Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File:                     AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier:          e05r0E0dZ+c5/rWr4JHWVKXjvhaoonGkwbQ73Tg8SFA=
Subject key identifier:   1B:1A:33:7B:D1:DF:A4:E0:FE:49:34:64:A0:7E:07:55:8F:7A:42:13
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer:       /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial:       01901E21A2BD824AEC785630280BAA9E6748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number:          0133
Signing time:             Sat 15 Jun 2024 23:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:39 +0000
Files and hashes:         1: 3OFqB22SQbu8hbA6h_SbN-8VdE4.roa (hash: wa7d1uX4axouVCqI1Vy2jrvGNKka8gXWrFvK5JxPSYs=)
                          2: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: xTzqPMkUSOZ2UhcngeQrmue5ZgriweRza3SOAXnw3u8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a2:bd:82:4a:ec:78:56:30:28:0b:aa:9e:67:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
        Validity
            Not Before: Jun 15 23:00:39 2024 GMT
            Not After : Jun 16 23:00:39 2024 GMT
        Subject: CN=1b1a337bd1dfa4e0fe493464a07e07558f7a4213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:4d:73:c8:59:ae:5e:b5:b9:c4:cb:93:60:
                    ec:22:2f:1b:18:3c:b8:27:4c:64:a1:7d:f4:c5:57:
                    bb:73:fe:32:38:a5:56:7a:06:ef:c9:8f:9c:17:90:
                    55:1c:3f:f9:de:9d:88:6e:0c:2b:8f:6b:6b:ce:96:
                    e4:8c:de:ab:b7:0e:95:10:56:d9:e4:0e:2b:38:1d:
                    c4:f8:d9:c8:67:ac:e5:5d:6d:ea:52:79:87:33:29:
                    5e:6a:23:af:66:11:b2:ee:f9:8d:74:94:e6:2a:a9:
                    fc:4d:39:0f:0b:7a:e8:3d:39:66:24:37:09:a5:9e:
                    52:b8:65:c7:50:3f:c7:8a:be:14:17:88:68:22:07:
                    d4:bf:15:78:83:12:39:31:a1:f2:b9:ac:ba:97:bf:
                    b6:c8:77:5a:c5:7d:80:7e:3b:a8:67:03:eb:57:49:
                    76:16:a2:04:2b:71:7b:39:df:f0:96:ac:75:44:e0:
                    87:9c:c8:11:f6:b2:68:c9:fa:19:9c:a7:8f:af:9f:
                    b8:a0:76:b8:e1:fa:3e:56:4b:f2:be:12:20:50:62:
                    c8:25:68:7b:0f:ce:ba:ad:05:bf:20:44:57:ff:0b:
                    1b:a7:54:ba:93:c9:79:1a:3f:3d:7d:1e:b5:32:90:
                    54:c1:ff:62:94:df:b6:ad:c9:a0:e1:6b:2f:d8:e0:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:33:7B:D1:DF:A4:E0:FE:49:34:64:A0:7E:07:55:8F:7A:42:13
            X509v3 Authority Key Identifier:
                keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:11:b6:9c:eb:c5:a0:72:f4:bf:ae:fb:c3:2a:96:be:42:
         48:23:57:0b:41:5e:45:50:43:e6:5a:f2:ec:eb:85:78:cc:ca:
         3f:0e:c5:d7:0b:14:b4:12:94:fd:49:4a:03:ef:8d:26:61:f0:
         58:7c:bc:1b:20:64:dc:2b:0b:6d:7d:9f:d9:3a:ad:bd:85:ca:
         6c:80:12:d2:6b:e8:ac:09:59:63:2a:7a:66:cc:dc:c2:a6:ef:
         20:19:4a:5b:de:16:50:d2:a3:35:49:52:3b:ec:b2:95:56:3a:
         f4:b9:77:37:18:bc:30:e5:0e:3a:dc:52:4d:f0:25:52:a6:10:
         b7:30:f2:53:94:32:06:9f:86:6b:26:9f:49:4a:10:a3:f0:40:
         4a:e1:d4:53:fc:05:7c:7d:e2:22:3a:9b:da:54:52:58:f0:01:
         ff:93:ee:77:e2:5c:8d:4c:36:5f:7d:c3:ad:aa:86:b4:71:a5:
         9a:d3:8f:5e:e9:93:ac:6f:e8:a7:29:7d:bb:6b:b5:b8:af:a5:
         ad:39:b4:ea:33:ba:84:cd:23:e3:20:34:69:30:f0:55:15:21:
         90:b3:2d:0a:26:4c:39:9a:a5:01:a8:fc:c4:68:d7:92:8f:2a:
         09:5f:50:bd:2d:1e:b6:42:70:3d:28:fb:bd:ed:98:cd:2b:77:
         11:74:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:06 2024 by rpki-client on console-ams.rpki-client.org