Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File:                     HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier:          ikE/gnw0j/3kspXa3LkoKPAErG8h2LW8tXcybgu7Rh0=
Subject key identifier:   30:A2:E3:AD:82:B5:62:B2:EB:8E:B7:62:B0:14:AE:A1:33:9A:7B:4D
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer:       /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial:       019645C5893CEBE58CBC9869A68DDA059515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number:          13E6
Signing time:             Thu 17 Apr 2025 22:01:35 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:35 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:35 +0000
Files and hashes:         1: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: HK/aQI+dzI9fbBEc5iocSODE+n88j4BPQSwvb9OmIWk=)
                          2: W-OtDTrcD4enIHqlL53Q8gJVqVg.roa (hash: MIoWyZfzBnM9tbFHcQ1uCgLljDFhySK8a9b/Bqx5jVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:89:3c:eb:e5:8c:bc:98:69:a6:8d:da:05:95:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
        Validity
            Not Before: Apr 17 22:01:35 2025 GMT
            Not After : Apr 18 22:01:35 2025 GMT
        Subject: CN=30a2e3ad82b562b2eb8eb762b014aea1339a7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:ba:c5:ef:25:3e:ba:ed:7b:3e:6d:1c:dd:
                    15:25:31:21:16:91:32:e5:ad:e6:1d:80:d9:5e:80:
                    bf:0c:92:02:bb:91:3f:c0:45:eb:4b:03:44:1a:ba:
                    29:52:df:d1:52:6e:c9:85:6e:49:3e:b6:ac:32:54:
                    b2:a9:0f:10:b8:3e:67:63:a1:68:3e:ee:a7:e5:0f:
                    e3:53:4d:b9:20:eb:5f:3f:09:a0:c6:e5:00:a7:77:
                    88:85:d6:51:0e:e9:52:9d:3d:28:2d:46:4a:00:b8:
                    89:95:f8:10:3c:cf:a9:54:ff:38:da:50:2d:07:f1:
                    58:e6:bd:fd:21:6b:37:a1:90:59:fc:67:eb:5a:03:
                    cd:74:bb:67:95:9b:bd:b6:a1:dc:a8:ca:50:dc:db:
                    f4:f2:34:f9:66:09:1d:1a:9c:35:11:84:44:00:7a:
                    a0:47:7b:7a:a2:44:4d:b8:a2:b0:2e:a8:30:1d:04:
                    70:5a:c4:47:bd:e4:e1:77:92:5f:45:92:da:88:64:
                    c8:27:c8:55:29:41:02:72:db:ae:ff:e3:36:9a:f4:
                    fc:68:4e:35:d9:69:dd:5f:47:fd:67:05:e6:22:ee:
                    a1:fd:e4:9f:08:f8:ef:13:2b:7a:8f:98:14:d1:6a:
                    fc:45:74:b1:3e:4b:76:92:df:33:8e:48:d2:44:51:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A2:E3:AD:82:B5:62:B2:EB:8E:B7:62:B0:14:AE:A1:33:9A:7B:4D
            X509v3 Authority Key Identifier:
                keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:01:e6:d4:06:b0:67:12:c5:40:5a:fb:16:18:13:19:e9:
         6f:a2:c6:bf:59:74:3c:e4:f1:cb:07:e0:68:f3:8a:a4:0b:14:
         78:64:18:b1:c6:15:02:d2:ee:ce:04:7b:8f:8f:20:f0:d1:be:
         15:8e:e0:a9:42:2b:73:f6:02:3b:33:3a:13:49:c5:1b:8e:02:
         dc:d5:ac:28:06:30:33:f8:22:54:85:fe:e1:0c:16:7a:c8:54:
         2a:02:73:00:63:19:3c:38:8e:79:4f:f9:a3:8e:fb:8e:7c:a3:
         91:65:a5:19:66:a4:79:ef:71:31:ca:de:13:76:24:2d:e4:fe:
         83:f6:8f:ff:3a:e2:f4:59:9f:84:11:99:e8:ab:4e:db:57:1a:
         2d:ee:c3:f1:42:41:4d:e4:d4:5f:64:79:15:9f:09:32:ac:07:
         69:1b:dd:67:9f:b5:54:00:e2:3b:51:ae:f3:d3:3d:fa:dc:cb:
         55:8b:a9:a6:fc:fd:4a:00:86:02:f4:f5:7c:9a:7a:02:ff:a1:
         7c:57:9e:e3:8a:27:70:4b:f1:c9:8e:9e:0f:ac:9d:be:7b:5d:
         4c:c2:1e:47:c6:58:5a:d4:1d:68:2d:9c:f8:6c:fb:94:d0:0c:
         d2:d3:4b:83:b8:58:d5:36:6c:25:12:85:41:74:ac:10:97:49:
         54:91:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:13 2025 by rpki-client