Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File:                     jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier:          j0xxfTxAuyz0eoy9ro8r9mLgSPj4kbvljI/6UKOUKIg=
Subject key identifier:   AA:35:67:C0:24:7B:5F:C0:BC:C2:0B:26:AF:80:B2:B9:2A:D9:42:2F
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer:       /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial:       01901CA190B5B4C175F551DF2398E0E5AA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number:          02AD
Signing time:             Sat 15 Jun 2024 16:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:08 +0000
Files and hashes:         1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: 1AOIDyG+90Y3tfAT4DNl1wu1xE+oEQsRWIvUEv8hqg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:90:b5:b4:c1:75:f5:51:df:23:98:e0:e5:aa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
        Validity
            Not Before: Jun 15 16:01:08 2024 GMT
            Not After : Jun 16 16:01:08 2024 GMT
        Subject: CN=aa3567c0247b5fc0bcc20b26af80b2b92ad9422f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:67:45:ae:a5:db:dd:f3:a6:b5:b4:7e:36:
                    94:59:97:9a:cb:c4:8e:98:d2:32:8d:90:1f:3e:a5:
                    f3:c7:5f:b6:31:da:69:be:e6:95:92:fc:1f:f7:b5:
                    02:28:fa:b6:4d:cc:91:3b:82:0f:3e:eb:d8:81:f7:
                    09:28:ee:40:19:5d:75:66:b4:05:32:1d:06:da:db:
                    2e:92:8b:7c:85:27:33:2a:da:8f:00:be:85:f2:05:
                    12:da:64:f4:aa:61:64:0f:f9:b8:7c:e0:af:b6:e1:
                    e0:85:11:3b:ba:53:1d:5e:f8:b6:dd:76:2f:14:10:
                    9a:c3:76:e9:22:0c:4a:34:bb:00:f5:8a:e2:01:e8:
                    2e:76:f3:ca:b8:4b:02:54:57:ab:c3:b1:10:0d:48:
                    bf:5a:b2:8a:aa:1a:48:96:e1:67:42:1f:ae:4e:dd:
                    5c:7d:20:f3:d3:8b:a7:bb:29:07:36:f3:00:92:65:
                    0f:4e:54:91:4a:ac:a9:e8:66:67:79:36:ce:b2:46:
                    55:94:3d:f3:ec:89:31:55:42:88:2b:dc:02:6b:2b:
                    2b:f7:c5:2f:1a:a0:a3:de:92:26:1e:d6:76:aa:bd:
                    eb:d3:0a:21:10:20:40:a8:08:ec:af:36:e2:d7:03:
                    04:c5:9a:19:ee:9e:e9:10:ea:71:0e:c9:a7:ac:09:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:67:C0:24:7B:5F:C0:BC:C2:0B:26:AF:80:B2:B9:2A:D9:42:2F
            X509v3 Authority Key Identifier:
                keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:8d:84:71:5f:a4:e8:75:54:2c:ec:b1:c7:3d:72:4b:dc:
         42:e0:03:17:db:57:bb:ff:78:be:26:7b:74:43:69:68:ec:6f:
         2d:21:3a:32:7c:2b:f5:88:c4:51:b2:fe:c4:20:c9:42:eb:22:
         ab:c0:1b:a7:41:6f:80:b8:9b:a6:d7:34:77:c8:7b:a0:b1:72:
         8d:55:60:92:d4:e5:e8:04:19:75:08:52:26:f6:3c:a2:4a:2c:
         be:02:c3:6b:de:57:30:ac:15:e9:73:31:79:74:ed:20:e0:d5:
         d1:02:e5:48:f2:3e:38:71:09:2a:70:0e:bc:cb:fd:a1:0c:e9:
         7b:46:16:38:22:09:db:1d:46:2c:95:f1:b1:04:b6:ee:ab:cc:
         7a:9c:ce:72:c0:8f:18:2d:41:70:8c:7c:92:98:e8:c2:a8:66:
         f0:94:74:7d:49:a2:6d:24:37:a7:04:c2:23:d0:a8:1e:22:09:
         ff:5f:d4:37:52:16:ca:af:03:d2:5a:81:55:43:02:32:3a:a5:
         38:05:c6:cc:47:52:ed:4a:db:c5:8f:4c:3b:6e:bc:16:6d:42:
         e0:23:b3:f7:dc:8a:05:77:b5:5f:9d:aa:ba:38:75:67:29:78:
         71:d8:d4:e3:be:ce:c4:c5:7b:f9:22:dc:9e:1a:29:e8:6c:47:
         b8:a1:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:48:54 2024 by rpki-client on console-ams.rpki-client.org