Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          HFrCq5oCtp42NlyFCPUdYuzLlDUVF+TDBiSn4sFH+G4=
Subject key identifier:   84:B9:E5:A0:C4:8E:04:A2:95:67:53:47:31:38:B6:F7:0B:8D:37:84
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       019691834E74ACF3C410998D597B933E08F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          151E
Signing time:             Fri 02 May 2025 15:00:23 +0000
Manifest this update:     Fri 02 May 2025 15:00:23 +0000
Manifest next update:     Sat 03 May 2025 15:00:23 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: ZmyzATkwgdKF3T6xWTkdzLXkYPRoFoJ9z+vdpZjCfx8=)
                          2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:4e:74:ac:f3:c4:10:99:8d:59:7b:93:3e:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: May  2 15:00:23 2025 GMT
            Not After : May  3 15:00:23 2025 GMT
        Subject: CN=84b9e5a0c48e04a2956753473138b6f70b8d3784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:5d:73:93:bf:06:59:54:7f:78:e6:14:3f:
                    27:7a:18:11:3d:b8:84:13:74:47:60:84:66:68:32:
                    e8:b8:fd:08:3b:56:3e:b7:ef:4e:26:ff:c6:c2:41:
                    a2:62:f8:22:d9:a7:65:92:76:d5:f8:0e:0f:eb:58:
                    32:20:8d:64:95:7a:2e:89:c8:19:3f:3f:8b:b9:0f:
                    ec:c6:96:0c:4f:af:1c:2c:91:14:4f:a4:5d:82:30:
                    30:d0:80:5b:41:67:91:f9:05:f7:7a:f8:a1:33:ab:
                    ec:3a:46:a2:24:81:01:3f:26:28:8f:c4:98:b4:3d:
                    f3:aa:61:07:a7:37:cb:bd:47:56:4a:70:a4:42:8f:
                    6f:2f:12:64:1c:67:7b:68:6f:6b:df:51:61:47:e5:
                    bc:bb:2a:f5:3e:53:dd:b0:a7:47:36:11:42:cb:b0:
                    2a:e2:34:19:d9:dc:32:5e:03:0d:f1:06:66:f8:0d:
                    e6:3d:1d:a9:78:3a:ea:fa:dc:a5:fe:b9:4b:c5:27:
                    d0:d4:c5:c7:d8:ea:06:70:45:42:5c:2f:90:44:e7:
                    b7:05:47:a4:f1:6b:d4:fc:76:c8:2c:be:30:c1:ef:
                    7a:d1:11:eb:43:13:5b:d2:f0:0c:1e:69:e2:e7:6f:
                    3c:a1:23:13:e5:26:8d:e0:d9:45:ea:cb:21:5b:5a:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B9:E5:A0:C4:8E:04:A2:95:67:53:47:31:38:B6:F7:0B:8D:37:84
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:33:4a:90:13:4a:0d:13:c7:4e:4a:73:17:b6:48:49:cb:
         58:d9:66:6d:88:0c:81:c4:bf:57:c2:d2:29:9e:93:62:7e:04:
         09:db:10:4e:80:0f:47:57:1c:fa:5e:e1:3d:a6:b2:27:df:d7:
         63:32:27:0d:d3:5a:f2:35:6e:fb:c7:c4:7a:2e:b5:0b:e7:5d:
         33:19:b2:56:dd:7b:b6:a3:10:c8:14:72:d2:56:2e:cb:08:f4:
         55:b1:65:2c:f3:e8:5a:ba:16:d0:15:34:95:20:e2:52:8f:0d:
         ca:5b:c7:09:35:28:60:20:b8:50:a2:20:cd:0c:8f:8a:0e:8e:
         42:76:42:d6:59:79:87:48:ec:d3:b4:c2:27:70:1c:bd:7f:1f:
         c4:c4:b6:19:4e:b3:84:be:d4:e9:0d:81:77:fa:00:fc:6d:70:
         78:35:b5:47:e0:9f:d4:0e:bf:53:1d:9c:a8:0c:d7:96:8f:2c:
         44:92:e0:26:d0:3f:3d:6b:34:c4:f3:52:5f:dd:38:d1:5b:3c:
         48:0e:cd:fa:bb:44:1a:07:b9:69:48:5e:29:81:ae:53:c8:ca:
         9b:f0:ad:ce:47:35:4a:1b:6d:f1:82:ca:1f:a5:81:bc:dd:f8:
         d9:87:67:14:5e:f5:67:07:99:91:fc:24:35:52:db:97:a3:b0:
         02:98:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:48:04 2025 by rpki-client