Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File:                     AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier:          Qf2ZFXg1XEWed5L7OiJRdBuZNNCVwQ8rLNBGmD7L81M=
Subject key identifier:   76:AC:74:F4:DE:CB:59:77:1E:3B:E6:A0:52:45:E2:56:80:ED:08:D4
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer:       /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial:       01901E8FA359A2D47915AB30B434A1ECA449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number:          04B7
Signing time:             Sun 16 Jun 2024 01:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:48 +0000
Files and hashes:         1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: 7qO27TGp5Nol3TYcQsyRBqADmf8cg2UzlTNRuuPOxoM=)
                          2: Rar_D51RKjRXOdqruNYK4DGVtvs.roa (hash: zy+1ZLCf+pNtJdxg4Ob/Rqd01hVTLWIo1rdOxXP+0Yw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:a3:59:a2:d4:79:15:ab:30:b4:34:a1:ec:a4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
        Validity
            Not Before: Jun 16 01:00:48 2024 GMT
            Not After : Jun 17 01:00:48 2024 GMT
        Subject: CN=76ac74f4decb59771e3be6a05245e25680ed08d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:9d:82:b7:81:03:33:04:4c:e4:5b:a5:d3:
                    d5:03:f9:ef:38:c1:8e:fd:d0:f0:df:e9:0c:b2:0d:
                    02:b2:43:3b:37:cd:a4:aa:1a:ef:e0:79:3b:28:51:
                    02:1d:db:b1:4b:10:c1:6f:06:cd:6c:36:4b:3e:8b:
                    c2:62:c7:53:82:70:fe:29:61:8a:95:83:4d:a2:e4:
                    e6:fb:04:dc:65:91:3b:22:f0:73:b4:ec:96:76:dd:
                    4a:3d:3c:a6:a9:27:a9:45:8b:1b:41:a9:5f:4d:8e:
                    1d:ef:95:06:c7:f3:56:26:20:66:47:dd:83:3e:ab:
                    45:03:3c:ce:16:bc:96:84:de:83:14:63:5e:9b:f0:
                    23:df:1f:68:3a:b1:ac:df:1b:3d:da:14:ec:0e:f5:
                    59:e6:5d:7c:54:a3:5a:53:b4:70:d3:9d:e0:4c:3f:
                    d8:52:b1:e3:59:88:dc:33:a8:28:74:b4:83:b5:98:
                    a3:db:94:8a:05:a3:be:fa:9e:47:d7:33:bd:98:3c:
                    58:3c:71:49:06:ca:22:b3:7a:23:3e:30:ec:38:c4:
                    29:1e:6a:47:ef:9e:7c:48:6e:23:ae:69:92:66:ff:
                    7d:db:be:e1:cd:42:68:7c:f1:e3:4c:79:a5:9f:42:
                    c7:87:6e:40:8d:3a:23:66:45:9f:14:c3:e0:0d:05:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:74:F4:DE:CB:59:77:1E:3B:E6:A0:52:45:E2:56:80:ED:08:D4
            X509v3 Authority Key Identifier:
                keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:75:8f:4d:36:33:17:60:0a:96:e5:ec:55:63:c3:8f:09:
         0e:7a:bf:72:64:d3:f3:74:e2:b9:b2:0f:a3:1d:47:6a:a1:ab:
         dd:8e:6c:4c:40:ef:e6:20:6e:ee:64:44:3f:94:0d:25:09:09:
         93:90:f2:b0:b4:bc:85:6a:07:f5:6e:73:77:5b:71:8e:2b:69:
         8c:d3:a9:ac:0d:91:b8:97:7b:43:79:65:e5:f6:13:0c:50:35:
         f0:4a:fb:af:70:a7:38:2a:a3:5d:6f:b2:aa:19:0a:3f:d0:c4:
         93:56:4d:a9:c6:0f:24:d7:0e:bf:1b:11:20:a6:1f:f5:a9:9e:
         5c:7e:ee:43:87:55:3a:bb:88:34:63:55:08:f1:a0:9e:8b:6b:
         0a:2c:62:da:9a:88:cd:27:a8:c6:95:eb:d7:25:39:7f:24:72:
         b8:fb:f5:34:23:08:2b:f0:ea:27:ab:4f:f6:1b:73:41:e2:6b:
         ed:47:33:03:71:ee:5b:42:bd:84:f6:84:e2:2c:e8:ed:65:be:
         eb:c1:b3:9e:01:bc:c1:fd:2f:6c:5e:40:f3:94:09:72:1c:18:
         5d:08:20:6c:57:1b:d0:f7:b9:dc:69:06:ef:0b:74:ab:5a:9e:
         f1:45:1d:0f:34:1d:97:80:b2:90:55:23:7d:04:34:60:d2:32:
         85:8a:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:56 2024 by rpki-client on console-ams.rpki-client.org