Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          qWsjIWxHBqiHll0PM8NQ+VYLWkHZD8qpqX32/QWFIuA=
Subject key identifier:   C5:AA:6B:A5:DD:DA:5B:FF:C0:0A:4C:C0:10:13:70:A9:F8:49:12:0D
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       01940721FD953BDDF3BC48AC779579D9950D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0907
Signing time:             Fri 27 Dec 2024 08:00:55 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:55 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:55 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: GBMI4xovqwSPjMeDvN17vHg/nrGVPqy1gIKD/4pdm+Y=)
                          2: tZ04Wg3HE7P-MrOWA0np4QZlfcw.roa (hash: +2Y6wXqZ1BrhckfoUVfJAN6ChFzHqkIJXVvZcYqLBGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:fd:95:3b:dd:f3:bc:48:ac:77:95:79:d9:95:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: Dec 27 08:00:55 2024 GMT
            Not After : Dec 28 08:00:55 2024 GMT
        Subject: CN=c5aa6ba5ddda5bffc00a4cc0101370a9f849120d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:82:da:00:7f:26:9f:f7:c4:05:d5:f5:c2:
                    2f:6a:a1:b3:ce:c7:7c:ba:3c:37:66:d5:22:7e:18:
                    d4:56:f9:0e:c2:75:00:7d:4d:c3:70:a8:aa:1c:28:
                    e6:dc:c5:80:12:7d:66:14:e8:dc:73:ca:ff:49:d5:
                    23:e8:ab:3e:6a:7f:ef:63:a2:db:0a:cd:75:35:47:
                    8a:56:de:19:26:fc:ba:06:73:bf:89:cf:a3:53:9d:
                    b4:b8:37:fc:b4:29:24:03:df:64:ae:38:ed:92:4b:
                    0f:5a:8d:2c:ff:f9:39:d3:6c:0d:ec:80:b6:d1:93:
                    84:2f:e7:24:1b:8c:b2:b1:76:a0:8b:d2:9b:92:c5:
                    b1:df:9b:da:b7:0d:3d:c1:5d:33:87:7e:cb:26:83:
                    88:ff:36:f5:01:17:33:2d:e6:02:60:2a:2e:69:ad:
                    fc:5d:44:71:38:f9:1e:cb:5b:25:19:32:3f:6b:90:
                    cd:f2:9f:6b:57:5c:0a:f6:67:ef:2a:90:39:89:21:
                    e5:ad:a7:c1:fe:3f:7d:15:7f:16:4b:03:67:b8:55:
                    99:c4:9c:a2:83:a2:f0:ec:f9:43:96:39:01:5b:f2:
                    dc:94:dc:62:db:39:31:79:d5:67:1b:50:d8:4b:be:
                    c7:71:f0:cb:d7:84:e7:68:50:1a:6a:34:1a:67:f3:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AA:6B:A5:DD:DA:5B:FF:C0:0A:4C:C0:10:13:70:A9:F8:49:12:0D
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:10:9e:89:74:35:b0:25:bc:c8:64:04:54:4c:a3:ae:82:
         35:37:e6:10:90:b8:b7:86:4b:64:50:d9:04:64:26:9d:5a:51:
         b7:9b:ee:53:c4:cc:51:ef:4f:e4:08:4b:2b:4b:eb:78:8b:7e:
         a5:88:f7:31:cb:91:d8:ca:dd:3f:e1:7a:a6:b3:52:ff:1e:b2:
         84:8f:b7:70:98:93:ba:ca:9d:11:84:c3:7a:b7:e8:6a:84:f4:
         8e:95:89:b5:fb:4d:1c:82:0f:2e:37:05:66:bb:35:6d:b6:80:
         78:90:84:aa:a6:3b:c6:6b:3f:33:46:4b:9b:fd:91:8d:eb:34:
         38:e3:c0:83:ce:d3:78:a3:d8:1f:2b:85:92:07:06:b9:d8:f5:
         35:96:97:00:74:a3:41:87:29:12:db:69:4e:00:01:81:7d:96:
         eb:05:5c:e5:50:7e:9d:c7:61:6c:df:41:aa:3e:8c:a5:db:b9:
         0a:de:e5:38:18:d2:4d:59:e1:7c:a3:a0:d9:47:b1:0e:fe:fc:
         25:59:6f:2f:51:87:4e:14:df:78:65:6b:7d:fa:5a:41:f8:fe:
         08:34:fa:bf:b0:c9:d1:0d:6a:1e:8e:c6:5c:f8:63:5b:a2:36:
         ec:cc:59:d6:09:c0:98:c3:1d:22:27:bb:70:7e:da:c5:c7:74:
         79:80:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:14:58 2024 by rpki-client on console-ams.rpki-client.org