Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File:                     aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier:          XUib1dCtmpL6xkiNxwB0M/v20wwbGoP4Iz3eHxnHmvU=
Subject key identifier:   E5:8A:6C:85:47:BF:4D:51:1B:35:08:BF:1C:9B:BF:61:21:EE:1E:49
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer:       /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial:       01901CD8B2AE4856DD18256F89B2D06FBE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 17:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:21 +0000
Files and hashes:         1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: G3lN6r4a5fkfO+GrfEa9sRQyq2Qiihy5e5fjdvM+Hkw=)
                          2: wQjET6DBDqvY5Q1WFkQod2lSqXc.roa (hash: LaWOEgSQltRCkm0aduWkL5ENY3aNnCeiAJQy0oHqW8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:b2:ae:48:56:dd:18:25:6f:89:b2:d0:6f:be:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
        Validity
            Not Before: Jun 15 17:01:21 2024 GMT
            Not After : Jun 16 17:01:21 2024 GMT
        Subject: CN=e58a6c8547bf4d511b3508bf1c9bbf6121ee1e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:1e:b7:8e:f2:b9:34:71:f1:d0:88:e2:96:
                    c8:d3:da:eb:dd:fd:9c:88:be:dc:20:0f:83:62:e9:
                    77:07:f9:7f:f0:8b:42:8e:1b:98:5d:16:13:ca:b3:
                    b5:b8:3c:22:55:26:e6:9d:18:b7:1f:87:2d:e9:93:
                    ab:27:0e:c6:f3:77:99:1f:d8:00:4a:23:a4:a6:96:
                    6a:5e:e4:04:79:9d:ef:06:f8:4a:8e:6f:99:ee:f2:
                    82:a1:38:b9:73:7f:6c:99:c4:21:d9:ed:5a:26:04:
                    a0:9d:e6:74:26:c3:75:fc:c5:1b:14:45:12:e6:c4:
                    17:f7:8f:47:a2:8b:cb:5a:0a:b5:99:8a:06:43:7f:
                    be:25:84:97:4b:d3:8d:e3:d2:c3:9c:24:d5:93:b2:
                    6d:b3:65:18:9e:9d:79:b8:bd:c5:b8:bb:95:eb:7a:
                    85:98:4e:a4:d4:2f:bc:a5:68:7d:45:55:07:bf:c9:
                    50:96:2a:33:70:82:13:c1:b1:ac:3b:6f:94:16:54:
                    75:27:8d:5a:a3:6b:da:96:58:5b:6f:15:d8:3f:25:
                    58:ab:3c:38:b5:eb:de:1c:03:00:d5:52:2d:6a:10:
                    58:3b:e1:af:d4:ab:81:ca:a0:3d:56:24:f2:12:53:
                    77:03:cf:d0:03:7c:17:1c:3d:ed:f8:71:77:41:bd:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:6C:85:47:BF:4D:51:1B:35:08:BF:1C:9B:BF:61:21:EE:1E:49
            X509v3 Authority Key Identifier:
                keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:88:82:e4:cc:1a:9b:3e:17:82:f1:06:93:f8:dd:90:3b:
         34:ee:92:88:34:98:ff:d8:fb:fe:1a:33:5f:fd:29:ef:0d:eb:
         a3:51:c7:04:6c:ab:d4:26:70:8e:61:03:e4:ea:2a:91:54:81:
         91:d2:a9:44:2f:8e:b8:7c:95:d0:9e:6b:bb:7b:83:ff:c9:95:
         81:9e:a5:1a:f8:4e:2a:82:af:22:b8:00:33:d9:69:fd:4f:09:
         05:6c:b0:f8:1e:94:b4:26:49:ba:62:59:18:fe:5c:01:e4:e8:
         21:b6:82:8c:2e:b1:d0:7f:29:c0:95:99:2c:60:9c:2d:c8:b1:
         7a:96:68:6f:57:af:de:67:05:d0:59:95:f2:dc:b9:84:69:8c:
         43:d8:72:07:2e:d2:1a:3b:31:26:8b:94:2b:a7:4a:ac:19:5d:
         81:56:75:8d:a1:8f:22:a0:8a:46:63:8c:81:33:4a:5b:c7:ed:
         4b:0a:34:23:e8:4a:f0:86:0c:f6:1a:d7:2a:cc:29:5c:44:b2:
         37:4f:10:d1:d0:be:69:8c:86:21:5a:4b:57:e6:e1:7e:c7:05:
         de:b0:dc:57:21:f7:7a:b9:44:f8:cb:b6:8b:35:df:84:0e:cc:
         94:78:b5:02:ad:73:ba:cd:9b:87:09:43:77:76:7b:f2:a3:10:
         51:e7:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:58:35 2024 by rpki-client on console-ams.rpki-client.org