Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          +shl1rwJKSLkIO4m+eP982u98k05TYb6GN0ANdny26k=
Subject key identifier:   85:FB:A7:15:51:87:D6:70:F1:BB:1A:D0:1E:29:39:ED:B2:65:E1:91
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       01901EFD813B29D0689282F3820880C6469B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          1154
Signing time:             Sun 16 Jun 2024 03:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:48 +0000
Files and hashes:         1: 4bCY-8sz1wuuB70ZmC1ds46yxkQ.roa (hash: E6DQYwV/85BuETpt39OPQJl2pir2FDuOd0EQ0qfFaYA=)
                          2: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: Kz8/pU053xy+MzKpnx2ri3Qin45i6KG2Z9wKc9+Z/RU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:81:3b:29:d0:68:92:82:f3:82:08:80:c6:46:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Jun 16 03:00:48 2024 GMT
            Not After : Jun 17 03:00:48 2024 GMT
        Subject: CN=85fba7155187d670f1bb1ad01e2939edb265e191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:06:7d:fc:5b:8e:f0:04:d8:54:e3:2c:19:
                    1d:11:52:cd:34:da:e1:4a:e9:32:71:7f:b2:3f:b6:
                    7d:b9:82:96:08:1a:c4:52:b9:d6:c5:d5:00:d9:d2:
                    da:c4:a2:a9:56:5e:f2:cd:39:b9:80:ac:65:b0:6b:
                    0b:9a:8c:3a:39:83:96:5b:bf:bc:b8:b6:39:d3:cc:
                    3a:da:b8:48:4b:92:59:95:4c:ec:10:04:4f:47:73:
                    60:5e:3f:b8:57:2f:72:10:22:10:10:5c:e3:03:d5:
                    94:9a:94:10:3b:7e:d5:12:77:ae:49:ac:d7:b8:2e:
                    a2:2e:b0:cc:9d:89:c8:7a:0c:a7:fc:d3:d0:a7:42:
                    e5:bf:c1:b8:2a:4e:62:f7:87:a4:ac:93:be:f7:d9:
                    ca:5c:a3:27:b4:f7:af:0d:17:00:66:b9:91:a2:74:
                    ff:0a:bf:51:e2:4f:67:4b:15:b8:05:ba:e7:e4:73:
                    a4:56:4d:b9:1a:aa:32:d6:79:7e:10:b6:af:97:f4:
                    0e:c2:3d:66:52:4b:5c:3e:0e:82:bd:43:19:87:42:
                    e0:fc:0e:48:fd:3a:d4:c3:39:c0:2a:69:5b:af:9c:
                    40:63:c7:e9:3c:d0:1c:be:a7:73:33:c3:a9:94:26:
                    92:da:78:8e:f7:29:af:15:0e:55:df:22:80:91:d3:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FB:A7:15:51:87:D6:70:F1:BB:1A:D0:1E:29:39:ED:B2:65:E1:91
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:63:92:a9:74:cd:5c:55:20:a8:ef:34:c9:f8:17:04:08:
         33:62:21:9c:5a:10:e6:12:3c:5f:ef:0f:8e:a8:5d:31:c0:d2:
         e8:92:8e:2f:32:bf:a8:68:4b:da:0f:47:b5:87:c1:ae:ef:3d:
         96:f8:3a:ac:d2:80:92:d3:5d:ad:3d:43:75:aa:3b:d9:47:64:
         0b:4f:3e:d4:d7:2a:e6:cc:fd:71:0e:e2:8b:c3:77:fa:0b:51:
         9c:76:0f:2d:ca:0e:72:5d:aa:2a:d2:45:d8:42:22:1c:fe:15:
         6f:21:86:c5:b8:b7:b7:26:aa:86:a2:74:e1:f1:d4:4d:a8:22:
         71:3b:3c:e7:cc:d0:af:04:5f:75:1c:07:35:2c:d6:cc:87:96:
         29:0a:b3:ae:1a:bd:9f:a1:cf:9d:b2:1f:a4:73:f3:6c:18:cf:
         f3:e9:68:8f:f4:0f:51:a6:7d:de:29:c9:90:f8:92:bf:49:f3:
         c8:7e:24:2e:1b:8a:1a:e5:a2:fa:d1:2e:19:ea:92:22:86:33:
         63:10:82:a8:44:74:27:1b:41:4a:d4:2b:61:49:e4:a7:a0:b6:
         7b:b9:cc:c9:41:6f:0a:c9:7e:03:5e:b1:85:94:5f:b3:9a:63:
         6d:76:1a:92:5c:73:7a:74:0e:0a:d5:f4:7a:cb:f2:e3:2c:cf:
         46:7a:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:22 2024 by rpki-client on console-ams.rpki-client.org