Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          SMw6C4SVPxort0WLHcrMkGM5uQwpO2lOAIxkpRTgL68=
Subject key identifier:   DA:50:69:D2:58:DC:F7:D2:04:BF:D8:64:ED:21:F1:D2:0F:74:BF:5D
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       0193579BDBCEF17D61EA3971312BF9397A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          02A7
Signing time:             Sat 23 Nov 2024 06:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:52 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: nUGnWFHJAW5Zrz8xvYcx7sVyk+ph/MBu5av+zZyLjb0=)
                          2: UCryidCnHxBFaIC5h-TICb65T-0.roa (hash: jfqfvSsw6q2OKgu6za8PIViD6qlN0jgPvaDkDdlzXEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:db:ce:f1:7d:61:ea:39:71:31:2b:f9:39:7a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Nov 23 06:00:52 2024 GMT
            Not After : Nov 24 06:00:52 2024 GMT
        Subject: CN=da5069d258dcf7d204bfd864ed21f1d20f74bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:f2:a0:39:a4:0f:f8:c6:1d:54:7f:31:72:
                    5a:4b:94:bc:1c:18:39:0c:68:32:c6:d5:2e:0d:55:
                    b1:bc:c2:66:df:87:cc:40:5f:4e:bb:94:54:20:6a:
                    ca:c5:e8:6f:22:5c:62:29:1a:07:9f:06:2e:1f:9e:
                    cb:79:ec:13:3f:dd:c3:89:b0:ab:a3:9f:91:35:7d:
                    c1:1d:13:d0:65:19:d4:4b:c2:20:90:1d:5d:b4:6c:
                    b6:e3:0a:cb:b7:e5:09:a6:29:ca:47:79:14:5c:d5:
                    49:ce:fb:c2:04:70:97:8b:c3:cf:c6:49:5e:b1:c2:
                    0a:89:9d:cd:2b:b6:79:aa:6d:76:5e:c3:2b:09:29:
                    3d:b0:29:57:92:a3:fb:54:e1:6f:bf:f9:78:ae:cb:
                    3c:66:50:ff:e9:44:1c:64:f3:e1:a8:6b:fa:04:12:
                    43:32:a0:13:ea:30:74:eb:5a:07:62:04:96:85:94:
                    b0:41:89:88:92:99:9d:ce:30:7f:b3:4c:ba:09:b6:
                    84:7d:ed:82:55:b4:aa:cf:bc:fb:d0:09:55:f4:8c:
                    62:9e:4e:38:f9:75:6c:af:45:9a:7f:63:32:ec:64:
                    f2:fc:f9:d0:4a:1a:a9:ce:26:31:eb:aa:4f:73:0d:
                    a7:7e:7d:f6:60:51:79:77:69:a3:f3:44:ab:9b:aa:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:50:69:D2:58:DC:F7:D2:04:BF:D8:64:ED:21:F1:D2:0F:74:BF:5D
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:ff:2f:5b:0b:f0:1f:6d:96:83:58:58:78:cb:d3:b1:aa:
         d0:2d:da:50:ea:e8:7d:8e:30:4d:1e:ca:b9:8a:1e:7d:40:ca:
         d5:4c:36:4b:2a:dc:9f:fe:f4:7e:d8:37:96:73:43:6f:1c:52:
         ff:28:19:23:5b:33:03:e2:40:3a:7e:f4:4f:96:a9:00:d1:da:
         2c:d1:a7:19:49:59:9e:86:51:f6:f9:1a:0d:96:cd:d0:31:01:
         7b:33:c9:eb:60:44:ce:39:db:ed:a4:fa:8c:55:1b:45:b1:80:
         05:20:bd:ee:1e:d3:b5:60:62:5a:ac:db:99:dc:26:8c:1d:2c:
         cb:20:07:bd:fd:bc:d5:97:e4:ad:bc:34:b4:b3:33:77:cc:a1:
         8a:70:9b:ad:9b:e7:27:0f:f3:30:32:83:3c:cc:ce:96:d7:26:
         4e:2a:b2:af:1e:a8:61:2a:56:72:e1:78:40:d4:0d:a4:5d:63:
         79:5c:69:ca:4d:b5:d2:f7:43:40:99:d3:d6:72:e1:f7:f6:2b:
         09:39:08:8f:0f:d4:96:2a:82:9a:43:60:1b:5a:b3:7b:e6:4d:
         3d:6a:fd:58:32:b0:c7:d6:e0:c0:c7:3b:12:57:6a:8f:dd:4d:
         be:4f:19:03:95:89:5f:02:07:04:76:1c:59:bc:4d:6c:e4:32:
         76:90:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:11 2024 by rpki-client on console-fra.rpki-client.org