Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File:                     HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier:          nrRq24BTbvoyj+gwvPOFy3waH0JM79xVFfVF9ahqPBU=
Subject key identifier:   28:A0:7C:DD:C9:6C:66:8B:2B:D4:9A:45:B6:7E:3E:38:95:29:8F:C5
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer:       /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial:       0194BB601F294B1489051F3ADA6CB065BC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number:          0491
Signing time:             Fri 31 Jan 2025 08:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:26 +0000
Files and hashes:         1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: Les2WBWcfTOBsyJuUo9mFEMUgOZtmoSmkTU1C32880o=)
                          2: OgqV3K9kCSqiIeZrVFL3cqlGwzs.roa (hash: bIUylMSKQ5ZoW2Pp24mJHfGBGlU7c/qX9MC7wrpEUho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:1f:29:4b:14:89:05:1f:3a:da:6c:b0:65:bc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
        Validity
            Not Before: Jan 31 08:00:26 2025 GMT
            Not After : Feb  1 08:00:26 2025 GMT
        Subject: CN=28a07cddc96c668b2bd49a45b67e3e3895298fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:33:a4:d7:7f:a6:68:1e:47:10:16:2b:56:
                    6b:ab:39:f8:6e:3d:dc:57:30:b6:6a:a0:a8:80:ca:
                    69:6a:c4:bc:00:50:1e:0e:46:b1:74:fb:0b:c3:8d:
                    bb:e6:0f:c7:ed:99:6a:70:60:3e:c7:50:2d:3e:69:
                    fb:b9:aa:aa:93:bb:50:37:10:18:21:5c:4c:ed:eb:
                    48:5c:35:38:96:f1:9d:5c:72:c7:70:f8:f9:78:ab:
                    53:40:c1:b1:fc:0b:f6:3a:40:c1:74:2b:16:12:3a:
                    11:23:9c:99:44:ff:79:f4:0e:c4:09:a5:bf:cd:c2:
                    fa:3d:a1:6d:0f:27:fa:c5:19:56:b5:39:b0:94:6e:
                    3e:2f:9a:8d:d5:e5:75:0f:08:dd:f7:7c:44:c9:03:
                    5a:3f:21:93:b1:d6:8d:9c:53:ad:6d:b3:1b:fb:0e:
                    49:f9:a5:c8:ce:92:02:65:b4:f4:87:9f:0c:9d:4a:
                    c4:11:65:33:5c:18:c7:8f:e8:31:6c:b0:fb:ba:8f:
                    b7:5d:16:58:07:59:b0:5c:ea:8e:0e:bc:49:2f:1d:
                    f1:fb:83:8b:cc:bd:c4:43:72:1b:7c:c9:f3:76:f5:
                    66:4f:44:ef:20:28:c6:0d:76:70:0b:82:3c:92:bb:
                    41:5d:6e:64:4c:37:6d:6c:ae:73:42:47:17:4c:63:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:7C:DD:C9:6C:66:8B:2B:D4:9A:45:B6:7E:3E:38:95:29:8F:C5
            X509v3 Authority Key Identifier:
                keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:86:b6:21:9b:30:29:d8:a4:68:3f:d7:d1:0b:c8:ad:e8:
         b0:89:d1:01:e2:16:93:01:1f:32:5e:60:dc:f8:64:58:b9:20:
         e5:dc:e4:b7:42:92:de:44:c5:70:30:9e:b5:84:12:3f:18:ef:
         77:15:c3:d6:67:72:e5:bd:54:6a:a1:40:35:15:7f:37:93:67:
         91:eb:f7:28:13:9f:80:fb:52:6b:09:27:b7:33:ef:be:a8:a2:
         a7:28:55:45:42:be:42:10:ba:d1:4b:ea:cd:6c:18:18:54:53:
         88:f8:d5:10:cc:6a:04:17:a5:7b:24:00:17:99:03:5a:7c:39:
         2d:8e:bf:70:c6:78:ac:28:39:59:c5:63:39:65:9e:a3:e0:6d:
         6c:12:77:67:28:69:f9:a7:1e:e5:41:8b:88:39:c1:5a:ee:72:
         a4:ce:7d:9a:3b:55:00:14:d1:ca:dd:15:26:5b:77:9a:a8:4d:
         54:d7:74:f6:0e:ac:44:27:62:0e:83:4e:ae:ce:c8:ff:5a:cb:
         bd:9d:57:af:29:83:70:7b:1c:1a:f0:17:54:11:d0:7d:62:77:
         df:b7:5e:5c:c0:2a:69:7f:cb:97:b0:1c:0a:9e:fa:bc:cd:8d:
         ec:3a:b5:a1:ca:dd:2e:f2:27:ba:7b:de:d4:12:e9:b7:20:c7:
         a3:1e:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:50 2025 by rpki-client on console-fra.rpki-client.org