Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File:                     HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier:          8gKk0V9VjCGLUoBviM9IFrDDMcmXfNBqEURMbZG3yAI=
Subject key identifier:   54:C7:A3:7F:4D:04:7D:E5:F7:31:9D:26:D8:1D:CC:E0:D9:B5:C6:E7
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer:       /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial:       019406479B53AEBE6968396E8639003F656E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number:          13D1
Signing time:             Fri 27 Dec 2024 04:02:23 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:23 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:23 +0000
Files and hashes:         1: AyjZyEuuUriy-LFDo0rGNIWkOQo.roa (hash: AgEcZnhSoTVyfuScIMgLbMLLav2Klhip4uRVap+ahw0=)
                          2: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: zvYdL2TVC1MzLn7eQIf52Rrn9YDzlNDy3g6iCdekiok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:9b:53:ae:be:69:68:39:6e:86:39:00:3f:65:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
        Validity
            Not Before: Dec 27 04:02:23 2024 GMT
            Not After : Dec 28 04:02:23 2024 GMT
        Subject: CN=54c7a37f4d047de5f7319d26d81dcce0d9b5c6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:20:97:7e:23:f0:d4:7d:4b:ab:07:24:69:
                    23:16:a9:ff:7e:08:4b:6d:b2:16:7a:e6:73:d4:33:
                    c1:3f:4b:5b:90:24:0c:10:2f:0e:37:28:96:35:ad:
                    c4:dd:1b:9b:f4:e9:cf:36:ee:19:6d:dd:55:ff:ad:
                    8f:6e:c8:44:8c:14:59:a7:92:54:4e:ce:22:b3:76:
                    a1:b2:e8:30:5e:12:bb:a8:e6:82:5f:de:1e:91:d5:
                    e8:10:ec:e4:5e:02:70:1b:bf:28:30:8e:8b:4a:9b:
                    1c:34:bb:b7:f9:67:d2:b0:51:1c:32:78:7c:6c:60:
                    af:44:36:c7:80:e4:d6:a0:ce:3b:ac:e5:11:ec:13:
                    07:02:8e:0a:84:67:1b:10:9f:75:de:ac:d9:88:d3:
                    b5:5f:3b:2e:0d:41:9d:aa:c3:a7:be:33:e5:7b:d2:
                    a6:82:0f:fe:d4:60:c0:e1:e8:9e:d9:82:12:cb:2b:
                    55:81:12:35:1f:82:cb:58:74:e9:3f:0e:4a:cf:69:
                    45:41:da:b0:8f:6a:fa:1b:45:80:71:77:ed:ff:fc:
                    cc:20:bc:8f:91:35:67:0a:76:b9:e8:b3:fb:f7:ae:
                    83:f7:29:44:73:3c:5e:4b:21:21:76:73:24:89:3c:
                    47:2d:13:71:2b:e0:ae:d0:e9:e7:0d:ba:14:a9:10:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:A3:7F:4D:04:7D:E5:F7:31:9D:26:D8:1D:CC:E0:D9:B5:C6:E7
            X509v3 Authority Key Identifier:
                keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:8c:f2:c5:98:48:33:15:37:cb:4b:05:c9:16:dc:8b:29:
         38:81:b9:a9:3b:f2:27:e8:4f:07:0f:a9:7c:cf:fc:24:4c:8c:
         5b:4c:ce:65:cc:27:f3:4d:7c:6f:c3:d9:b6:57:1e:8e:31:2b:
         f7:9e:0c:22:c0:8d:b0:bc:f7:eb:3c:e8:4f:71:c9:db:a4:df:
         ed:07:e8:60:36:bb:b9:16:b0:ae:86:fa:f1:00:8f:19:8b:16:
         a9:1e:87:94:5d:1e:1d:1c:e2:0b:56:cb:87:a7:62:aa:28:b2:
         e9:03:aa:38:55:25:de:a8:d8:04:5d:db:91:fa:7e:14:9d:ef:
         df:51:39:03:87:46:30:27:32:3f:21:e4:06:59:08:e1:a3:cd:
         4f:a8:92:fd:b2:9a:84:e6:dc:c2:4d:ad:63:c0:b0:aa:0c:e9:
         64:ce:4c:d4:97:f4:4c:bc:f0:90:96:8a:19:68:4c:41:db:8b:
         6e:31:9d:f3:e0:bc:93:b9:c0:69:4e:9e:40:ed:90:63:d5:f7:
         9e:1e:d4:1f:1a:7a:22:6d:e9:4e:e8:46:82:e8:47:b1:1d:aa:
         e2:3b:cd:12:48:9f:02:72:14:f0:3d:d3:87:bc:cf:6b:1d:e7:
         52:15:45:d6:37:e8:66:2e:27:21:36:23:3d:a3:77:d6:ab:a4:
         46:4d:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:04:43 2024 by rpki-client on console-ams.rpki-client.org