Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          2bQcR2TOQUZwREQKg0sJE4mUJs8Px6acS3YmGazg2G8=
Subject key identifier:   08:2C:FC:B9:D2:28:95:2A:B7:5B:B9:EC:10:4F:A5:3E:5D:05:C7:FC
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       01923AA8FE66296DECF5CE57F4DE26023A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 22:03:26 +0000
Manifest this update:     Sat 28 Sep 2024 22:03:26 +0000
Manifest next update:     Sun 29 Sep 2024 22:03:26 +0000
Files and hashes:         1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: xb/QQK1qUbdhhRu7K5RKR5BCla0zHC3ISFKuyDnF9o4=)
                          2: h20u2QWGWGt_GuyRKG7Cif5pCqU.roa (hash: ch11LaY6G2BN8seRyYH7ZOIULH+aChWideO/hlkZVvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a8:fe:66:29:6d:ec:f5:ce:57:f4:de:26:02:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Sep 28 22:03:26 2024 GMT
            Not After : Sep 29 22:03:26 2024 GMT
        Subject: CN=082cfcb9d228952ab75bb9ec104fa53e5d05c7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:5a:6f:b9:2a:09:94:1a:c0:c7:85:92:0c:
                    9e:5a:80:a7:2b:22:51:b3:23:58:aa:48:6a:52:0a:
                    12:f2:72:b5:9c:28:0e:26:21:1c:89:6c:fd:5c:65:
                    b8:61:e2:4e:88:69:db:b7:53:5f:64:be:fc:ec:b0:
                    e1:a5:71:00:48:f1:06:a5:79:e0:43:65:3d:2b:9c:
                    62:94:1f:63:16:11:39:2a:90:a5:31:89:48:10:1e:
                    81:ff:cc:bb:f1:62:6d:0c:db:35:6d:aa:42:a3:ba:
                    98:77:fb:02:1c:59:4f:72:1e:b0:22:84:19:ac:2c:
                    fa:05:ea:4d:e5:dc:20:aa:ce:85:7f:b0:94:64:ec:
                    f1:e5:c4:7c:f9:ae:7e:d1:a8:1b:fa:a5:5a:99:7e:
                    a1:97:db:95:36:9a:11:cc:bf:35:ad:8f:a3:af:f7:
                    67:20:1f:cd:a0:a4:1b:5c:5a:d3:0d:81:46:11:db:
                    a0:ed:67:cc:c4:1e:55:a7:12:08:b9:3a:c2:4d:38:
                    e1:cc:e6:44:50:63:cc:bc:6e:22:a3:8d:fb:70:28:
                    12:b5:b7:dd:38:3f:93:51:73:ca:04:28:45:74:bd:
                    e9:2d:be:22:ca:56:f5:41:dd:1e:d4:5b:21:c0:5f:
                    c6:b6:f3:f8:3c:58:1c:99:fb:be:92:27:70:a2:7c:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2C:FC:B9:D2:28:95:2A:B7:5B:B9:EC:10:4F:A5:3E:5D:05:C7:FC
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:c8:c6:b4:30:13:88:12:16:72:ce:10:b3:73:91:82:fc:
         9d:7e:1e:7a:af:da:b7:c8:c1:46:93:ee:ff:93:35:12:93:9a:
         47:30:2a:a2:39:b8:a9:fe:c4:0a:99:5d:0a:0c:28:e9:32:22:
         1b:78:7c:92:42:7b:ed:23:3c:d5:79:96:73:f8:4f:ff:61:20:
         01:15:ae:3b:33:8f:a5:8b:0c:53:80:58:62:c7:c7:40:b8:b6:
         80:96:d5:ea:0d:bf:36:08:d9:47:fa:07:4a:8a:e7:3c:bf:18:
         5f:1f:eb:79:30:b2:c2:e0:ad:21:19:92:49:2b:e7:15:76:19:
         bf:ae:a1:1d:3a:2b:56:21:b8:6a:2e:54:f7:2e:44:4e:55:20:
         ea:36:77:59:d9:a0:7f:8f:17:34:f2:0f:e2:00:94:f5:eb:a4:
         49:bb:a6:c8:f1:c8:cd:d2:f2:2c:a0:11:36:c6:52:30:11:cd:
         be:95:bc:69:f6:21:5e:45:fd:8a:e8:b5:cb:d0:cb:1c:c4:d3:
         40:2f:a1:74:8a:1c:8e:0e:a3:4c:c0:8f:81:5e:b0:13:50:ec:
         12:76:a9:a6:d2:5d:94:47:54:6d:34:b2:4a:36:55:dc:6b:66:
         d5:aa:65:47:03:e8:09:a6:e5:d5:a0:62:b9:2a:64:88:69:57:
         29:99:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:07:28 2024 by rpki-client on console-fra.rpki-client.org