Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File:                     AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier:          w8F2Wx518k+JfCYVZ3nQc8iA2Y/ghtpU2p9di3I5XLM=
Subject key identifier:   2A:51:15:E1:8C:AA:1E:88:74:47:E5:DC:B7:95:3C:10:DC:D2:9F:AF
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer:       /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial:       018F9F19C3666EB085BF63F7D806DC7C7F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number:          03AD
Signing time:             Wed 22 May 2024 07:00:16 +0000
Manifest this update:     Wed 22 May 2024 07:00:16 +0000
Manifest next update:     Thu 23 May 2024 07:00:16 +0000
Files and hashes:         1: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: YE8iBSrH8vMfFGDcQ9K25aNAdD8NVc3Yath5q6Wlupg=)
                          2: NQPUXX-7KDJmGl0hBmmNLhWfMIQ.roa (hash: oZ6h25S8Al7NeR/0obMZC7VvAgiF9UAGG+3U8X+31Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9f:19:c3:66:6e:b0:85:bf:63:f7:d8:06:dc:7c:7f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
        Validity
            Not Before: May 22 07:00:16 2024 GMT
            Not After : May 23 07:00:16 2024 GMT
        Subject: CN=2a5115e18caa1e887447e5dcb7953c10dcd29faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:68:9d:f2:4a:09:d3:c1:b1:32:ee:2a:b5:
                    49:ac:7f:52:b8:b2:45:41:86:89:7e:54:10:41:80:
                    6b:75:f7:23:40:6e:21:bc:d9:0d:b8:26:59:d1:9b:
                    fd:d4:3c:e1:6a:17:07:79:6a:95:ee:fa:48:29:f0:
                    85:5f:8e:1e:bd:11:16:45:96:39:36:eb:d0:78:2c:
                    81:ac:9c:c6:6c:3a:d5:3d:56:5a:e5:62:a9:5a:6a:
                    35:4b:96:cb:de:de:57:99:1f:34:b1:2a:aa:34:70:
                    7f:71:c5:c1:30:cf:85:65:29:80:52:ad:ab:69:fe:
                    e4:95:bd:e7:f1:9e:92:b4:f1:55:1c:72:1e:57:2b:
                    bd:e7:b6:60:24:9f:45:55:11:fc:72:8d:96:fa:1e:
                    16:56:b5:a0:3c:c1:bf:4a:e1:ea:db:89:78:0b:ed:
                    8b:e2:c6:78:41:c8:06:01:6d:f8:e5:c9:ef:fc:20:
                    4a:ba:3e:22:e7:ab:73:0d:97:b5:de:64:ef:80:17:
                    5c:0e:a1:20:9b:c5:d3:2d:de:1a:96:b3:ad:6e:8a:
                    df:f9:a0:ae:5c:d4:9e:b2:aa:aa:36:cb:8f:01:59:
                    a8:ac:9e:f8:8b:b4:0f:e4:50:00:90:5d:75:73:2d:
                    a3:4d:bf:09:8c:ad:c9:46:68:c5:b6:05:90:72:03:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:15:E1:8C:AA:1E:88:74:47:E5:DC:B7:95:3C:10:DC:D2:9F:AF
            X509v3 Authority Key Identifier:
                keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:15:31:b8:03:d0:43:15:52:4e:ad:b7:ff:fb:cc:3a:b2:39:
         18:12:c3:99:cf:f0:f8:de:e6:e7:d7:e4:31:a2:da:80:89:96:
         8a:70:3f:71:27:53:3b:5b:84:ce:0f:ef:1f:bd:a3:a3:b2:d4:
         82:14:fb:4b:72:96:24:30:11:e9:d2:17:1d:cb:7a:b1:91:67:
         bb:eb:8d:3e:8e:16:c8:c4:bd:a4:31:ce:56:55:e3:7a:e1:0b:
         94:13:81:1c:d4:41:b1:b5:04:6e:5e:3c:54:bd:01:a7:a4:69:
         b3:55:23:a4:f6:8f:d3:d0:22:b4:8e:a0:e1:77:d4:20:21:63:
         54:44:69:45:f2:f5:f3:86:51:31:c1:86:21:0a:4b:1d:57:85:
         c5:73:f3:a2:96:b9:e2:e3:be:ee:78:bf:f7:9b:38:b2:f4:f4:
         93:a1:00:89:b5:4c:96:fd:29:6a:5a:a2:6d:5d:e9:da:88:6e:
         b1:0d:aa:f4:10:69:0c:8d:60:74:4d:39:dd:36:86:70:33:15:
         d5:30:d6:0a:0b:cb:a5:dd:26:f3:5d:f0:d8:de:d9:e9:25:d2:
         b8:a4:d2:a5:0e:36:73:39:46:f0:ea:35:ca:bb:2e:96:8d:22:
         be:69:98:ff:e3:b0:b6:c9:62:06:0a:e5:cf:4e:84:1e:21:d4:
         06:31:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 13:11:35 2024 by rpki-client on console-fra.rpki-client.org