Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File:                     HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier:          lcZkDCqTm+9/Fif2hnQ2aBzNbsjF7H189JHOgwS8UUs=
Subject key identifier:   3D:48:95:32:7B:6A:20:2D:CD:BF:81:34:23:12:49:B0:06:46:CB:E2
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer:       /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial:       019406468FD316AAD940BBE85657BFB6F8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number:          04DD
Signing time:             Fri 27 Dec 2024 04:01:15 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:15 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:15 +0000
Files and hashes:         1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 4ZwvWB2EXLu1+1jxQtDqe4qzafsRfN3MyuZKSF51teE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:8f:d3:16:aa:d9:40:bb:e8:56:57:bf:b6:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
        Validity
            Not Before: Dec 27 04:01:15 2024 GMT
            Not After : Dec 28 04:01:15 2024 GMT
        Subject: CN=3d4895327b6a202dcdbf8134231249b00646cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:8c:b1:75:8c:70:13:ce:e8:0e:1a:60:50:
                    90:98:b0:57:05:f7:ee:f3:e8:58:fd:e2:2d:d5:3e:
                    fe:45:a9:58:92:11:ac:8a:97:83:18:20:1a:11:90:
                    27:58:38:8b:8a:1a:fb:98:63:fd:b8:c0:a1:47:8c:
                    3e:73:9b:35:59:d4:d5:f4:4f:5e:9f:d0:46:c1:88:
                    50:9c:c4:96:bf:40:80:b6:52:d1:28:e5:e0:d6:59:
                    dd:9c:a9:e5:ad:74:30:17:db:26:8b:fe:b8:8a:85:
                    21:f3:56:dd:d5:01:f8:1d:d8:62:28:b9:8a:2c:42:
                    67:fc:0a:fe:18:97:79:37:0f:2c:7f:c8:5c:9f:5a:
                    1a:6b:bc:e1:89:7b:a3:c4:97:8b:e6:84:d8:23:6f:
                    64:42:c7:7f:e3:f1:e9:a4:86:a8:67:af:dd:bf:8c:
                    91:c5:0f:14:5c:6d:6e:13:c1:b7:65:a9:d8:c1:ff:
                    94:e9:f3:ab:26:cb:4e:d3:33:54:3d:bf:55:07:57:
                    7e:a2:6c:96:5b:9f:f1:0d:ab:01:8e:7e:d5:03:75:
                    53:7c:2e:8f:87:0d:95:e3:29:3d:46:09:90:de:3c:
                    1a:6e:19:fc:f8:74:dc:cb:cc:41:4c:e1:e9:50:e6:
                    59:9e:e8:cd:48:cc:5c:ae:a8:ab:fd:49:25:4d:05:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:95:32:7B:6A:20:2D:CD:BF:81:34:23:12:49:B0:06:46:CB:E2
            X509v3 Authority Key Identifier:
                keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:81:3b:28:25:ba:8a:89:0f:32:e6:2b:bc:a9:69:0f:f3:
         ac:9a:d0:56:32:60:99:fa:37:98:58:87:eb:eb:e5:3e:37:6f:
         21:3c:da:2a:dc:f6:9c:90:91:a4:7b:6d:4b:35:fe:96:68:eb:
         6c:be:2c:15:0d:34:06:6e:ea:2a:f7:bf:06:09:5d:f4:78:de:
         cb:67:fe:8e:5f:98:be:e3:e8:ee:37:50:64:23:af:2a:55:80:
         81:a1:42:aa:c3:6d:cf:34:45:30:7c:a2:15:35:88:44:1f:ae:
         f2:25:86:e8:91:37:b0:9b:dd:5f:a3:20:24:3e:1d:85:60:64:
         3d:1f:09:50:15:a4:60:53:b0:23:cc:aa:5c:88:7e:2e:e5:60:
         56:7e:aa:41:98:62:b6:3f:7e:eb:c4:50:6f:c5:8a:2e:c9:d4:
         e8:d2:bf:bd:00:bd:aa:6f:f3:c7:a6:62:b0:5e:fc:72:b1:9b:
         b2:30:20:d0:9c:d0:13:cd:d1:a4:32:6d:b0:4a:95:fc:82:04:
         68:64:c8:b5:13:18:b9:2d:87:38:6f:58:cb:5d:ed:35:fa:55:
         d5:8f:74:08:fd:c8:6b:5b:26:8b:35:8a:b7:9a:cc:1f:a0:ea:
         e8:3f:7e:e3:4b:c0:62:70:77:2f:72:f4:c2:71:d3:e6:34:f2:
         c1:7c:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:11 2024 by rpki-client on console-fra.rpki-client.org