Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File:                     HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier:          RPux+QJjobDX91awUAiWqsDvrMZ/7fMwJOuT72oWjTg=
Subject key identifier:   EE:AF:90:80:7D:3C:F7:17:E7:B8:B2:E5:F4:26:0C:27:FA:E1:BB:5F
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer:       /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial:       019356BFBDAABD65116D1D876E0EE366E4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number:          43
Signing time:             Sat 23 Nov 2024 02:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:26 +0000
Files and hashes:         1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: UZVcunVOJxp8qxAeidOBIqDrOmiKf95lPz9owWNlfw4=)
                          2: aTrfdoHPeb9RTFFE9P1plGteozs.roa (hash: nl13gBcCSKgX6nbjIP6sfO7oUHSLDLjVh6PuQSmKYeI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:bd:aa:bd:65:11:6d:1d:87:6e:0e:e3:66:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
        Validity
            Not Before: Nov 23 02:00:26 2024 GMT
            Not After : Nov 24 02:00:26 2024 GMT
        Subject: CN=eeaf90807d3cf717e7b8b2e5f4260c27fae1bb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:52:bc:03:c4:83:7b:00:fb:80:31:20:d0:
                    29:ba:06:55:5f:94:6a:e7:6c:3b:a0:94:c2:22:ca:
                    c1:2f:07:7c:a4:2d:8c:18:a7:fa:43:a7:fc:23:8a:
                    c6:7c:12:d7:19:c4:d8:ea:35:6c:a3:8b:e7:b1:7d:
                    1a:f9:47:37:42:93:89:8e:e1:9d:51:37:41:46:73:
                    f7:b5:b4:e4:39:94:6b:cc:9f:8a:16:2f:1c:2a:de:
                    54:5d:86:2a:67:af:bc:0f:79:2a:45:f3:a5:67:65:
                    7f:a5:8f:e1:6e:b4:7b:a9:29:eb:e8:1c:08:6c:64:
                    b5:1d:4e:d2:86:e2:32:c2:62:be:dc:bb:cd:bf:e8:
                    8e:ec:b1:d2:b9:3f:29:6f:64:19:c5:2c:11:0e:77:
                    c9:23:8b:c5:e9:a0:d5:12:60:1e:7c:22:b2:6e:a2:
                    80:7c:53:e9:be:fb:97:4c:d8:98:6c:38:d3:39:bc:
                    08:75:82:46:2a:8a:94:8d:7f:dc:15:52:a9:f2:ae:
                    d3:49:4e:cb:56:38:f9:3a:d1:26:1f:37:d3:9b:4b:
                    34:87:04:dd:ff:b4:e3:47:8c:6e:1a:58:00:fb:90:
                    2d:e3:29:08:51:eb:7f:7e:e3:50:92:7b:44:21:18:
                    3b:84:99:65:94:4d:bc:39:f4:dc:fa:6d:6f:5d:ac:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:90:80:7D:3C:F7:17:E7:B8:B2:E5:F4:26:0C:27:FA:E1:BB:5F
            X509v3 Authority Key Identifier:
                keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:65:43:1a:2f:e0:50:19:7a:46:22:ae:be:22:bc:c0:e7:78:
         49:4d:e7:1f:2e:f2:c4:38:a6:af:16:80:a4:d6:4b:01:24:fc:
         51:3f:9b:78:e7:d4:07:e3:09:5b:55:75:fc:8e:b0:ea:d4:af:
         32:ed:e5:d0:27:8d:a1:1a:9c:d6:b5:d3:3a:c6:93:48:83:a3:
         1e:f5:f1:22:fe:d4:c3:39:88:41:98:b5:03:18:d9:6f:d4:8e:
         c5:b4:e4:79:c0:10:13:4a:5f:0b:44:87:93:5c:d1:01:c6:b4:
         bf:d1:60:b9:1c:a0:2d:8a:7a:74:92:15:f8:05:07:86:60:2f:
         5c:34:d7:a5:9f:f5:a7:89:df:33:7b:af:b7:4e:d1:15:d6:a7:
         e5:f1:09:8b:67:ef:91:06:2c:d4:9f:bb:dd:26:34:ec:8c:bf:
         01:16:56:e5:a1:17:3b:4b:1a:bf:c3:49:8f:d1:8d:c0:b3:70:
         c1:b3:57:87:91:50:fa:ce:91:6a:80:36:63:e5:6d:b6:8c:d6:
         b4:bc:31:d2:3e:4a:b8:3f:35:e2:69:4e:34:e3:8e:1b:80:1f:
         96:db:ac:d1:59:3d:89:0f:11:09:5f:0d:cd:ee:b8:de:fe:f4:
         25:33:d3:b2:5e:73:38:87:95:b2:c9:bc:3c:61:fd:10:1f:b9:
         2e:17:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:29 2024 by rpki-client on console-ams.rpki-client.org