Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          PW5hvK9Xz16U+5aDsg+CKYjr6P3kHQJNcqa/BORpBwc=
Subject key identifier:   E5:7D:A8:2B:64:47:F2:74:A6:B2:2F:25:BA:7F:BE:39:72:28:92:7D
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019362204C25BE8708A75E250AE02FE12C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          137E
Signing time:             Mon 25 Nov 2024 07:01:44 +0000
Manifest this update:     Mon 25 Nov 2024 07:01:44 +0000
Manifest next update:     Tue 26 Nov 2024 07:01:44 +0000
Files and hashes:         1: 1-Os_WatYp5Ju73ruE17uCiHWTlw.roa (hash: QF9vphxsNYbcsX2pySURsNcT0GZ/8Fj1aMahDocw/AU=)
                          2: C3hplVUZTneb_tuvMKHYwlta2Dk.roa (hash: vqPumhTONJqHrWPy++X8YtHfka++xckmWLYeJRS5Lik=)
                          3: C4RTKaM1h2dA8JJefj0qonGGGlU.roa (hash: qk3heXV0Ip0vKDY0eARNOe6mlD8ytyxCGjkkHMNy3CU=)
                          4: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: GYURsqjaYxAVZZnm9jAq6n35D0B45Dv36lAsElvthGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:20:4c:25:be:87:08:a7:5e:25:0a:e0:2f:e1:2c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Nov 25 07:01:44 2024 GMT
            Not After : Nov 26 07:01:44 2024 GMT
        Subject: CN=e57da82b6447f274a6b22f25ba7fbe397228927d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:99:da:13:da:2f:60:3e:be:af:da:8f:f7:
                    79:bd:7f:c1:df:37:be:ed:e1:70:1d:48:fd:20:91:
                    86:98:f1:5d:3f:68:6c:31:ef:bc:b5:bb:35:f6:69:
                    11:4c:6f:7a:20:12:5f:c5:ac:e1:f9:2f:9a:fa:e9:
                    d0:1a:8d:7e:e5:47:77:f6:5d:14:5e:31:38:47:04:
                    67:ba:ad:97:79:35:5b:d4:69:cb:b5:df:1d:8a:c5:
                    ee:ef:9d:10:e2:57:d5:ef:83:0b:86:91:87:37:1f:
                    bd:c4:eb:b4:ea:d9:05:4d:28:59:37:15:32:b5:e0:
                    6e:35:ae:5f:9b:90:d8:2d:65:33:f0:1d:01:b6:87:
                    50:6a:52:2e:59:f2:54:f2:08:db:fb:df:d0:9b:6a:
                    d7:82:d6:36:05:30:54:c7:e2:4d:c3:59:24:bf:c1:
                    00:8d:54:fc:2d:63:93:87:21:97:24:35:46:54:41:
                    75:44:bb:96:c7:18:ea:83:4c:bf:c0:25:56:a3:b9:
                    68:d7:81:e0:44:ee:f5:87:70:91:70:46:96:19:d2:
                    9b:15:35:5c:1e:19:d2:7a:f9:a0:fc:63:f1:23:b6:
                    38:ef:1c:fb:a7:cb:c5:d0:c8:2b:83:7d:08:d2:60:
                    d0:ed:5c:89:01:50:44:fd:39:cd:29:14:09:61:89:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7D:A8:2B:64:47:F2:74:A6:B2:2F:25:BA:7F:BE:39:72:28:92:7D
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:df:cc:0c:d8:91:87:10:c2:09:90:74:92:ff:5f:38:bf:
         95:cb:e2:62:62:3e:82:dd:20:d4:5f:82:85:6a:d9:b9:d7:3c:
         b6:f9:f9:47:2a:d7:e3:be:c0:ff:b9:9c:db:14:b0:f7:9b:63:
         78:7d:d9:cc:49:fd:77:f9:cf:02:da:bb:f5:d7:f3:3e:7b:c1:
         a0:8e:41:45:34:9f:12:85:65:15:e2:3f:3f:57:bd:42:13:d0:
         72:f0:b8:44:a8:70:28:e3:b3:c8:66:c7:b4:b9:9b:1f:d0:6a:
         16:0e:ad:d5:a7:ae:a6:cf:3d:7d:23:30:40:14:d7:6c:04:33:
         61:e2:41:dc:4c:2c:9d:c9:f9:f7:4b:39:ab:24:4c:a0:1d:11:
         f0:34:6d:62:e8:3c:01:ea:3d:c5:35:f6:54:7f:87:54:ef:52:
         83:da:33:43:b2:11:f1:1c:3b:be:ef:c0:da:fb:14:16:51:34:
         ed:12:59:64:01:a4:80:26:7b:a1:87:4c:67:98:eb:0d:8b:e8:
         22:a4:88:10:00:32:20:cf:8c:06:32:90:b7:ea:a7:59:83:2b:
         77:0c:31:bc:86:7f:7b:64:4b:1b:06:04:c4:4c:fb:58:72:b6:
         e3:c2:ec:44:c3:b3:5a:0f:59:fd:0e:51:2f:84:aa:7c:28:76:
         8f:4e:16:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:50:31 2024 by rpki-client on console-ams.rpki-client.org