Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File:                     HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier:          3ZrHZMY9bPhM5L9Ko7n48XLh1dtrFx6OgdcXK3dsrF4=
Subject key identifier:   7C:AB:E4:F4:37:88:7D:DF:CD:94:3C:E3:13:FF:B8:99:98:5E:F6:B7
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer:       /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial:       01905C92F8E47EAE56E01386E5815FC1DB98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number:          0EF7
Signing time:             Fri 28 Jun 2024 02:00:54 +0000
Manifest this update:     Fri 28 Jun 2024 02:00:54 +0000
Manifest next update:     Sat 29 Jun 2024 02:00:54 +0000
Files and hashes:         1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: UQG2I641GAQfzWE1NsoQox0w15g3LlcBPU7uyBY4LmI=)
                          2: hOpqybgGweckoqTnppJ1ZC36PYo.roa (hash: tkwGKyXKm49ThjrjzdrwYXnu1w6XoZOJbo68RfUeCNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 20:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5c:92:f8:e4:7e:ae:56:e0:13:86:e5:81:5f:c1:db:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
        Validity
            Not Before: Jun 28 02:00:54 2024 GMT
            Not After : Jun 29 02:00:54 2024 GMT
        Subject: CN=7cabe4f437887ddfcd943ce313ffb899985ef6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:83:8b:3a:ee:d7:72:b8:54:81:42:da:f5:
                    10:31:4b:89:18:88:60:67:b6:1c:17:24:8e:63:12:
                    3d:f6:de:19:53:30:e2:16:95:13:a0:dc:58:0a:a5:
                    f6:84:dd:82:89:3a:39:af:2d:78:cd:72:4c:ca:3b:
                    b2:01:18:46:c4:7f:c0:fc:8a:eb:df:f8:94:8e:7f:
                    ff:a2:55:84:58:d8:71:d7:51:3b:d3:3c:84:3f:20:
                    f3:5f:88:d1:f7:f6:04:2e:40:2f:5e:aa:89:b6:4f:
                    e9:e2:49:56:b6:95:2f:4c:e6:bf:59:57:35:4e:0e:
                    ad:55:6b:c3:87:71:ef:74:95:aa:90:1b:5a:f6:07:
                    c1:53:fb:28:44:73:96:0b:35:1d:fb:cc:cb:dd:13:
                    63:13:cf:93:45:55:f8:6a:30:05:5f:3b:29:bd:8e:
                    ae:39:54:fb:23:ea:22:f5:46:db:4d:55:b5:4e:30:
                    77:89:26:3f:88:ad:56:3b:c9:a3:5b:bd:7e:15:ac:
                    96:53:cd:42:ad:33:43:6c:12:d5:d1:93:77:e1:4c:
                    db:59:63:4e:c4:f9:2c:07:6b:4a:93:ee:ff:18:9a:
                    d3:cd:20:80:13:83:ad:ad:a2:45:ba:a7:0d:44:c5:
                    ac:5e:de:3b:06:fc:b5:fb:2e:c1:d4:75:08:e8:20:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:E4:F4:37:88:7D:DF:CD:94:3C:E3:13:FF:B8:99:98:5E:F6:B7
            X509v3 Authority Key Identifier:
                keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:ad:20:02:41:f7:a8:52:ce:a3:b2:9c:80:bb:b5:ce:ea:
         89:72:03:b2:64:74:ef:14:d9:39:2f:a4:11:cc:4a:e9:31:98:
         39:d2:e8:49:6a:e9:ad:60:ff:12:26:19:bb:c4:31:77:e9:49:
         d2:79:30:30:0b:12:2a:91:e6:2a:cb:e2:5e:b0:bc:2a:25:f2:
         f5:e7:a4:85:f4:41:a1:31:47:e0:a6:22:b9:76:1a:f6:41:7a:
         65:32:ba:06:5f:a9:55:99:3d:dc:76:ff:33:56:d2:51:3b:64:
         c2:7c:45:36:fa:89:f2:51:26:97:f5:bb:54:4c:94:ee:2c:51:
         70:78:56:6c:31:f8:49:e1:95:cf:66:54:c3:95:55:ee:8a:b4:
         0f:b5:4d:bb:57:d9:eb:d3:9a:51:19:22:38:43:39:68:e0:2a:
         ee:27:08:7d:3f:9e:d4:4d:80:79:d6:38:0f:74:34:f5:7d:f4:
         48:f4:f9:cf:45:3a:bc:31:a6:6d:02:1d:59:7a:e4:78:90:ff:
         70:03:93:f5:0f:94:5a:e0:fb:c7:a9:76:6c:3e:a4:36:df:23:
         0c:a9:e3:02:83:54:21:72:4a:fe:6c:12:6e:16:bc:c8:38:fa:
         c9:03:75:99:39:f7:50:c1:88:43:80:c5:57:11:79:cc:44:52:
         ac:ff:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:53:39 2024 by rpki-client on console-fra.rpki-client.org