Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File:                     HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier:          NOJeUzlM2AUpLHaSX37PKjNG2oQ9UiGe+oiInkddyuI=
Subject key identifier:   0E:16:66:CD:87:DA:EF:43:EE:29:AE:79:58:F7:62:D2:B4:EC:5E:F9
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer:       /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial:       01940721AAD89BDD42CD23E26FDCD2027743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 08:00:34 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:34 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:34 +0000
Files and hashes:         1: 7FMqwcb5bqDEN3zW92TIr-SDYnM.roa (hash: 6Br1sjEK3iC93EAFJq0QpQ6rEThJNQq489wXrqhFHkM=)
                          2: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: EJ33/un7hLQEtAEqXMA6s3R8W7gaDciIB6Q3AVW7y44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:aa:d8:9b:dd:42:cd:23:e2:6f:dc:d2:02:77:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Validity
            Not Before: Dec 27 08:00:34 2024 GMT
            Not After : Dec 28 08:00:34 2024 GMT
        Subject: CN=0e1666cd87daef43ee29ae7958f762d2b4ec5ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:e7:65:1d:33:60:aa:03:8e:dc:22:67:d0:
                    3c:f2:62:b6:60:3d:cd:7f:c4:ad:45:1f:aa:f9:b3:
                    69:a6:6c:07:7e:4f:ed:9d:72:50:d0:fa:ba:f4:b9:
                    cc:2f:e1:1c:3f:ca:b7:1c:2a:d9:2a:d7:b0:2d:70:
                    4c:cc:df:02:7d:c9:23:80:17:50:bd:e9:29:91:12:
                    56:e8:90:1e:0f:fd:cb:3b:bb:3b:53:6b:d1:05:e0:
                    c2:41:a1:5e:1e:ef:0f:38:94:d5:42:bc:9c:12:77:
                    a5:33:f4:99:2e:0d:ff:cd:10:37:e1:b0:b5:44:74:
                    9e:53:64:d5:ad:bd:f7:a0:55:46:f9:5b:03:d4:16:
                    90:8d:8a:fe:1c:0e:84:7b:df:33:2a:20:bb:95:6f:
                    3b:51:ce:64:c2:d6:4f:0f:77:00:32:72:af:09:f3:
                    a1:8e:08:dd:eb:a1:b6:1c:02:b3:25:b6:1e:80:25:
                    47:ec:54:f7:d8:e8:70:b4:3f:e8:d3:ef:cb:db:1d:
                    0b:e5:55:28:00:d0:81:f0:e4:74:58:cc:e2:ec:1f:
                    a2:ce:3b:46:82:6d:0c:87:01:43:17:b5:34:78:b3:
                    26:84:9c:b0:df:2e:63:99:0f:1b:79:fb:d9:c3:7b:
                    2b:99:9b:6d:32:3e:a2:53:15:34:41:b9:78:3e:82:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:66:CD:87:DA:EF:43:EE:29:AE:79:58:F7:62:D2:B4:EC:5E:F9
            X509v3 Authority Key Identifier:
                keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:40:28:86:df:6e:02:99:5f:f9:d4:90:19:c5:c6:19:61:f8:
         a4:c5:4c:57:3f:27:bf:f6:d3:47:54:b2:d6:93:05:0d:5e:fc:
         07:4e:95:14:b6:45:f5:65:cc:35:55:b3:e6:fc:74:9a:0a:21:
         c8:0f:7c:a4:e0:c7:3b:53:b7:97:e0:ba:67:72:d4:51:b9:0b:
         de:6b:40:c6:60:1b:af:ca:84:48:bb:12:a1:86:bd:7a:d2:0c:
         01:d7:73:06:03:5e:3b:9d:1f:1f:1a:d4:f6:eb:04:08:c9:6d:
         74:23:11:c6:1d:fd:d3:e0:49:b6:db:61:c4:16:54:5f:2d:61:
         12:ff:c8:82:67:e8:bd:3d:93:91:bb:a8:ac:f2:68:2e:6f:71:
         f1:6a:17:3d:3c:25:16:0b:e4:10:42:40:62:28:63:a3:c8:15:
         ab:c2:c7:81:ee:d5:fd:bc:de:c9:e5:c9:84:24:93:f1:54:b4:
         ae:58:98:65:0a:43:db:2e:ca:fa:72:c7:3b:e2:df:54:ed:c2:
         c8:7d:cc:79:25:a6:dd:08:40:8c:54:20:e5:55:82:5c:b0:67:
         f6:80:ae:d0:04:76:0f:19:5b:d2:a9:b5:eb:d0:20:26:87:f1:
         09:ad:6e:be:cb:d6:b9:15:32:97:e8:d4:75:01:f8:7a:12:ab:
         62:17:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:04:33 2024 by rpki-client on console-ams.rpki-client.org