Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File:                     HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier:          G940kEffztBDDDc5ZreSYUITQGHm+oSk8u6I8htGvqI=
Subject key identifier:   DF:24:BD:73:BE:E6:27:09:86:E7:CD:70:E0:5E:55:6A:63:64:03:91
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer:       /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial:       0194067CA9D6C55F9C532C974220E509E586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number:          1201
Signing time:             Fri 27 Dec 2024 05:00:20 +0000
Manifest this update:     Fri 27 Dec 2024 05:00:20 +0000
Manifest next update:     Sat 28 Dec 2024 05:00:20 +0000
Files and hashes:         1: 1-44KcdQB4ISUGAUGWmPDCOF2-lQ.roa (hash: pOEJ0+LNDdkOTKdta1N6mwCGsR+V4QSPQqTmNDo82QM=)
                          2: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: 58N/QixKjbsV5yXCBazCn1yEhsvhtD28LQyDySqUHlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:7c:a9:d6:c5:5f:9c:53:2c:97:42:20:e5:09:e5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
        Validity
            Not Before: Dec 27 05:00:20 2024 GMT
            Not After : Dec 28 05:00:20 2024 GMT
        Subject: CN=df24bd73bee6270986e7cd70e05e556a63640391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:0a:3c:55:36:0a:48:9f:32:30:65:93:1c:
                    49:88:79:31:b4:0f:be:95:cc:60:7c:cd:82:62:d5:
                    b9:08:95:44:83:3b:76:52:8f:26:94:15:16:2c:93:
                    c8:6a:79:24:ae:8f:b1:77:bf:7b:4e:ea:17:2d:19:
                    99:d4:d7:75:f5:41:9d:62:bc:a5:65:d6:99:cf:16:
                    0b:27:bf:6c:6b:c1:48:79:74:9f:a5:97:ea:85:03:
                    f5:bc:37:0a:47:11:b8:9d:fc:0a:aa:56:bc:23:65:
                    00:d5:8a:68:7d:95:e7:68:77:50:68:cd:94:c3:f4:
                    0e:47:4a:5e:f1:1a:cd:34:7a:a7:9b:57:ee:0b:f7:
                    ee:bc:18:33:2a:56:24:aa:29:f5:65:21:97:22:f9:
                    53:4b:6c:e8:ad:4f:5b:25:05:b1:3b:39:6d:86:4d:
                    c2:c1:14:7a:07:6a:13:21:6f:a7:1b:1c:0c:c0:ce:
                    61:49:ba:69:7a:42:50:28:82:7d:fb:c6:56:ec:c0:
                    ba:f7:42:e4:fd:b7:26:1d:c0:b8:88:ce:98:0c:b3:
                    35:b4:3b:e7:1c:dc:99:e2:10:58:e2:07:f0:1b:32:
                    a4:2f:e5:c9:72:2a:c8:b1:7c:a6:69:81:0a:be:60:
                    ee:90:31:1d:0c:56:f1:bb:55:ad:2f:f4:c2:02:a3:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:BD:73:BE:E6:27:09:86:E7:CD:70:E0:5E:55:6A:63:64:03:91
            X509v3 Authority Key Identifier:
                keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:0f:4a:ca:77:cc:27:68:bb:f2:cb:8e:f6:1a:9d:e3:b9:
         e3:03:78:16:ac:cd:fb:3d:a4:2f:e4:23:6a:1a:70:dc:30:63:
         28:0c:f3:69:78:82:96:2e:1d:86:f8:10:1a:9f:ce:26:e9:2c:
         51:44:ac:d4:48:d3:7c:d5:84:ab:be:c3:22:0b:bd:07:a5:f0:
         dd:04:df:ab:08:c4:e2:f3:cc:59:aa:f2:00:48:ae:10:2d:d7:
         c2:50:88:88:43:97:2c:11:a0:97:95:db:92:68:7b:f1:e7:57:
         ff:53:74:9a:7a:98:fa:d7:8a:96:0f:3c:3a:71:1c:55:bd:ac:
         6c:f9:96:92:d3:54:f3:b1:1a:6b:f7:49:25:9f:90:12:1e:e9:
         6c:12:9f:cd:af:ca:d9:e9:1a:5e:e3:7e:a3:e2:b9:3e:c6:7a:
         8f:20:16:f2:6a:e9:10:39:25:f9:f7:7c:02:52:37:f7:53:3d:
         0f:65:bd:11:4f:b3:da:ba:ad:2c:f8:df:f6:bc:d5:b1:84:6b:
         19:80:ad:26:cb:9b:f8:55:06:33:25:7f:0b:e7:03:0d:0f:11:
         fe:a4:7f:d4:04:93:12:35:b5:42:7f:8c:be:f8:18:d3:df:c7:
         d5:29:6a:64:92:f9:a2:2e:44:e7:9b:7d:8b:32:6e:e0:b0:44:
         13:54:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:15 2024 by rpki-client on console-fra.rpki-client.org