Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File:                     HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier:          +0uJmgxE4Ldl/DhtlIXftRPGKEvIMG3s5hPyZUdisB8=
Subject key identifier:   4B:BA:D2:CC:B0:45:9F:8E:D4:40:4E:78:6E:BA:94:75:76:BF:C3:F1
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       0193549B3BA9B98A3379E73803D13E448EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number:          13B7
Signing time:             Fri 22 Nov 2024 16:01:19 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:19 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:19 +0000
Files and hashes:         1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: oxYVTTGEQscGcNawDsPyDMXiYWmBD7nWPUMK0wKWPDA=)
                          2: U_rRkLjI_8zW8W9T_j8hyNbH5H8.roa (hash: 1sPLXdn50D+Gj8+QftUUS3U/y8BDczGCDqpUbx/HvjM=)
                          3: tmqB9j1Zv87n_4VHPl-W7Huf9ec.roa (hash: LcQ2iim+9F3DHwiWvgYDP+3vMY499G9on/0+L0zdCUE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:3b:a9:b9:8a:33:79:e7:38:03:d1:3e:44:8e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: Nov 22 16:01:19 2024 GMT
            Not After : Nov 23 16:01:19 2024 GMT
        Subject: CN=4bbad2ccb0459f8ed4404e786eba947576bfc3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:ad:41:8e:bc:eb:a1:ed:8f:b0:44:26:57:
                    7d:62:de:13:92:d9:4f:ae:14:be:29:48:88:cb:3f:
                    94:7c:53:35:01:f1:84:0c:7a:e6:5c:a2:c8:00:36:
                    b7:49:83:ba:02:62:9a:9b:18:02:8a:25:23:4c:05:
                    6c:52:8f:7b:79:bd:75:c8:ac:7c:9e:e1:d1:15:13:
                    5f:f0:c1:a0:58:cb:91:44:de:12:6f:2d:1b:2a:3d:
                    2e:90:dd:cc:db:54:cb:d1:d7:ec:0e:f4:d1:0a:ea:
                    6a:ae:92:80:38:10:eb:2d:60:97:2c:4e:17:78:96:
                    80:2b:6a:2a:11:7e:0c:95:fe:ef:e5:ab:35:ea:84:
                    d2:b9:6a:92:e1:92:27:93:67:2a:75:4c:a4:0d:49:
                    3b:f9:54:ae:43:da:a7:ae:b7:3a:fc:3f:1c:ac:25:
                    85:91:e5:06:9e:e4:28:9e:5c:87:3e:66:f4:be:a3:
                    8c:51:dd:c4:df:98:d2:92:57:6a:ff:43:04:92:2b:
                    33:87:03:7d:5f:41:d5:05:7d:00:87:93:c6:0e:fb:
                    14:ed:a7:f4:20:fa:e6:17:d8:74:37:73:75:e2:9e:
                    00:ca:d0:43:e8:73:f5:62:69:fd:2c:4c:c1:9d:45:
                    5e:0d:d4:8c:f1:0d:25:98:37:cd:e9:f9:ae:29:04:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BA:D2:CC:B0:45:9F:8E:D4:40:4E:78:6E:BA:94:75:76:BF:C3:F1
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:30:32:d8:99:98:84:de:75:99:ab:de:0e:f7:59:20:61:
         23:5b:30:60:2e:04:cc:f4:3a:97:c8:5a:59:f1:61:bc:07:83:
         6d:95:cc:85:45:6a:fa:48:90:51:1f:96:e1:d1:87:d2:57:87:
         aa:17:c6:dd:c1:ba:15:77:7e:66:f2:e1:2f:0f:44:a7:00:92:
         cc:cd:44:6a:6d:ba:d5:d1:79:0e:fb:5c:85:6f:da:f3:ee:7f:
         8a:7c:95:dd:42:04:39:1d:3d:76:d1:dd:22:6d:e1:b8:9e:81:
         57:46:e5:69:f1:0e:30:bd:0e:bb:93:4a:83:bd:89:f9:be:3f:
         26:38:09:80:64:91:6b:84:4f:21:d7:66:08:5d:5a:75:ed:88:
         3e:ed:26:44:17:fc:4d:7a:5b:d9:56:c6:e1:f3:73:41:5b:79:
         26:de:1a:d9:9e:c7:ac:5b:ef:8f:c9:f1:57:a3:ea:39:ef:65:
         e7:53:71:0c:7d:ca:e5:74:89:46:3c:69:d1:70:da:db:db:2f:
         de:7c:d0:fe:1f:7b:b1:28:44:63:95:98:ce:d5:2d:51:c9:d4:
         a9:91:5e:62:8e:99:84:8e:e6:6f:1e:e3:13:64:44:98:81:7a:
         88:92:b7:41:d7:6f:f0:43:de:cc:6c:ea:cf:04:2c:68:2a:c6:
         88:53:b0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmzupuYozeec4A9E+RI66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy
NzA1ZGQwHhcNMjQxMTIyMTYwMTE5WhcNMjQxMTIzMTYwMTE5WjAzMTEwLwYDVQQD
Eyg0YmJhZDJjY2IwNDU5ZjhlZDQ0MDRlNzg2ZWJhOTQ3NTc2YmZjM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta+tQY6866Htj7BEJld9Yt4TktlP
rhS+KUiIyz+UfFM1AfGEDHrmXKLIADa3SYO6AmKamxgCiiUjTAVsUo97eb11yKx8
nuHRFRNf8MGgWMuRRN4Sby0bKj0ukN3M21TL0dfsDvTRCupqrpKAOBDrLWCXLE4X
eJaAK2oqEX4Mlf7v5as16oTSuWqS4ZInk2cqdUykDUk7+VSuQ9qnrrc6/D8crCWF
keUGnuQonlyHPmb0vqOMUd3E35jSkldq/0MEkiszhwN9X0HVBX0Ah5PGDvsU7af0
IPrmF9h0N3N14p4AytBD6HP1Ymn9LEzBnUVeDdSM8Q0lmDfN6fmuKQTs9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu60sywRZ+O1EBOeG66lHV2v8PxMB8GA1UdIwQY
MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt
ZmU0YTAyY2FlZjdmLzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm
LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/IwMtiZ
mITedZmr3g73WSBhI1swYC4EzPQ6l8haWfFhvAeDbZXMhUVq+kiQUR+W4dGH0leH
qhfG3cG6FXd+ZvLhLw9EpwCSzM1Eam261dF5DvtchW/a8+5/inyV3UIEOR09dtHd
Im3huJ6BV0blafEOML0Ou5NKg72J+b4/JjgJgGSRa4RPIddmCF1ade2IPu0mRBf8
TXpb2VbG4fNzQVt5Jt4a2Z7HrFvvj8nxV6PqOe9l51NxDH3K5XSJRjxp0XDa29sv
3nzQ/h97sShEY5WYztUtUcnUqZFeYo6ZhI7mbx7jE2REmIF6iJK3Qddv8EPezGzq
zwQsaCrGiFOwjg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:07 2024 by rpki-client on console-ams.rpki-client.org