a:7e:b4:8c:3f:75:2a:e2:
         30:2d:4e:8a:ba:a2:60:f7:39:52:ff:0d:a4:7f:e6:25:6e:b8:
         8b:36:b0:d1:fa:53:ef:30:47:19:1f:1a:30:ba:e7:c6:d8:64:
         e4:42:71:af:03:09:9e:f1:24:2c:a4:5e:4b:dd:0f:12:17:03:
         85:c4:35:02:15:e9:1a:9f:52:5c:06:39:1f:24:d0:84:41:e9:
         2e:53:6a:7e:82:21:bc:b9:e6:0d:09:80:2e:2b:4f:14:38:99:
         63:f4:72:f2:d8:0e:e6:a8:68:08:b0:38:f9:b1:e4:ab:83:fe:
         69:bf:dc:84:8d:03:da:ec:3f:50:0f:98:80:14:bb:f9:49:f1:
         e4:64:b5:a4:7a:55:09:b5:6c:50:d0:62:52:64:79:b4:79:dd:
         3a:83:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 07:15:03 2024 by rpki-client on console-fra.rpki-client.org