Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File:                     HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier:          2F8EY39cgSXIkfYivqy0usPa9Ez66eor8XS6//89wh8=
Subject key identifier:   EC:8E:68:7A:04:2D:7A:4D:47:4F:3E:C4:FF:E3:49:8C:3F:A7:1B:4E
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer:       /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial:       018F3A0B38DBF61F95C3869D1245790C7558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number:          1152
Signing time:             Thu 02 May 2024 16:02:44 +0000
Manifest this update:     Thu 02 May 2024 16:02:44 +0000
Manifest next update:     Fri 03 May 2024 16:02:44 +0000
Files and hashes:         1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: Ay3wlKem5kapRNbSJ2hPxAmqR4OjBb/xe9VlP1V+nOI=)
                          2: OQJzntpQX9-JYIUpyxk4wn8509U.roa (hash: Ggxs5bJmZdkTixQ0e3ZJgdCG+tzmPZiiJ2YS72bZMtA=)
                          3: XplbbbOfgxCl7S0rpiOhg3lU4E0.roa (hash: N1s6PUfPNghPnM+aq3DfiJSV5xoHjTLW5zAF40j7X5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:38:db:f6:1f:95:c3:86:9d:12:45:79:0c:75:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
        Validity
            Not Before: May  2 16:02:44 2024 GMT
            Not After : May  3 16:02:44 2024 GMT
        Subject: CN=ec8e687a042d7a4d474f3ec4ffe3498c3fa71b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:de:5d:7b:97:eb:29:6c:a8:4f:7e:ce:e8:
                    28:43:4f:27:b7:cf:97:83:91:0e:55:8d:cc:23:24:
                    4c:fd:d3:12:bc:96:92:55:d0:e7:83:83:7e:e7:25:
                    37:f7:19:fd:f8:a7:59:55:e8:d0:fd:b1:11:ff:bb:
                    31:84:e1:d0:4d:d0:dd:f0:a5:37:d4:dc:d9:f3:8c:
                    03:68:9c:ac:0d:34:45:c0:6c:96:0b:73:37:fd:8e:
                    53:e8:f3:86:84:46:df:33:3e:54:69:34:cb:42:d4:
                    20:e3:d2:e1:da:3b:a6:aa:8d:91:56:d4:c6:3b:f1:
                    81:90:15:24:eb:f0:6b:39:1c:8b:42:4d:dc:a9:47:
                    5e:b7:02:1b:4c:28:c9:b0:9e:a2:a8:e1:d0:7c:0a:
                    60:a4:ca:da:ac:60:96:bf:c6:50:41:0e:a6:c1:bc:
                    86:a6:fc:90:7a:c5:53:17:05:6a:85:3b:6a:70:05:
                    0e:e9:73:ce:7e:be:ad:cc:cd:38:65:17:ef:c0:b3:
                    9f:43:ec:8d:43:88:90:bd:bd:19:37:c6:90:5d:0a:
                    ea:e8:95:00:70:cc:9a:b8:0e:4d:4b:fb:d1:4b:4a:
                    0a:83:96:66:65:34:c3:e6:ec:0f:ea:e7:b6:18:3c:
                    1a:d6:4e:5f:da:4d:e7:23:c2:05:dc:62:a3:16:f7:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8E:68:7A:04:2D:7A:4D:47:4F:3E:C4:FF:E3:49:8C:3F:A7:1B:4E
            X509v3 Authority Key Identifier:
                keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:02:b9:92:ca:4f:e8:b3:bf:fa:51:d9:7a:44:f2:d8:4c:8a:
         af:f7:7d:8f:d1:f0:73:ef:bf:54:6f:52:65:e3:10:c9:16:c9:
         34:c5:c1:81:74:d7:8b:f9:ee:d0:a8:28:3b:a7:77:c8:ad:58:
         b4:a1:42:f1:56:40:e4:0c:af:a6:fa:f1:ae:5d:ba:3d:b4:02:
         e1:76:b6:63:89:df:26:41:0a:0d:d9:fc:48:c0:e7:4a:0e:8a:
         b4:87:07:61:27:3e:47:80:fe:90:7e:e1:0c:e1:37:8c:73:8b:
         4e:c0:39:2b:ee:45:7c:64:3c:15:4e:10:25:f0:d4:2f:5b:c9:
         69:04:96:aa:ea:54:07:a8:b4:ba:c7:9d:a1:38:3f:63:2f:48:
         5c:3a:9d:b2:26:28:6e:94:b2:3a:90:51:63:39:1a:55:ce:4a:
         db:19:15:41:50:dd:be:17:96:96:8c:db:77:10:9b:c0:ca:89:
         ea:43:64:b3:19:10:74:78:1c:7b:92:65:1a:bb:86:46:9c:d1:
         cc:a2:56:bd:91:af:3a:44:43:ba:53:cf:93:f6:56:15:7b:c4:
         00:83:50:1b:20:8c:ef:d6:a7:64:14:69:e4:23:22:06:ad:b5:
         ea:e3:15:ee:78:83:32:ab:84:45:2c:6a:6d:bb:76:0d:08:d4:
         41:74:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:44:34 2024 by rpki-client on console-fra.rpki-client.org