Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File:                     ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier:          JqHCpJcckmJp47+cvK+8Aoay/mj5yp0DrdhigSJamfs=
Subject key identifier:   09:C2:DF:E5:EE:96:F8:F4:47:03:CD:DD:CF:6F:D9:04:C4:82:D0:E5
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer:       /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial:       01901E8FE17D780CA18BB8BC98A0D617B849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number:          1157
Signing time:             Sun 16 Jun 2024 01:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:04 +0000
Files and hashes:         1: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: WbhY/dQPFqpDAJObma9YNhQ4T3QsyUiH5dja+n038eI=)
                          2: d83ici4op6wAIPdioL0RZloWJq0.roa (hash: p+Fuso6xM2OOGZii2AU2+50XZVj7kw0nNIGINPK3MsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e1:7d:78:0c:a1:8b:b8:bc:98:a0:d6:17:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
        Validity
            Not Before: Jun 16 01:01:04 2024 GMT
            Not After : Jun 17 01:01:04 2024 GMT
        Subject: CN=09c2dfe5ee96f8f44703cdddcf6fd904c482d0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:87:75:cb:2c:61:80:01:e2:91:91:2b:db:
                    02:5b:dd:4b:24:6c:93:a7:4a:58:69:c6:43:4e:9f:
                    0c:1f:28:43:6c:de:54:01:ce:86:ad:b3:a4:6c:19:
                    67:b9:cd:74:76:c8:37:e7:29:9c:d4:0b:de:0f:a7:
                    19:85:3a:e6:5b:6f:b1:e9:7d:53:d3:3e:79:16:80:
                    5f:ac:4c:7d:ee:cc:f3:bd:83:96:d8:a3:1e:15:d2:
                    e8:1f:34:71:7c:91:1c:36:b4:e6:3b:73:c3:48:c4:
                    b4:54:8e:63:93:ad:da:45:98:c9:b2:53:16:43:55:
                    46:08:d1:de:aa:1d:43:16:e6:d5:b7:5b:36:af:3c:
                    6b:16:72:14:6e:0a:6a:f9:02:9d:0b:2c:f3:84:05:
                    aa:a1:ae:58:51:74:5f:3d:5b:9d:53:67:50:d4:b1:
                    2b:a4:e7:63:56:7a:12:70:36:59:a3:54:36:c8:4d:
                    61:b9:be:c2:5d:55:46:35:0b:c5:e7:97:12:7a:89:
                    72:fd:69:20:c9:4b:0e:99:71:e4:56:d3:0d:b3:c8:
                    de:2e:a8:80:8b:d4:73:bc:4a:05:1a:28:4a:0f:1b:
                    c1:37:75:6b:fc:1a:c1:49:60:73:e5:8f:7e:ee:80:
                    7d:84:77:a0:63:be:ec:eb:7a:ac:9a:9b:61:fb:9b:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:DF:E5:EE:96:F8:F4:47:03:CD:DD:CF:6F:D9:04:C4:82:D0:E5
            X509v3 Authority Key Identifier:
                keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:1e:1d:0a:96:68:73:99:e7:63:94:31:b9:6a:81:9b:b8:
         55:d3:61:0a:36:60:f3:cd:3f:56:af:48:61:ad:5a:02:48:a4:
         58:9f:b3:5f:e0:df:39:50:8b:de:27:d6:77:4e:6d:c8:9d:68:
         b3:f2:e2:75:1a:69:84:3c:ea:28:9a:f9:68:e7:25:a5:76:6a:
         db:c8:83:b7:08:7f:9d:7e:bc:d0:30:94:63:2b:30:60:0c:aa:
         c2:2c:ec:5e:64:3b:ad:47:48:99:24:11:2c:98:ea:1a:96:77:
         13:9c:92:9e:0c:fb:f9:29:5a:43:65:3e:b2:4d:fc:bb:6e:00:
         c5:11:29:ef:ad:e4:1f:b7:e8:9c:e0:e0:80:e7:64:a6:d1:4b:
         2f:6f:12:69:90:0a:fd:a9:c1:5f:48:0c:2c:43:ed:e6:f1:9b:
         d8:5d:a8:a8:73:96:36:43:01:46:83:c6:fd:cb:5f:1b:9c:c1:
         79:7d:29:b7:bc:6b:93:68:b5:5b:c0:04:40:80:b2:96:e6:3f:
         4d:fc:42:8e:a4:07:16:1b:9d:8c:ca:2b:db:6c:b7:58:42:f8:
         cf:88:d3:cc:a8:92:57:99:ae:a3:91:44:58:94:8d:f0:ab:46:
         03:70:96:d5:b6:5f:f3:28:c6:04:c2:0d:da:cc:9f:8e:3b:33:
         d3:47:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:58 2024 by rpki-client on console-ams.rpki-client.org