Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File:                     AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier:          C7sS9+1Yt3MTF6XSqIAPGfrk/GRqr7Dg9SXlI1/9J7E=
Subject key identifier:   47:74:01:90:F2:70:5D:B9:80:31:BE:C9:F9:68:F7:46:AE:EB:A9:17
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer:       /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial:       018F4F4A34DD3E009ADC349F717D90B6DCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number:          0841
Signing time:             Mon 06 May 2024 19:03:34 +0000
Manifest this update:     Mon 06 May 2024 19:03:34 +0000
Manifest next update:     Tue 07 May 2024 19:03:34 +0000
Files and hashes:         1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: zZm2anwXthXsKORu6BUmSWNT6MpLFS3c7glBmHr5230=)
                          2: pC6yRAfa60mlwMKETDehcpW2U9c.roa (hash: QQqhJCza+iG1UZUu6HHUaNT/m/maihxDma99p4FSgO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:4a:34:dd:3e:00:9a:dc:34:9f:71:7d:90:b6:dc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
        Validity
            Not Before: May  6 19:03:34 2024 GMT
            Not After : May  7 19:03:34 2024 GMT
        Subject: CN=47740190f2705db98031bec9f968f746aeeba917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:a4:b5:16:fc:67:01:5e:cc:d0:c9:58:5a:
                    d1:a7:f4:99:38:b3:47:07:99:ef:5e:21:27:99:b6:
                    b9:6b:da:b6:93:e6:cc:4a:01:47:c7:e1:04:2b:63:
                    59:7a:49:34:31:3b:78:0d:91:c5:bf:69:23:db:5a:
                    6d:2a:e2:0e:fc:79:2b:f3:e0:29:b1:bf:5b:97:ef:
                    99:41:ae:b4:8a:0f:31:ba:2e:ae:0b:8f:ff:1e:e7:
                    c1:b9:4b:b9:fd:cc:ba:2a:1a:ea:9d:e6:81:32:8b:
                    fe:53:d6:38:9a:48:74:82:d1:7b:04:d9:74:47:6d:
                    bd:f9:c1:0f:f5:da:48:ea:9b:f0:71:c1:f7:21:29:
                    3b:c9:66:6a:25:d3:9d:3d:b4:9f:80:a3:22:d2:1e:
                    d6:82:14:9d:f7:07:ce:ba:df:ac:b7:4b:ef:1b:c0:
                    ce:41:33:e1:4d:0f:2c:a2:ed:fe:6d:08:09:57:93:
                    ce:b0:c2:01:bd:2c:cc:76:38:d8:64:1e:5a:4e:b0:
                    fb:1a:29:27:d8:f8:45:71:3e:23:49:31:f4:de:29:
                    ef:90:ba:89:e4:fb:38:d9:71:65:1a:63:a6:af:2a:
                    cc:c9:c0:cc:08:0d:8d:a4:8f:4e:c6:11:80:bb:27:
                    e5:7a:9e:6c:c7:aa:f8:03:71:9b:92:46:39:69:53:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:01:90:F2:70:5D:B9:80:31:BE:C9:F9:68:F7:46:AE:EB:A9:17
            X509v3 Authority Key Identifier:
                keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:e8:bb:fe:47:a3:67:f1:81:e1:b7:25:3b:de:a6:c7:2b:
         05:32:c9:b8:60:59:f6:79:01:01:ca:6b:17:77:4e:26:d2:b5:
         c7:47:e2:6d:75:7d:16:02:3e:07:e7:0d:69:e3:05:b1:ec:28:
         f7:25:f7:b2:e2:9b:8f:94:36:3e:b4:43:2e:8e:d2:c6:61:e9:
         73:22:fc:94:a5:42:76:89:27:aa:a1:ad:b7:3f:4a:9e:40:1f:
         6a:28:c8:0f:01:36:f9:c4:eb:ac:df:06:52:6e:24:d4:9b:c3:
         c0:f1:b1:d9:3a:6d:ae:bf:1e:70:14:02:82:71:7f:bd:b8:6d:
         19:f9:7d:5f:d4:9c:c6:b8:51:c7:93:fc:91:34:b1:c9:40:20:
         11:50:13:4b:f6:9c:f4:0e:1b:d9:9e:72:60:4b:81:f9:8f:d7:
         fc:b6:46:d4:2b:42:94:b8:af:73:15:7f:6d:28:3e:9d:ca:a9:
         f0:23:66:71:8e:3a:82:c3:66:6d:39:c5:eb:b5:b1:4f:f9:a2:
         f1:97:c0:f5:ea:aa:cc:27:5c:36:54:c0:2a:c6:66:ec:43:ae:
         6f:76:da:bb:bc:ca:a4:6b:41:ef:13:a5:0d:1e:83:9d:f8:4b:
         2c:6b:7d:0c:53:68:48:eb:13:08:85:1f:9b:4e:8c:62:03:23:
         58:3e:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:52:23 2024 by rpki-client on console-ams.rpki-client.org