Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File:                     HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier:          LIgegx1c2X6qFPFeBXXpBYYLxpHTf6pVfYDmS936tJ4=
Subject key identifier:   79:2B:C8:B5:EE:D7:5D:12:86:37:BB:BE:EC:82:67:B5:88:71:A8:0C
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer:       /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial:       018F1746C49052C5E4B2907612D5B3205C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number:          07FB
Signing time:             Thu 25 Apr 2024 22:01:04 +0000
Manifest this update:     Thu 25 Apr 2024 22:01:04 +0000
Manifest next update:     Fri 26 Apr 2024 22:01:04 +0000
Files and hashes:         1: E35yUIEDCtYRdCCBwUfjXLmPmPc.roa (hash: /F7Vs54oL2JJ0NkTDbAxyod8KWzg0wHsk2NkSCv5Gy4=)
                          2: HJFbL8Jsj5QS2qDJCAF05-q6pQs.roa (hash: LAsq2xKt2SbLZ8LOgYVFi5jIptSPoTkQxnbAS9WaN5M=)
                          3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 7lWuDgyltA5++EMPZZgD061u5SEmX+nymEVUqjZHHwc=)
                          4: XTQ-pW0rIBZZrSGMKBZdD55V7k0.roa (hash: biDgPWe6mAk2kmNaNFUvEjQ1RCXFSa3DU4WQXWRS7Hg=)
                          5: jqnOJPgKOpczUi6zLmGKMNIaG2o.roa (hash: PfSylvrE/G+8esTZv3bYsZtNPFvLexSQEfbJphKCU5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:46:c4:90:52:c5:e4:b2:90:76:12:d5:b3:20:5c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
        Validity
            Not Before: Apr 25 22:01:04 2024 GMT
            Not After : Apr 26 22:01:04 2024 GMT
        Subject: CN=792bc8b5eed75d128637bbbeec8267b58871a80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:79:84:0d:58:04:63:28:fe:eb:de:40:bf:
                    c6:31:98:31:c7:69:0a:b4:5c:31:1a:49:82:e4:17:
                    00:17:35:68:ae:b9:a7:a4:f8:b8:64:89:40:35:66:
                    2c:b9:01:c4:00:e2:7d:43:2a:eb:9d:38:b2:db:69:
                    82:f8:ae:94:1c:63:8e:e3:5e:5d:73:cd:cd:33:e2:
                    62:83:af:ee:a0:af:14:e6:e2:32:ed:53:37:95:54:
                    c3:68:d3:7d:8d:77:58:4e:b3:46:60:ce:c7:1b:ec:
                    85:b2:46:e1:bc:8f:e4:22:c3:71:07:b0:c0:7b:35:
                    36:58:73:dc:85:e5:30:ce:83:9b:76:6b:45:2d:41:
                    fe:ae:fe:d3:da:6f:da:a1:5d:16:f4:be:21:d2:cf:
                    cd:d0:f7:9b:4f:19:06:83:73:89:0a:41:ae:e7:f9:
                    03:5e:fb:b4:de:df:38:35:02:55:8b:0d:0c:5d:c1:
                    6a:af:e4:b6:5c:b0:e2:08:80:e6:5a:2f:21:52:15:
                    99:71:f8:d0:7a:e7:8d:64:43:35:90:64:48:d7:ea:
                    66:cd:35:59:42:dd:00:c5:42:c8:8b:f9:9d:3b:e5:
                    cc:63:a8:10:92:d2:5b:ef:a8:0b:00:fe:d6:57:1d:
                    f4:65:4b:40:a3:90:79:a1:e1:0b:7a:d1:45:25:9f:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:C8:B5:EE:D7:5D:12:86:37:BB:BE:EC:82:67:B5:88:71:A8:0C
            X509v3 Authority Key Identifier:
                keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:4d:34:07:32:6f:0a:d6:ab:fa:29:6f:6c:b9:98:e3:60:
         c1:ca:7c:ad:13:c3:15:e5:e2:07:23:de:70:04:09:c0:a2:1e:
         e1:ac:af:72:f5:6f:e3:06:18:ad:34:61:35:66:c0:ad:30:70:
         ba:46:94:f9:24:11:f4:8e:29:75:8c:4d:b7:46:50:e7:fd:c8:
         b7:40:41:8b:28:fb:2c:ed:f8:c7:bd:a4:d2:36:32:81:e3:51:
         b5:21:12:21:19:45:eb:32:31:c9:0d:7f:9a:98:a2:40:7f:01:
         4c:f0:f2:99:b1:35:58:9b:56:d2:1d:66:04:85:17:ca:ca:93:
         d4:96:e7:7b:ef:d0:cf:b3:ea:04:01:03:c6:9e:c9:93:dc:27:
         93:e1:7a:01:a9:ff:5a:8b:d8:70:9b:1c:2f:a6:13:15:63:89:
         cb:4c:bc:86:e6:56:ef:b1:b1:99:0b:3f:5b:d8:12:8b:63:07:
         ad:66:a6:b2:c2:ff:2f:f5:0a:89:90:34:fa:b0:59:89:16:02:
         49:16:08:9c:52:18:15:e7:72:14:8d:a6:dd:3e:ca:f8:b4:79:
         c8:f8:07:1f:fd:6d:a2:26:a7:0e:e2:7f:20:2d:35:cb:ab:af:
         e2:28:c2:1d:b1:be:55:da:47:b0:a6:05:41:75:09:7e:5e:86:
         2d:d9:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:45:43 2024 by rpki-client on console-fra.rpki-client.org