Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File:                     HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier:          SiWgo1uuuR/4sgyvsnU712lQLq+yXMnpEpgGxb0AuJQ=
Subject key identifier:   DA:8B:A1:B0:AC:A0:71:77:67:7A:3E:82:87:87:6C:53:3E:36:44:85
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer:       /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial:       01936B2260E85F0DE3520BBC2F55A51CDE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number:          119C
Signing time:             Wed 27 Nov 2024 01:00:35 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:35 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:35 +0000
Files and hashes:         1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: msvU69bzn3PxNXFM7QiNSdLEI4OUEtwc2w7LRaaQ4iU=)
                          2: mQat0oYos0rz6WzLVENPxPll3eQ.roa (hash: N6TnYVEvI/viTJqec3klmEMQPG1n7Qe/LZMhMgsP5O4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:60:e8:5f:0d:e3:52:0b:bc:2f:55:a5:1c:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
        Validity
            Not Before: Nov 27 01:00:35 2024 GMT
            Not After : Nov 28 01:00:35 2024 GMT
        Subject: CN=da8ba1b0aca07177677a3e8287876c533e364485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:ac:89:e7:c1:25:b7:81:be:2a:15:3f:5e:
                    f8:bd:48:d2:d8:00:3a:00:9d:e7:c0:63:2c:73:5b:
                    b8:f8:38:c1:ab:d5:be:95:7a:38:37:b6:43:0c:d0:
                    89:f6:c3:05:4f:a9:20:73:c7:2d:a0:68:80:eb:6a:
                    32:3f:76:af:72:78:6d:d4:8b:3f:9c:b0:9d:d8:89:
                    1e:e9:ad:ce:50:f7:a6:e3:7c:4e:9a:de:d5:94:3e:
                    e3:83:b5:07:54:48:49:1b:fd:9f:22:b1:e0:3e:b2:
                    09:f7:bb:59:0b:7c:89:7f:0d:ad:aa:16:29:aa:bd:
                    26:ff:31:39:03:59:14:70:c1:92:14:5d:0d:ba:3b:
                    48:56:3a:8a:08:2a:5e:f7:60:6f:f3:e8:98:3e:6a:
                    f8:97:e8:da:07:84:9c:dc:86:c8:09:98:14:b6:58:
                    00:36:98:e1:07:69:05:a6:e3:b7:c6:9c:7f:d3:b1:
                    0a:ad:fe:70:27:b9:8f:d7:7b:dd:d1:17:1a:13:27:
                    df:5e:05:3a:9b:4c:a9:56:78:b6:e6:51:c1:cd:ff:
                    89:2e:9d:08:4e:ea:03:66:6e:1b:c4:00:09:12:6a:
                    16:21:44:64:a2:0d:b8:c4:91:11:49:b8:64:16:3d:
                    91:63:8c:01:61:b5:ea:80:10:b2:10:e1:04:a1:4a:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:A1:B0:AC:A0:71:77:67:7A:3E:82:87:87:6C:53:3E:36:44:85
            X509v3 Authority Key Identifier:
                keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:6c:b3:7f:3a:2b:18:e8:2f:18:84:2a:c1:61:41:6a:96:
         4b:93:45:98:1b:3b:12:8e:82:23:68:db:b0:db:c3:0c:7d:6f:
         a4:a7:f3:59:50:12:47:35:c1:f8:5f:0e:3b:65:06:31:30:ad:
         ad:7a:f5:1c:69:b5:1e:9d:b1:10:94:a3:fe:e8:be:f2:fc:7b:
         6a:be:11:b0:a9:98:2f:1e:49:fb:ae:b3:70:52:92:53:c3:4d:
         44:71:b9:4c:19:68:36:72:f9:e1:e6:05:79:ce:62:1e:4b:3c:
         0b:31:32:ce:69:62:86:26:b0:d2:50:b3:a5:4a:4d:ac:e4:bd:
         a2:0d:87:8c:49:1e:5d:48:4f:dd:0c:97:8a:35:58:3d:fd:bd:
         04:79:87:a1:a0:b5:de:fb:72:2b:a2:86:af:8d:ca:82:c9:8d:
         a8:c6:b0:53:f2:e2:4f:fc:f3:e2:79:78:30:43:08:8b:81:3d:
         dc:b2:7e:59:0b:d8:c3:4d:19:27:70:b2:ac:49:c1:63:8c:a7:
         cb:33:d2:d8:17:16:c0:ab:9c:6d:cb:12:33:92:ae:cb:a3:8d:
         72:a8:d9:ea:30:1f:70:f9:5a:16:22:6e:d2:11:43:68:80:24:
         d2:40:ec:e0:c0:80:96:f7:c8:0e:4b:4d:12:a0:a0:a2:8b:88:
         18:d2:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:30 2024 by rpki-client on console-ams.rpki-client.org