Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File:                     HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier:          liS8+1fPxhENzSnn1d/3SDjGXCUQgfhz/4IZy/yGtmw=
Subject key identifier:   C3:F2:38:DB:B0:16:03:9A:C4:51:4A:C7:FD:15:A4:B5:C4:D6:0D:CC
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer:       /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial:       018F3440B0194385CB982252C2E427B62F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number:          07DE
Signing time:             Wed 01 May 2024 13:03:25 +0000
Manifest this update:     Wed 01 May 2024 13:03:25 +0000
Manifest next update:     Thu 02 May 2024 13:03:25 +0000
Files and hashes:         1: 2XmVFxQ9Kz21ppv_ol-OLdzn-7Y.roa (hash: Eqw2aPCjFC27FqYG6Wb5LX0pAsuOlEnKc+EuVvAtj2I=)
                          2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: JIfgW03S3ai6DyX8DYz8VCalv70KmnHGFgtjD12kIRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:b0:19:43:85:cb:98:22:52:c2:e4:27:b6:2f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
        Validity
            Not Before: May  1 13:03:25 2024 GMT
            Not After : May  2 13:03:25 2024 GMT
        Subject: CN=c3f238dbb016039ac4514ac7fd15a4b5c4d60dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:55:54:f9:7a:82:dd:b2:47:51:f5:9c:76:
                    f0:8c:98:89:05:bb:64:8d:66:4a:21:78:eb:03:fb:
                    80:7c:6c:00:ff:02:4f:0a:39:7c:a1:6b:31:3a:f7:
                    17:00:14:da:ac:6d:a7:e3:69:2b:50:3b:0f:5a:08:
                    b0:d2:1b:aa:f7:11:31:a9:df:29:78:5d:96:eb:7f:
                    83:3d:6c:5d:d3:96:6c:bb:68:4c:6f:f7:47:54:3d:
                    df:93:5f:05:a2:76:1d:a6:32:51:82:62:96:28:d6:
                    c4:07:c5:76:57:1b:73:48:91:2e:d7:48:46:4a:69:
                    ff:e0:cd:b0:7a:ec:3e:06:20:f4:8e:78:ba:3e:4c:
                    e1:06:73:c5:a4:7c:4c:6f:87:87:64:8f:e5:30:f1:
                    b5:bf:e3:af:a8:81:0b:34:11:bf:88:8d:1f:29:fd:
                    60:c9:05:ee:fe:ab:8b:e9:2f:51:21:5d:8b:bd:03:
                    e3:db:62:15:2f:49:11:05:8e:f7:6c:6b:0b:56:30:
                    a3:98:8b:dc:c5:4e:fa:a0:b8:d0:99:b5:ce:08:5e:
                    54:3e:22:da:2a:d5:0d:42:06:6b:02:bf:29:c9:f5:
                    75:de:ff:c9:bd:06:a3:91:63:a2:d4:38:6e:bb:17:
                    f8:85:ba:3e:f2:07:0d:e2:1d:e9:97:c3:50:8f:c2:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:38:DB:B0:16:03:9A:C4:51:4A:C7:FD:15:A4:B5:C4:D6:0D:CC
            X509v3 Authority Key Identifier:
                keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:35:cd:5c:f4:ff:50:b4:54:a7:80:7c:0c:f8:66:7e:f1:
         1a:c9:5a:02:a2:93:0f:45:5a:d4:18:cc:51:04:92:16:eb:2b:
         9e:c7:be:33:80:fb:20:b7:94:65:6a:fb:e8:b5:35:a3:ea:e6:
         a9:a5:48:cc:14:1b:11:e0:e9:12:2e:e4:bf:64:f1:68:67:a5:
         e0:d6:2f:76:70:67:0f:97:a5:77:6b:82:f1:aa:d4:e0:18:f2:
         f8:cc:5f:23:63:5c:f1:1b:c2:1e:e1:d5:30:54:30:89:b0:3a:
         4c:ee:e7:16:9d:2b:72:2c:ed:cf:72:82:20:e1:9b:f3:b0:e6:
         6a:36:e8:b4:75:aa:2a:9e:46:4b:5a:e8:14:ee:a7:0a:40:61:
         40:37:9c:54:eb:b7:b5:95:19:41:26:e3:44:7b:53:c9:7b:b3:
         ce:7b:6b:4a:51:89:99:83:f4:0d:9b:f2:09:58:f2:84:ae:57:
         e8:fd:b0:12:75:be:f8:41:77:b7:b8:ff:10:5e:52:37:63:97:
         06:49:06:38:c4:6a:2c:9d:40:18:db:25:2d:9e:68:bb:71:3e:
         b3:fc:90:0b:ab:ae:8f:07:22:81:22:ee:e4:e7:4e:dc:aa:c3:
         bb:7c:26:46:ca:25:95:80:72:b2:54:79:2a:dc:8d:44:cc:b3:
         7f:f8:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:57:51 2024 by rpki-client on console-fra.rpki-client.org