Manifest

$ rpki-client -vvf rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
File:                     434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft (raw, json)
Hash identifier:          U4fGFBRyhN2qqacuDOpS2ldgHEgM7VKs0J591T9W38Q=
Subject key identifier:   0A:E3:D3:75:38:38:EA:AC:5E:E7:CE:3B:D4:C0:BE:0D:A8:58:BE:5D
Authority key identifier: 43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E
Certificate issuer:       /CN=434cb8853b54180da13d01acd32d2ccdaa5f4a3e
Certificate serial:       4AFDED32D20681570172A906516552704D39CFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer
Subject info access:      rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
Manifest number:          01E0
Signing time:             Thu 25 Apr 2024 16:14:42 +0000
Manifest this update:     Thu 25 Apr 2024 16:09:42 +0000
Manifest next update:     Fri 26 Apr 2024 17:20:42 +0000
Files and hashes:         1: 434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.crl (hash: OyrdLeT6xFszOCuRLDjqSniMVWFmxRhCG0cuSxrJpvk=)
                          2: AS211380.asa (hash: kBvtr16Q8dG8ATUSaB9LpSbchZIHOp13KI0d/j1FK1w=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.crl
                          rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:ed:32:d2:06:81:57:01:72:a9:06:51:65:52:70:4d:39:cf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434cb8853b54180da13d01acd32d2ccdaa5f4a3e
        Validity
            Not Before: Apr 25 16:09:42 2024 GMT
            Not After : Apr 26 17:20:42 2024 GMT
        Subject: CN=0AE3D3753838EAAC5EE7CE3BD4C0BE0DA858BE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:7d:ed:dd:15:08:84:e8:94:64:ec:7a:d6:
                    58:20:15:d3:4f:7c:be:f6:39:e2:ad:ac:3b:0d:a9:
                    83:98:57:c3:c6:2a:55:b9:85:a3:f7:da:89:de:b3:
                    f1:e7:60:47:1d:bf:a0:55:6d:1a:9e:d3:be:e7:0a:
                    51:46:e7:0c:e8:64:54:06:1f:4b:b7:1f:a2:04:93:
                    67:a2:79:0c:af:1f:2f:b2:64:1c:ad:5b:f9:29:2c:
                    c5:1b:a3:1f:03:fb:9c:f9:34:ec:bd:3b:72:fc:05:
                    fc:17:50:7d:62:c0:f7:3a:bf:5b:b2:fe:6f:2a:ad:
                    e7:7f:ff:0d:ae:8a:7e:21:68:2f:1e:8f:06:d5:38:
                    95:59:b8:1a:3e:15:7e:e5:9f:0d:f8:7b:1d:99:54:
                    75:69:ff:3e:19:9d:d7:be:16:39:fc:fb:1b:7c:a8:
                    d3:b7:b3:60:7b:ea:fa:56:4a:69:3d:30:2a:56:cc:
                    27:22:45:12:91:16:12:cb:c0:e9:54:19:9d:54:e6:
                    89:94:95:2d:5f:0a:73:27:95:09:20:bc:b9:79:6e:
                    4f:e7:2c:7f:42:6a:a9:bc:9f:72:7e:c4:fc:b8:66:
                    a9:15:ce:ee:15:9f:0a:cd:90:6b:21:10:8e:d9:c0:
                    4f:10:49:bc:2e:40:af:65:d1:69:79:40:c8:cf:e8:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E3:D3:75:38:38:EA:AC:5E:E7:CE:3B:D4:C0:BE:0D:A8:58:BE:5D
            X509v3 Authority Key Identifier:
                keyid:43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:4d:5b:7f:44:98:a2:43:a7:03:08:79:94:7f:56:9b:51:
         8c:20:f1:ca:5e:f0:50:b5:9a:23:cc:b5:37:bf:84:b9:06:d8:
         51:50:e3:c4:1e:f4:9d:96:9c:e1:51:c9:99:c4:86:00:41:e7:
         fd:d9:ad:1d:ce:ca:cb:42:c4:1a:0b:3c:b6:c8:f8:71:bc:f8:
         30:df:c0:87:d9:bb:bf:e8:b1:b9:b2:1e:8b:de:c7:c7:a1:a8:
         16:e6:6d:03:57:b7:31:22:e6:a8:73:0e:5e:f8:af:ef:9e:71:
         53:8c:d0:61:c3:3c:0f:15:d7:46:ae:cb:61:ae:e4:37:ca:35:
         2a:26:84:9a:91:c7:9c:5d:19:99:fb:0f:95:29:20:19:ae:76:
         3b:b1:fa:0a:af:1d:bf:9c:81:04:06:e8:64:e2:a6:8a:99:97:
         8b:e2:d9:ff:c8:d7:e3:55:92:6b:b0:a9:cf:31:a3:2b:6c:86:
         ea:4e:6e:9a:2a:da:5e:2c:8d:5f:df:92:bf:a0:2b:e9:2b:ff:
         05:33:d7:1e:22:2d:51:a8:0a:f5:f8:7a:58:14:07:66:4e:41:
         1c:ac:41:d2:05:80:95:30:21:00:70:83:f8:33:d4:f6:8a:7f:
         34:ad:cb:98:66:3c:aa:4b:6a:ac:e7:96:32:aa:89:e7:d6:5c:
         12:6d:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 19:12:09 2024 by rpki-client on console-ams.rpki-client.org