Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File:                     A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier:          VVyd1mmD6TP9oyzZ3cXZwU/IroYT78IFgIguR94WpEI=
Subject key identifier:   42:F4:9A:0D:27:8C:66:27:9D:A6:B0:C8:22:32:01:EE:78:47:A8:0F
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer:       /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial:       01901D7CD3F6D0ECFD104ECCB144CF846B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number:          62
Signing time:             Sat 15 Jun 2024 20:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:38 +0000
Files and hashes:         1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: aTvWzMIhc5iTFUaJugfcHHX9JfVi95qkBoM4Z4+0uhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d3:f6:d0:ec:fd:10:4e:cc:b1:44:cf:84:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
        Validity
            Not Before: Jun 15 20:00:38 2024 GMT
            Not After : Jun 16 20:00:38 2024 GMT
        Subject: CN=42f49a0d278c66279da6b0c8223201ee7847a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:18:b3:dc:39:33:c3:bb:b3:ce:ab:5b:24:
                    9b:87:7f:1a:e6:96:7c:2f:0f:a1:23:78:5b:99:1e:
                    32:78:4e:5c:a2:78:f7:a6:4f:b4:40:c9:fa:11:a7:
                    25:90:49:dc:c1:0e:76:e4:49:73:bd:ab:b2:1b:70:
                    58:65:96:17:07:0d:0f:41:e2:82:6a:1a:02:d5:ab:
                    eb:05:08:24:bc:57:62:34:b8:59:ba:be:83:3d:c3:
                    bc:8e:4c:61:00:f7:b1:ee:1f:68:92:c8:27:ac:5a:
                    18:b1:f4:b3:28:b4:a3:33:b5:1c:f9:01:c7:a5:cc:
                    ed:bb:74:3b:b6:48:ac:ea:14:fc:2f:79:ff:1b:52:
                    87:fc:70:11:91:b7:75:61:11:57:5b:ec:ef:b6:3b:
                    7e:aa:d1:65:d0:5c:bd:bd:04:17:26:ea:5c:1c:e4:
                    1c:f7:0d:8a:e1:e6:7b:d9:b5:1c:06:4d:46:17:3f:
                    9c:37:b8:de:94:f7:69:d2:e4:95:1e:42:93:0b:18:
                    ba:e5:3a:9b:e3:48:76:ff:ce:11:af:0a:52:c8:c9:
                    2a:cc:eb:e5:8c:c2:00:44:90:df:5b:8c:91:c8:7a:
                    10:b1:dd:d9:ba:17:63:eb:fb:db:c7:4c:62:a4:85:
                    9b:78:64:0b:29:ca:20:27:9e:8f:d0:31:f6:27:b4:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:9A:0D:27:8C:66:27:9D:A6:B0:C8:22:32:01:EE:78:47:A8:0F
            X509v3 Authority Key Identifier:
                keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:db:30:88:14:c0:81:de:c0:b2:48:86:28:12:68:c6:1a:
         cd:e7:8f:97:8c:5e:e7:71:9c:1a:b1:9a:89:dd:bb:9e:52:18:
         ea:b8:5a:1c:d1:28:61:b2:fc:d0:34:d3:09:91:18:0d:81:19:
         49:cf:34:5e:57:ed:b1:84:db:d6:ad:17:ad:80:0f:0d:e2:18:
         3e:3c:01:4a:b9:1a:51:ed:e4:5a:dd:61:46:30:1b:b1:9d:cc:
         ad:54:e5:cf:2d:de:a8:09:e6:e4:8e:98:97:b0:5b:c4:b4:b7:
         cc:62:f9:23:74:75:98:e0:aa:13:e1:e4:4d:22:63:fb:40:12:
         9d:76:89:db:71:1d:b7:a6:5f:96:c9:88:fe:34:6d:19:4a:53:
         e2:b5:3a:ee:6a:0b:27:19:b5:97:90:60:0a:18:f8:fc:a3:73:
         ab:80:d6:1e:4e:df:7f:00:7d:0e:4b:a2:fb:a5:9b:ee:41:fe:
         36:6d:2f:5f:7a:04:d3:b3:76:a8:35:21:da:e9:22:4f:25:95:
         14:8d:d8:f6:0e:8e:d2:2d:af:8d:40:00:4d:64:f8:63:98:3a:
         ac:db:14:64:fa:a6:5d:b2:71:0f:72:23:e0:5d:34:e3:54:d8:
         a7:f7:c1:3f:05:fa:6f:b4:ab:e2:50:9b:d3:cb:de:4a:63:68:
         03:92:1c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:11 2024 by rpki-client on console-fra.rpki-client.org