Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          wAyPJTSYc52zR8QXuUE6GcSDyuEwoxXG8GRm6oZClYs=
Subject key identifier:   AE:03:45:37:B8:68:4E:91:D6:71:75:03:7D:5B:DA:56:DE:C7:C7:C3
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       018F5393348359C0043A5D23ADA564A34806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          0A1F
Signing time:             Tue 07 May 2024 15:01:47 +0000
Manifest this update:     Tue 07 May 2024 15:01:47 +0000
Manifest next update:     Wed 08 May 2024 15:01:47 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: SmTRUtuIJQHqBKnMfnuHHJrQcpbhtk7g04ae9K6G3xc=)
                          2: Pow6TPWD3zqliKq6ckEQAmm5H1w.roa (hash: ZamBKWqvnU46n+0N7hZxIeSAqeQJ5RO0CVFvTIezi7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:93:34:83:59:c0:04:3a:5d:23:ad:a5:64:a3:48:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: May  7 15:01:47 2024 GMT
            Not After : May  8 15:01:47 2024 GMT
        Subject: CN=ae034537b8684e91d67175037d5bda56dec7c7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:c0:0e:72:4c:2f:ef:88:bf:f3:20:dd:7a:
                    d4:ff:a8:ad:67:63:3c:f5:a2:c3:4c:6c:34:1c:bf:
                    8a:58:74:be:79:30:82:08:84:d8:5f:d3:69:4e:32:
                    6c:60:7c:fe:79:0e:4c:ca:15:84:77:c2:55:c3:bb:
                    df:cb:a6:a6:ba:51:9a:a4:b6:d3:18:37:fb:f4:c0:
                    26:32:33:27:d0:89:cd:83:43:f5:4e:f0:3c:2c:3a:
                    32:6c:ed:90:53:70:0c:67:81:69:d9:78:e0:63:ae:
                    fe:ed:87:d0:e5:ff:f1:f9:47:58:17:a3:69:10:9c:
                    2a:9f:ad:30:82:ce:cb:dd:8e:43:b4:b1:37:03:ee:
                    64:5f:0e:cc:14:36:fe:e9:8b:0c:f4:c4:3a:d7:39:
                    88:0e:ae:0a:14:fa:e4:38:64:8c:ef:20:c0:28:c1:
                    43:b8:18:6a:98:f3:46:79:45:64:54:ce:8f:3a:57:
                    ca:f9:2c:b3:3a:5e:42:ae:5a:95:5a:87:d9:c4:f8:
                    f3:50:28:f8:e3:85:63:68:dc:7e:00:07:c7:be:bd:
                    22:35:0b:cb:64:a3:e5:19:91:c9:9c:df:3b:73:3c:
                    02:15:36:93:3c:1f:cd:27:42:f3:e7:4c:d5:a9:4a:
                    8a:06:27:6e:9f:06:03:2c:3c:a7:52:33:af:32:20:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:45:37:B8:68:4E:91:D6:71:75:03:7D:5B:DA:56:DE:C7:C7:C3
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:e5:b7:4c:7d:16:c4:e9:4f:f6:88:fa:97:52:88:41:7a:
         5b:a3:a0:c8:29:77:98:02:1e:83:53:c5:16:20:6c:58:22:84:
         41:44:7f:2b:b5:9f:1f:bc:bf:75:fd:a8:27:75:e1:ab:a6:e6:
         ee:13:a2:42:a6:4f:4b:50:6b:86:90:b4:4e:dd:8f:a7:e8:d2:
         62:a7:4e:ed:b2:2d:1e:1a:35:88:5d:30:11:ac:01:7c:88:9e:
         8b:d5:d0:9b:60:12:33:86:95:b5:73:1f:e0:89:c7:04:8a:a1:
         cf:3c:36:97:42:ad:92:ab:99:68:55:ce:ea:83:69:f5:00:c2:
         c2:98:97:33:56:37:7c:f5:61:47:33:4b:f4:86:bb:54:ed:7e:
         f0:ba:86:a4:e9:81:ed:51:11:d1:59:42:ae:66:1d:4a:be:51:
         7d:8c:4e:06:e1:b7:0c:c1:71:09:fa:29:3e:9e:e8:0f:7e:11:
         5b:15:cd:34:83:72:6b:5b:0e:a5:a9:0a:51:dc:56:85:b9:46:
         ef:2a:af:00:8b:78:87:71:48:60:c5:d6:f9:e1:01:21:83:72:
         0f:5b:50:f9:7a:94:55:1c:36:c0:8b:b0:95:11:e8:ff:37:df:
         e5:f0:f2:15:46:21:2c:e8:e7:e0:a6:55:d4:76:4b:5e:18:e3:
         48:1e:b0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TkzSDWcAEOl0jraVko0gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5
YjRmODYwHhcNMjQwNTA3MTUwMTQ3WhcNMjQwNTA4MTUwMTQ3WjAzMTEwLwYDVQQD
EyhhZTAzNDUzN2I4Njg0ZTkxZDY3MTc1MDM3ZDViZGE1NmRlYzdjN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+zADnJML++Iv/Mg3XrU/6itZ2M8
9aLDTGw0HL+KWHS+eTCCCITYX9NpTjJsYHz+eQ5MyhWEd8JVw7vfy6amulGapLbT
GDf79MAmMjMn0InNg0P1TvA8LDoybO2QU3AMZ4Fp2XjgY67+7YfQ5f/x+UdYF6Np
EJwqn60wgs7L3Y5DtLE3A+5kXw7MFDb+6YsM9MQ61zmIDq4KFPrkOGSM7yDAKMFD
uBhqmPNGeUVkVM6POlfK+SyzOl5CrlqVWofZxPjzUCj444VjaNx+AAfHvr0iNQvL
ZKPlGZHJnN87czwCFTaTPB/NJ0Lz50zVqUqKBidunwYDLDynUjOvMiBeCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4DRTe4aE6R1nF1A31b2lbex8fDMB8GA1UdIwQY
MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt
OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2
LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATonlt0x9
FsTpT/aI+pdSiEF6W6OgyCl3mAIeg1PFFiBsWCKEQUR/K7WfH7y/df2oJ3Xhq6bm
7hOiQqZPS1BrhpC0Tt2Pp+jSYqdO7bItHho1iF0wEawBfIiei9XQm2ASM4aVtXMf
4InHBIqhzzw2l0KtkquZaFXO6oNp9QDCwpiXM1Y3fPVhRzNL9Ia7VO1+8LqGpOmB
7VER0VlCrmYdSr5RfYxOBuG3DMFxCfopPp7oD34RWxXNNINya1sOpakKUdxWhblG
7yqvAIt4h3FIYMXW+eEBIYNyD1tQ+XqUVRw2wIuwlRHo/zff5fDyFUYhLOjn4KZV
1HZLXhjjSB6wuw==
-----END CERTIFICATE-----
Generated at Tue May 7 19:32:42 2024 by rpki-client on console-ams.rpki-client.org