Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File:                     aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier:          Fz3Gk6+L8ZHdDEONnXOMTdwWc8ozvDhg868VwkHJfpE=
Subject key identifier:   AA:17:B9:EB:6F:1D:AA:CD:F7:7F:A1:7A:B3:6C:59:79:0C:DA:03:77
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer:       /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial:       01901D460969439D3917DD9F51CD5818BBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number:          1154
Signing time:             Sat 15 Jun 2024 19:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:47 +0000
Files and hashes:         1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: T23kGY10EY7P1hFMLOKPYOF43ffkv8n9ar9+GqyrbrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:09:69:43:9d:39:17:dd:9f:51:cd:58:18:bb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
        Validity
            Not Before: Jun 15 19:00:47 2024 GMT
            Not After : Jun 16 19:00:47 2024 GMT
        Subject: CN=aa17b9eb6f1daacdf77fa17ab36c59790cda0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:38:25:58:94:0b:05:65:64:01:ce:77:f7:
                    23:ae:3d:46:6c:8c:27:7c:3f:40:46:af:25:b3:00:
                    48:36:93:61:ce:95:e5:2e:eb:26:0c:72:f3:84:49:
                    d4:c8:e9:3a:4c:63:28:a2:c1:fb:b1:84:94:b5:7b:
                    3c:f7:4a:2d:15:6c:cd:6b:c4:ee:b3:cc:f1:6b:fc:
                    00:e3:f4:c9:fb:df:32:71:5d:0b:45:cf:d1:84:7b:
                    0d:01:61:bf:f2:eb:ba:bd:8a:b4:4a:4b:c6:72:14:
                    cc:b5:4b:ec:82:ed:f9:49:8a:b0:0d:5a:f8:ea:97:
                    87:9b:cd:c2:24:5c:a0:8a:d0:22:ae:f1:df:e8:aa:
                    95:87:60:aa:1b:87:ee:4c:f8:eb:f2:2e:51:79:c1:
                    12:da:d0:8f:e9:af:b1:b0:46:6b:38:a3:f8:c7:ee:
                    61:2a:7a:3f:f5:9b:bc:c7:87:dd:f8:25:ea:30:90:
                    42:21:9f:23:c0:55:de:ab:f5:25:31:65:8a:ce:9c:
                    fe:56:34:d2:48:45:96:63:6d:f6:21:9e:8e:95:60:
                    f7:d2:d0:3e:c2:d4:7c:e0:5d:40:53:15:34:a7:e5:
                    cf:c1:15:46:9f:f0:56:ae:20:0d:df:00:56:4c:0e:
                    ae:66:35:29:63:0e:2e:34:3e:09:0c:2b:32:47:a6:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:B9:EB:6F:1D:AA:CD:F7:7F:A1:7A:B3:6C:59:79:0C:DA:03:77
            X509v3 Authority Key Identifier:
                keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:28:5f:19:5e:3a:f1:d7:57:24:23:ef:bd:b4:8e:3d:0a:
         55:57:54:73:65:0c:62:61:19:61:ad:60:22:62:38:97:36:ad:
         94:c1:a5:39:c8:7a:5e:ac:fd:25:8b:c7:64:8d:5a:af:73:0a:
         2d:90:8a:c3:33:00:3f:a4:c1:a9:19:fa:ba:13:e7:64:e5:bb:
         5f:29:41:c5:f4:f5:f5:a6:52:e7:00:ac:06:71:ec:36:6e:c7:
         48:f8:8c:1a:11:c4:d8:ed:ad:70:9e:a2:31:13:5d:bf:c8:2b:
         ff:6c:47:65:79:14:af:1a:50:ed:e2:80:8e:c1:0f:87:c9:1f:
         6c:07:5a:41:0a:26:53:8d:f0:e5:95:84:a8:e6:3f:0c:55:dd:
         37:08:5f:f9:20:1d:da:d2:b5:8e:17:a4:3d:3c:b2:a1:36:df:
         8c:d4:1f:e8:80:97:97:48:8b:57:57:01:77:4d:fa:13:be:69:
         27:18:78:53:2e:3d:40:ed:fd:40:a4:7b:a5:4e:9d:34:a1:40:
         bb:62:bf:97:f4:2a:3f:e2:cb:cf:f3:46:4a:32:6c:e1:c5:fe:
         76:fc:62:a3:3f:86:68:39:90:96:06:ed:d5:28:02:f1:09:ff:
         ff:4d:2c:2f:90:d8:a9:e2:f1:c2:60:0c:35:bf:d4:5e:9d:e8:
         6c:b5:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:16 2024 by rpki-client on console-ams.rpki-client.org