Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File:                     HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier:          1aojZ4yJOTBy3+WT5svlhBntleMDEFsgHeCJFfvgTss=
Subject key identifier:   7D:BA:C2:B8:3B:D5:ED:4B:99:9B:98:06:C2:A3:36:18:69:F1:DB:8D
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer:       /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial:       018F37090CAACD09CEB0F394C8C6F5C211E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number:          04EE
Signing time:             Thu 02 May 2024 02:01:30 +0000
Manifest this update:     Thu 02 May 2024 02:01:30 +0000
Manifest next update:     Fri 03 May 2024 02:01:30 +0000
Files and hashes:         1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: kvqEZuC2Yzba7JJv6KVVTvqWHfqhjMszUF/YFbadGZc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:09:0c:aa:cd:09:ce:b0:f3:94:c8:c6:f5:c2:11:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
        Validity
            Not Before: May  2 02:01:30 2024 GMT
            Not After : May  3 02:01:30 2024 GMT
        Subject: CN=7dbac2b83bd5ed4b999b9806c2a3361869f1db8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:a9:31:f5:d4:1e:8a:d1:fa:a6:a4:06:d1:
                    c7:c1:ae:ac:2e:cd:5c:21:5e:af:26:b6:c6:3a:86:
                    68:0a:55:02:99:09:3d:d8:c9:25:88:f3:e1:2f:96:
                    05:51:c7:60:e2:5a:11:1a:b2:16:46:c2:63:70:f6:
                    ac:20:96:0e:b0:0e:0c:36:e4:8e:1f:96:c8:00:a8:
                    95:dd:ac:32:4c:0d:be:3f:b0:11:ae:de:16:ad:58:
                    be:33:a8:86:b7:de:f4:b1:48:d7:38:89:83:ce:c0:
                    1a:94:96:16:b0:3a:35:bf:cd:ba:47:43:32:a2:6e:
                    a7:db:5f:18:90:49:4d:d1:09:e1:9a:58:8c:92:0e:
                    ba:92:53:8a:9d:9f:52:d0:8b:53:e2:55:54:c2:fa:
                    c6:f3:eb:45:e2:fb:27:f4:c5:2d:f1:a5:00:62:7f:
                    d9:c9:a4:30:da:28:85:f6:66:5f:e2:11:a9:45:05:
                    02:4f:56:df:b2:86:ad:1a:2f:e8:9f:0c:2d:49:cc:
                    c2:aa:ee:6e:c0:9b:d1:94:fb:45:36:c9:2a:76:d3:
                    b3:ed:92:a1:1d:d2:b8:fc:15:7f:b8:93:e0:3e:48:
                    60:53:3a:9c:da:a2:96:52:3a:6c:cb:7f:56:6a:27:
                    b1:63:96:fd:b2:c5:35:8a:86:48:60:df:9d:d5:44:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:C2:B8:3B:D5:ED:4B:99:9B:98:06:C2:A3:36:18:69:F1:DB:8D
            X509v3 Authority Key Identifier:
                keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:bd:d6:2e:f5:71:27:54:59:cd:01:cb:33:a0:f1:61:1e:
         28:27:16:fd:32:18:3a:ff:82:40:14:6d:d8:9f:9b:00:54:16:
         3e:69:18:97:dc:d0:42:f4:2f:65:14:e0:88:67:0a:0e:1f:5e:
         34:00:b8:a4:5b:4f:6d:f4:ae:e6:9b:50:2a:74:52:13:00:4b:
         8f:d3:10:51:49:b0:d4:e5:51:f5:b5:a8:4c:c8:6f:6e:7d:69:
         5d:ee:a0:98:ae:f3:b6:e4:d6:df:72:43:64:19:c2:70:12:1c:
         05:64:c4:14:ac:e7:0d:d1:90:7d:84:a7:74:06:47:b3:93:ed:
         4f:73:34:52:d5:9c:49:6d:bc:58:27:43:bd:22:e6:32:86:ee:
         44:c4:01:3e:94:cc:84:73:ca:dd:8c:5b:b2:e7:07:87:46:94:
         20:c7:ad:5e:a1:32:2a:c0:65:23:a6:d3:ce:5c:0f:89:d6:be:
         99:d7:50:5d:fc:be:ae:e6:34:2d:62:02:0a:ce:37:0b:25:da:
         f1:47:2e:0e:76:f6:3a:d3:73:c5:93:76:74:97:c1:ea:d9:57:
         f0:79:2e:4b:48:ef:59:f5:80:10:4f:87:a5:15:74:c6:89:7f:
         86:85:f8:32:e4:32:d8:56:e2:ad:45:4c:1c:77:e4:bd:48:ac:
         7e:4a:1c:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83CQyqzQnOsPOUyMb1whHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjQwNTAyMDIwMTMwWhcNMjQwNTAzMDIwMTMwWjAzMTEwLwYDVQQD
Eyg3ZGJhYzJiODNiZDVlZDRiOTk5Yjk4MDZjMmEzMzYxODY5ZjFkYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwipMfXUHorR+qakBtHHwa6sLs1c
IV6vJrbGOoZoClUCmQk92MkliPPhL5YFUcdg4loRGrIWRsJjcPasIJYOsA4MNuSO
H5bIAKiV3awyTA2+P7ARrt4WrVi+M6iGt970sUjXOImDzsAalJYWsDo1v826R0My
om6n218YkElN0QnhmliMkg66klOKnZ9S0ItT4lVUwvrG8+tF4vsn9MUt8aUAYn/Z
yaQw2iiF9mZf4hGpRQUCT1bfsoatGi/onwwtSczCqu5uwJvRlPtFNskqdtOz7ZKh
HdK4/BV/uJPgPkhgUzqc2qKWUjpsy39WaiexY5b9ssU1ioZIYN+d1USJxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH26wrg71e1LmZuYBsKjNhhp8duNMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9K91i71
cSdUWc0ByzOg8WEeKCcW/TIYOv+CQBRt2J+bAFQWPmkYl9zQQvQvZRTgiGcKDh9e
NAC4pFtPbfSu5ptQKnRSEwBLj9MQUUmw1OVR9bWoTMhvbn1pXe6gmK7ztuTW33JD
ZBnCcBIcBWTEFKznDdGQfYSndAZHs5PtT3M0UtWcSW28WCdDvSLmMobuRMQBPpTM
hHPK3YxbsucHh0aUIMetXqEyKsBlI6bTzlwPida+mddQXfy+ruY0LWICCs43CyXa
8UcuDnb2OtNzxZN2dJfB6tlX8HkuS0jvWfWAEE+HpRV0xol/hoX4MuQy2FbirUVM
HHfkvUisfkocpg==
-----END CERTIFICATE-----
Generated at Thu May 2 07:46:35 2024 by rpki-client on console-fra.rpki-client.org