Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          muOqdmfXD7n/SlZU8xhwVsFwJG0O5oVXL0+HqGMqvsY=
Subject key identifier:   21:63:95:53:0A:70:9E:EC:B9:E6:96:78:DA:11:0A:99:6E:81:C2:6B
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       01901D469D19DA1A3611691268DA0BFD64B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          10A7
Signing time:             Sat 15 Jun 2024 19:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:25 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: MRrnlmlVWSQ7VocIoL1dx/M1DNgy7k4MXYUqCF5Puz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:9d:19:da:1a:36:11:69:12:68:da:0b:fd:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Jun 15 19:01:25 2024 GMT
            Not After : Jun 16 19:01:25 2024 GMT
        Subject: CN=216395530a709eecb9e69678da110a996e81c26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:27:1b:c4:26:fe:b2:c7:3d:5e:51:92:0e:
                    79:b4:6d:43:62:f2:b1:6a:7a:bc:36:5b:8c:18:24:
                    1f:39:9f:d4:dd:b4:7c:ec:fc:fb:ff:a6:e3:a8:0e:
                    62:22:0a:9b:1d:69:0f:50:71:8a:c5:65:4a:b0:aa:
                    50:07:b5:39:59:38:2b:a5:34:85:68:ea:35:84:4b:
                    97:e6:d8:54:5c:4d:4c:fe:62:09:f6:57:ed:f2:50:
                    1d:5f:66:40:48:9c:8f:63:6d:00:49:7e:2d:4d:9e:
                    46:bd:57:45:95:07:3e:89:e7:b5:94:e7:00:a1:ef:
                    e1:c6:dc:4c:03:ab:20:a2:f9:1a:bb:05:39:24:e3:
                    bd:4b:f7:72:5f:6d:23:bd:91:04:c0:b8:6b:71:37:
                    cb:76:7a:cc:3c:d8:47:b6:b7:52:bb:24:6f:1e:0f:
                    77:ce:4b:e6:fd:bd:a0:9e:21:e5:f8:a7:d0:68:6e:
                    c7:66:fe:ba:25:cd:0f:46:28:4a:76:c1:b8:1b:c8:
                    ce:7b:48:41:63:37:9c:8c:0f:4c:b6:2b:c7:1d:93:
                    c0:ff:17:fb:5f:55:77:65:05:5b:4b:e5:ad:ee:89:
                    a6:f4:ec:8d:3d:db:9d:e9:2d:f9:11:65:42:a1:b2:
                    4e:6c:72:9e:54:f9:69:9f:1a:b9:3f:a5:a6:2f:43:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:63:95:53:0A:70:9E:EC:B9:E6:96:78:DA:11:0A:99:6E:81:C2:6B
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:89:49:e1:25:76:56:68:61:6e:9c:a1:2e:54:2b:62:6f:61:
         b0:2d:82:f2:6b:96:ee:fc:3c:d8:de:24:e1:14:f8:ba:7d:e3:
         fa:06:0b:0a:96:d5:4e:06:67:0b:4e:37:4d:97:97:d8:05:10:
         d1:40:8e:18:6a:2f:36:89:a8:9b:36:d7:fd:37:5c:1d:ad:a6:
         88:13:6a:96:08:69:48:fa:ce:75:2d:6f:31:2a:bb:d4:9e:63:
         a8:a6:19:5f:95:26:03:cd:30:c1:62:e9:54:40:da:b6:3f:30:
         17:30:fb:52:cb:64:87:32:a6:56:f3:c7:79:ba:db:b6:10:3d:
         c6:5f:4e:18:c3:2b:85:c5:3f:61:89:98:85:01:b6:67:de:62:
         de:06:ae:1e:70:2e:67:2c:5d:2f:9c:b7:7f:a4:bf:45:26:27:
         47:8f:90:39:2c:68:c8:31:92:d4:c2:78:23:1f:af:24:6b:5c:
         dd:85:72:2c:d2:dd:de:f5:d6:36:6a:86:2c:79:8c:06:9a:d2:
         26:c8:62:48:9c:cf:de:49:3b:14:73:a4:53:2a:01:80:89:e1:
         16:39:98:e4:4a:83:00:9d:db:30:ed:91:7f:4b:ce:c4:e1:2c:
         03:f4:98:cd:db:56:35:c9:da:8a:26:40:c3:c7:d9:31:ef:be:
         8b:da:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:31 2024 by rpki-client on console-ams.rpki-client.org