Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          vc9SfQceye2pnsG28G1Ip1RazxOtrLBHDht4cUiNyuA=
Subject key identifier:   8B:0B:41:E0:49:48:EA:09:07:FC:65:70:BE:02:53:F3:1B:50:71:B7
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       01901DEB74D88E76841C931B83C808CA2B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          0F03
Signing time:             Sat 15 Jun 2024 22:01:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:28 +0000
Files and hashes:         1: 8LJGiI5kv_sZzjrLRU5PK9RdvhM.roa (hash: YC2BrzWA0CyES45w+TmOlv2ONvQTBN32FivXu3P0SCk=)
                          2: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: BzwZUdkS+KLb4+HKlUIlPknkk650+svBXo1d1oP+J/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:74:d8:8e:76:84:1c:93:1b:83:c8:08:ca:2b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Jun 15 22:01:28 2024 GMT
            Not After : Jun 16 22:01:28 2024 GMT
        Subject: CN=8b0b41e04948ea0907fc6570be0253f31b5071b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:3f:25:c9:e9:db:e8:73:b4:fc:40:ca:40:
                    9c:f3:2c:04:d4:54:aa:49:7d:c0:7c:0c:98:48:d6:
                    8c:b2:d0:8d:f2:d3:ee:63:7d:9f:00:24:96:65:e5:
                    c2:8b:56:61:bd:dc:88:2a:7f:42:ad:bf:69:cc:bc:
                    9f:e5:bd:29:b0:45:3a:76:a5:1f:9c:1f:49:dc:0d:
                    e1:37:af:0c:ae:e0:ef:11:47:f9:e3:16:7c:48:cf:
                    cf:03:b3:6b:92:63:09:f8:d4:79:bd:8f:00:07:bc:
                    92:61:1f:17:81:6e:98:9e:77:31:75:fe:ee:36:ff:
                    3c:ab:e1:14:3b:0b:97:81:b7:af:73:3d:b3:fd:c9:
                    b6:2a:0c:e3:43:86:31:67:fd:e3:ae:db:d8:a3:66:
                    36:fb:07:9f:1d:eb:87:e4:e8:0b:18:1b:f7:8a:58:
                    ab:d2:f5:42:ff:e5:43:3b:79:f0:68:e7:59:3d:8e:
                    48:c8:20:62:8e:7f:aa:fe:24:ef:ba:8a:6f:e5:c9:
                    c3:e1:80:93:97:1d:63:5e:33:29:c5:d9:f1:a6:83:
                    05:a1:51:15:6d:1c:2f:bd:73:63:07:f2:82:32:5b:
                    bb:75:fd:09:03:27:f5:84:58:7b:bf:12:c6:06:1e:
                    ae:6e:c2:68:44:d8:e5:ec:52:7a:99:b4:35:1a:81:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:41:E0:49:48:EA:09:07:FC:65:70:BE:02:53:F3:1B:50:71:B7
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:05:08:3c:8c:a8:cc:e4:28:20:25:e4:b7:0f:f8:29:d6:
         04:36:3f:38:8f:6b:1c:0e:5f:2c:27:1f:d9:61:bb:cd:f0:ba:
         f6:1e:25:a1:41:ff:16:6f:3e:f1:77:73:d0:3f:2d:88:8b:6a:
         51:06:8e:69:aa:cf:e3:35:7f:3f:e6:ba:0f:76:10:c3:4f:77:
         5e:29:79:47:fb:77:0b:74:25:e1:4e:84:2f:74:b5:93:9b:09:
         03:83:c4:bb:6a:08:f8:98:9a:33:52:0a:28:5d:b7:09:0a:69:
         9f:88:59:00:d8:95:f9:bf:b0:ee:44:2f:14:eb:de:66:12:d9:
         38:53:ff:c7:c9:b4:ab:5b:2b:85:71:e4:1a:e0:0e:af:56:13:
         c6:07:28:a0:df:9f:01:af:a7:1b:fe:fa:f8:94:88:2d:d0:f6:
         a1:ec:6d:03:a1:60:6e:0f:30:bd:b6:02:ec:4f:59:44:8f:b1:
         b1:e5:a8:30:8a:5e:03:81:d0:f2:f6:f2:c2:92:6c:3b:3d:83:
         66:5d:fb:e9:5d:6f:01:5d:1d:c5:76:30:62:7d:d8:a6:24:3d:
         f5:48:ed:a0:45:d2:c4:e6:52:5a:8a:89:b1:a9:8c:b8:95:f3:
         2f:56:d3:83:c0:2b:c1:3a:26:02:fa:b6:30:94:c4:11:d9:04:
         d5:54:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:01:49 2024 by rpki-client on console-fra.rpki-client.org