Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          MthN6/K36TrSVbd78gA8cRj+8gFyPmVj+FBMcUtn+h4=
Subject key identifier:   69:4B:0F:A3:2D:F8:E7:60:6D:87:4A:05:E2:83:31:4D:E0:71:6D:84
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       01940758F71B03675A8F281AB8CA49D853CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0718
Signing time:             Fri 27 Dec 2024 09:00:58 +0000
Manifest this update:     Fri 27 Dec 2024 09:00:58 +0000
Manifest next update:     Sat 28 Dec 2024 09:00:58 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: YWFdfetpj+YASJVwGUpfliGxuQgPRWLO/VjyMcHHLy0=)
                          2: i-ylnsuERb95IUqcwv4ot-Uo_40.roa (hash: krp5z1FqJ2Cp/GL74MeHjfqXfccSoBstJCfXPTNNi9E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:58:f7:1b:03:67:5a:8f:28:1a:b8:ca:49:d8:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Dec 27 09:00:58 2024 GMT
            Not After : Dec 28 09:00:58 2024 GMT
        Subject: CN=694b0fa32df8e7606d874a05e283314de0716d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:7c:7d:63:d8:67:80:67:ef:fa:2d:e6:26:
                    0e:d8:10:83:59:c4:37:ce:0e:0a:7f:f8:49:f2:34:
                    42:4a:5b:c7:2b:2e:b8:5b:da:04:d6:3f:33:18:4a:
                    34:d9:d4:e3:5a:01:1a:37:1e:8a:9a:3c:a1:8a:aa:
                    3b:51:c9:c9:c9:d5:a9:b5:7f:46:00:6f:a3:a4:de:
                    6b:ed:3c:e9:c6:dc:ca:95:f6:b7:b3:83:97:16:56:
                    0d:72:a8:0f:16:c7:73:06:ab:90:c3:61:25:80:5d:
                    e0:8e:64:94:44:64:36:ed:66:9d:d7:60:67:70:c8:
                    c2:9e:5b:c1:e4:a2:f9:5c:ab:a2:7f:50:fd:e7:09:
                    c7:5a:24:65:46:e6:2a:98:2f:5a:74:f3:04:c3:bf:
                    2f:a9:5f:56:95:8c:b5:23:7c:c4:84:ab:2b:2f:dc:
                    62:30:22:39:e0:0b:08:d7:c2:37:ce:69:c5:70:ca:
                    09:60:95:27:ce:ab:99:60:70:32:8e:e9:8b:62:c0:
                    41:98:2b:bf:cd:7a:48:df:20:f5:df:3b:3a:b0:e8:
                    d0:bd:df:45:cc:1a:67:e0:1f:7d:f4:97:63:9e:23:
                    1b:55:cf:21:f6:e7:46:bc:79:e6:a3:57:12:aa:89:
                    da:6c:c5:09:83:6e:27:4b:c3:44:a7:55:a2:59:22:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:0F:A3:2D:F8:E7:60:6D:87:4A:05:E2:83:31:4D:E0:71:6D:84
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:64:52:ff:de:f1:69:72:16:92:33:45:1b:8a:aa:ec:6d:
         63:55:81:84:43:fa:a0:41:50:0b:f7:dd:e3:2f:f8:47:74:89:
         46:5e:85:cd:a3:8b:cd:ca:b7:31:40:b6:77:16:d6:ea:df:37:
         eb:b7:06:4f:3d:41:7c:54:23:b3:12:44:b5:11:29:96:4f:58:
         29:9d:74:19:8a:26:32:b3:71:f6:9b:68:b1:06:31:86:75:c3:
         ca:04:1a:8a:9e:44:f1:83:5b:dd:25:0f:c6:66:fe:d0:70:bc:
         ae:6d:fd:ea:45:7f:51:c5:38:a8:b2:8a:3d:f2:77:60:e4:6b:
         ae:9f:94:ff:99:34:10:3b:27:f5:70:00:f5:f2:1d:b8:cf:df:
         ab:79:0a:81:4e:d6:5f:e8:de:8f:1d:4d:60:91:a9:7a:d6:49:
         0a:6a:b9:4f:09:3e:16:68:63:97:3e:1a:dd:db:15:58:5b:94:
         91:ac:a0:b6:9d:36:9f:c8:29:b4:e7:28:b8:f0:d2:f4:93:d6:
         53:0b:43:a3:01:93:4b:5c:be:a8:70:ea:5b:f5:28:7b:a3:aa:
         f6:07:fe:eb:b4:4e:c2:ce:4a:0c:33:d5:56:5c:b6:47:07:09:
         05:90:41:ab:5c:5d:f2:0a:72:84:28:3b:60:55:6c:15:be:70:
         59:df:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:30 2024 by rpki-client on console-fra.rpki-client.org