Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File:                     HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier:          ZQFqxfS38Tu5cSjoBCQ/GLxRaM84LVc9cKWwxDEIWLk=
Subject key identifier:   5D:69:91:91:FE:DE:01:AB:B0:89:5F:69:74:F2:80:BF:E5:07:C1:34
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer:       /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial:       018F467C1484812D3AEB4A8130382DFC4B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number:          1157
Signing time:             Sun 05 May 2024 02:01:27 +0000
Manifest this update:     Sun 05 May 2024 02:01:27 +0000
Manifest next update:     Mon 06 May 2024 02:01:27 +0000
Files and hashes:         1: 7FMqwcb5bqDEN3zW92TIr-SDYnM.roa (hash: 6Br1sjEK3iC93EAFJq0QpQ6rEThJNQq489wXrqhFHkM=)
                          2: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: GR8YX3eneHaiVyFNUWbSo0jICW22YSmWkGFxzsZ+om0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:14:84:81:2d:3a:eb:4a:81:30:38:2d:fc:4b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Validity
            Not Before: May  5 02:01:27 2024 GMT
            Not After : May  6 02:01:27 2024 GMT
        Subject: CN=5d699191fede01abb0895f6974f280bfe507c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:33:81:79:4d:1b:ba:05:8c:77:80:83:3d:
                    0f:43:9f:6e:b9:6c:4f:73:d5:a8:a3:7c:01:d8:25:
                    de:71:04:e4:a6:c8:6c:10:41:31:2b:b8:d4:c3:97:
                    b4:3f:c8:50:09:a3:01:ed:0a:d7:ea:6a:86:e7:3e:
                    55:fa:79:6f:f6:f0:89:6a:c7:79:94:4b:34:69:24:
                    c6:d6:d2:2b:b8:84:c2:ce:90:04:fd:4c:f1:a2:32:
                    4d:1b:28:d3:32:d1:10:00:f5:a0:5e:84:a8:25:c3:
                    d9:2c:3d:08:33:23:dc:47:e9:7d:bf:19:cb:6c:f4:
                    a7:b4:ca:de:1a:fe:f0:04:c6:b8:82:9b:c5:91:bb:
                    6b:c8:4a:67:7e:b0:39:1a:c1:66:79:af:4b:34:cf:
                    d9:b5:17:61:6a:01:f2:87:e0:af:06:f9:43:98:de:
                    0b:70:8e:80:80:24:11:e6:bb:d5:74:a1:e7:49:f8:
                    97:a8:87:ed:ad:cc:5e:80:56:2e:67:71:29:1f:f5:
                    78:6a:63:0e:d6:04:86:fc:69:69:ee:80:9c:95:94:
                    cb:21:03:86:b4:66:24:f9:a3:bd:7b:4a:2a:3f:1a:
                    2e:30:17:c0:1d:dc:5a:69:ab:54:e1:b6:7a:70:74:
                    d7:fd:62:a0:21:9e:2b:31:19:ef:e0:ae:35:16:0d:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:91:91:FE:DE:01:AB:B0:89:5F:69:74:F2:80:BF:E5:07:C1:34
            X509v3 Authority Key Identifier:
                keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:e5:8f:5c:23:ab:80:f7:68:4d:b4:de:05:90:8a:f6:85:
         29:01:43:1f:87:d6:90:74:10:57:bc:3a:16:76:98:4d:16:b9:
         8b:e7:ac:24:f6:21:83:f3:92:49:b2:26:ef:c9:21:62:59:fd:
         cc:af:43:a5:24:07:0c:86:e9:f6:4a:24:38:1c:cd:2b:33:e0:
         b0:20:ea:ea:af:36:bd:d2:59:79:59:c3:d4:d3:b3:31:bd:e9:
         5a:e2:81:f1:d4:1b:db:8d:f5:36:b2:02:6c:ad:bd:ab:26:1c:
         35:4f:7f:b2:46:81:63:a1:f0:6b:4a:75:3a:ae:68:ca:5d:ae:
         5e:5c:02:c0:ed:2f:9f:ec:26:3d:dd:66:9f:9c:b9:60:dc:43:
         b0:8f:47:55:b8:9c:28:49:b2:cd:2a:6f:e8:34:b4:24:64:38:
         1f:1b:5e:c4:b5:11:cf:06:04:99:e4:a5:16:3e:84:d8:01:b5:
         16:8c:ed:32:bc:16:b2:0f:5d:89:ce:13:13:62:b0:f5:4a:ea:
         5f:7f:69:7d:e5:a7:d1:05:49:47:6d:c7:34:09:74:36:71:b0:
         f6:3d:24:e6:c3:67:f2:04:0c:04:19:ff:fa:ec:93:c5:87:f8:
         41:bc:ca:79:cb:0c:9d:a4:83:10:ec:fa:d7:c8:03:40:c9:dc:
         e5:ed:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:31:48 2024 by rpki-client on console-fra.rpki-client.org