Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File:                     HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier:          Jr3pWOb+aOHfHRMMOsUmQaSdMLp/BU3TprhzN0w5hzI=
Subject key identifier:   C2:F9:26:BA:53:AC:C7:A3:12:03:0C:3D:34:25:38:1D:7D:69:7F:26
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer:       /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial:       018F343FF0831C89B7D318CCB6B7378DB15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number:          115A
Signing time:             Wed 01 May 2024 13:02:36 +0000
Manifest this update:     Wed 01 May 2024 13:02:36 +0000
Manifest next update:     Thu 02 May 2024 13:02:36 +0000
Files and hashes:         1: 1-TW7-mIFR3nf7NPgSQ0A4ZRajCs.roa (hash: Iz8ROVBSC72j52gY4Xmk9KuLztIvtWbMkh96ET20xeE=)
                          2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: X0yW8bHdR2GVlxjIki0u+JxmeJfyO83aUcUTKL9ugc0=)
                          3: Y2SpBM1TxVQ3nWDSim9XyjNLcSE.roa (hash: OE1uvOgRYl6ZgNZKwjYc4dQmST1WNUK8/4j4GrMR5ZM=)
                          4: _blxf_eLSVh6WO99LbsVv_UCCAI.roa (hash: YpWVx+UtjMBo7LylHiMzH5eidCD5h3GFXk2qTxsCaNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:f0:83:1c:89:b7:d3:18:cc:b6:b7:37:8d:b1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
        Validity
            Not Before: May  1 13:02:36 2024 GMT
            Not After : May  2 13:02:36 2024 GMT
        Subject: CN=c2f926ba53acc7a312030c3d3425381d7d697f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:55:d4:d7:73:45:74:92:3f:0c:88:33:27:
                    ed:4e:08:a7:c7:a3:9d:8f:fe:48:cb:35:50:11:ec:
                    17:fb:a0:fc:3e:88:c1:6f:98:ad:f5:68:57:bc:15:
                    e2:de:66:89:80:10:e6:de:0a:ab:d8:29:17:17:e0:
                    8e:e0:29:11:04:50:ed:3f:9d:67:2f:40:1a:da:85:
                    45:1d:0b:d1:48:32:74:be:f4:3e:ed:e9:17:37:c1:
                    55:de:29:4e:23:6d:a3:68:36:fd:61:d2:d1:47:a3:
                    a4:a1:5a:10:ad:57:04:13:d0:41:19:f0:4c:20:76:
                    37:90:a3:3d:91:a5:b0:e5:0a:33:27:c2:2e:d4:29:
                    be:ac:88:14:e4:df:3d:be:84:1a:12:5e:a8:b8:1d:
                    68:bc:29:eb:5f:0c:11:72:6e:d6:ec:b8:02:5e:59:
                    55:b3:92:53:2f:86:3a:16:d3:30:ff:a0:23:cc:3f:
                    0a:16:a6:db:46:51:c4:f2:32:27:81:3c:14:5a:96:
                    b2:55:fa:6a:54:b4:84:e5:9c:a8:f0:5b:34:50:fb:
                    58:89:1b:c7:bd:15:d7:9f:9c:12:9d:b4:81:c1:8b:
                    55:02:7c:54:34:54:70:29:01:1a:7a:c8:fe:77:ea:
                    d2:32:bb:fc:a0:1e:4a:6c:20:eb:52:ae:58:72:db:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:26:BA:53:AC:C7:A3:12:03:0C:3D:34:25:38:1D:7D:69:7F:26
            X509v3 Authority Key Identifier:
                keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:b0:2e:d5:6c:38:fe:c5:7b:bd:e6:cc:34:35:6d:0f:d7:
         95:6e:88:c4:c6:c5:8c:65:58:f4:6f:6a:64:bc:30:09:84:04:
         b3:fd:2d:99:b9:34:92:8d:81:de:29:cc:ac:ac:12:45:b4:6c:
         5b:8d:c4:80:78:3b:ac:22:d3:b3:f1:b2:2e:d8:a9:8e:b7:58:
         28:2f:57:f5:a3:2f:b7:37:30:12:e5:d6:0f:87:fa:6b:c4:76:
         91:0c:6a:2d:24:9b:68:9d:e3:dd:ff:6a:b0:d4:ef:73:23:6a:
         d9:82:dc:e5:a4:a9:d2:49:f1:71:6a:2d:b2:33:13:71:95:5c:
         47:83:f5:4a:c4:d1:4b:80:42:83:43:e5:2e:11:89:dc:82:ae:
         cd:75:13:20:86:d6:63:55:44:53:55:59:7f:4e:25:38:ec:10:
         0e:ab:57:04:30:cd:5c:01:67:69:4c:a7:88:f8:96:6f:6d:77:
         f7:bf:47:ad:4e:fb:10:44:2b:ac:98:f6:e9:72:98:a7:92:27:
         ea:04:68:72:58:34:43:3e:05:76:08:9e:09:d9:ae:4c:af:75:
         8b:25:3c:ad:7b:31:b3:0e:dd:c0:e0:d8:ff:ca:05:2d:58:14:
         08:b4:d9:cb:48:17:e8:43:e6:85:4b:e2:9e:fb:47:29:6a:6a:
         32:33:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:18 2024 by rpki-client on console-fra.rpki-client.org