Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          ZhJSw9MfVT8j8eFLGjlGwkLMEnbFzkbhktAXgQXjccA=
Subject key identifier:   E6:0B:96:56:45:C4:30:EC:52:9A:1A:65:96:04:E8:28:E6:1A:A0:3C
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       01901DEAD4ACF34725257522AA9F2BA3AA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          108C
Signing time:             Sat 15 Jun 2024 22:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:47 +0000
Files and hashes:         1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: fvToSjSyOTtJGE8eDFduGPAjgH4oZ+rB8n6gEgB2xjY=)
                          2: HeUZphYprJfrsKa7q-nn6-VVcXg.roa (hash: Ahmn/uiYfoljfJieKyus83NK1etVQJGy7pyV8006JBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d4:ac:f3:47:25:25:75:22:aa:9f:2b:a3:aa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Jun 15 22:00:47 2024 GMT
            Not After : Jun 16 22:00:47 2024 GMT
        Subject: CN=e60b965645c430ec529a1a659604e828e61aa03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:39:4d:20:93:33:48:ff:dd:a3:10:08:23:cb:
                    31:82:54:eb:87:98:39:79:ac:89:db:51:45:e0:0b:
                    b8:70:33:ec:cf:f3:3c:5f:20:16:d1:1f:4b:79:2a:
                    87:44:a0:ec:18:f9:8a:b8:05:e8:3d:d9:71:11:65:
                    d6:57:d1:e1:3c:45:4d:43:50:83:13:1c:ea:ff:d9:
                    a5:89:44:f7:02:4a:e2:87:de:ee:81:72:4b:fd:12:
                    d7:6f:9b:29:32:c9:06:a7:5e:b1:25:41:35:f1:98:
                    16:63:c0:6d:af:a6:73:4d:72:ec:2d:3e:f4:ff:cb:
                    3b:43:3d:ad:34:41:67:91:67:02:57:7f:60:f9:ca:
                    d7:51:75:b6:49:f9:6f:16:a4:23:ee:09:bf:dc:5a:
                    69:0d:f9:67:69:83:a8:a0:0b:ab:79:d7:97:bd:43:
                    3f:24:bb:4d:7a:2a:92:43:c3:29:34:a6:de:ba:6a:
                    4c:01:c8:fc:12:d3:20:7f:08:f8:74:f0:7c:db:13:
                    88:2c:36:53:d2:bd:91:30:bd:0e:09:99:c5:2f:a8:
                    e0:81:fe:d1:d5:3d:9a:cf:3b:e8:78:1b:24:c2:ea:
                    16:12:ff:f3:ab:4f:2c:c8:1f:b3:9e:cb:1c:43:e1:
                    12:14:97:03:f2:2c:e5:5d:f1:bf:59:99:d6:67:c3:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:96:56:45:C4:30:EC:52:9A:1A:65:96:04:E8:28:E6:1A:A0:3C
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:ad:e8:48:c6:36:09:a3:6d:73:d3:d7:98:84:a0:55:89:
         30:46:c7:7e:ff:7e:8f:1c:fb:db:2b:fb:7e:06:14:46:86:70:
         06:ca:b9:fa:03:51:08:7a:4b:e6:0b:4e:7f:fd:87:04:42:ad:
         8d:5c:a2:fd:81:65:6e:d1:f3:7e:79:96:a2:bc:67:ac:47:e5:
         93:2d:86:ba:03:a5:f8:bb:0f:ab:fe:05:67:b7:df:f6:89:69:
         2d:a8:ed:e5:a3:a1:df:21:7b:6d:55:9e:80:7d:63:92:34:6c:
         9a:59:94:70:4d:7f:b2:10:e1:97:55:91:43:5e:5c:68:6e:40:
         ec:de:45:74:9c:b0:88:c0:b5:bc:5b:7a:5c:3c:eb:c1:62:7f:
         d3:f1:40:57:43:77:72:37:f0:73:16:20:c8:b1:13:fc:a9:1c:
         24:51:33:fa:03:2a:3b:2f:32:5b:0f:bf:92:fe:de:33:1b:b0:
         bd:8e:fb:28:0d:a2:fd:f5:e3:54:57:0c:f7:17:22:72:69:ac:
         d4:2e:1f:be:e3:d7:eb:1a:1b:9f:9c:e1:26:f4:66:56:b5:ae:
         92:c5:e7:28:9b:69:c3:58:77:82:99:b5:0e:42:4b:2b:d6:ce:
         23:91:7a:74:56:82:1c:02:2b:60:44:d2:c5:4a:2d:37:fe:40:
         92:92:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:17 2024 by rpki-client on console-ams.rpki-client.org