Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          +82+4Vs8UMFKREMVlRhTM7FRZuhzLzljuicnKkm0e5M=
Subject key identifier:   E5:EC:ED:9E:1D:CB:0F:6E:2A:1E:C7:81:CB:25:ED:A2:0A:E2:66:B8
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       018F8D14ABD92B303383B6C66520049F048B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          0DAE
Signing time:             Sat 18 May 2024 19:01:33 +0000
Manifest this update:     Sat 18 May 2024 19:01:33 +0000
Manifest next update:     Sun 19 May 2024 19:01:33 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: TRkz3Kd7opSRGfr71a5zeiv9JCHSTBaGWtM+9mThKZE=)
                          2: cfvdlv1dTxu7oFaojD75U3eUtZA.roa (hash: xJ6VO8YlOazczfQz3OvKEZrV0nb10ScH6UrxBFqE3pw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:ab:d9:2b:30:33:83:b6:c6:65:20:04:9f:04:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: May 18 19:01:33 2024 GMT
            Not After : May 19 19:01:33 2024 GMT
        Subject: CN=e5eced9e1dcb0f6e2a1ec781cb25eda20ae266b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:3c:e1:79:b2:00:db:1b:ee:63:4e:51:e4:
                    a2:b2:dc:2c:d8:41:4d:77:99:ec:0c:38:46:cf:0a:
                    dd:27:25:bc:f6:5e:e1:33:ed:9e:8f:c7:bb:9c:5e:
                    ee:7b:ef:81:4d:6b:cd:c3:34:b9:6f:5d:6f:38:aa:
                    1f:9e:6b:2b:98:73:7c:d7:0e:00:48:de:22:e6:43:
                    a7:d2:3b:28:6d:61:6b:fa:5a:b2:3c:20:f8:54:9f:
                    13:bd:97:bc:f9:f0:b3:de:41:d9:11:94:30:67:2f:
                    e8:76:90:6d:9f:d2:8d:d2:82:8e:eb:87:6b:d5:c6:
                    42:47:6c:73:c4:09:20:a8:de:cc:cf:0b:58:91:06:
                    bd:43:71:8c:33:60:ae:4c:74:80:45:d4:d9:ec:6e:
                    69:1e:f6:d1:91:e3:0c:78:15:6c:2a:cc:48:13:58:
                    df:69:89:aa:8c:1e:6b:dd:b9:21:0d:1b:91:06:7e:
                    2b:b7:4f:0b:9e:19:0c:0a:d6:64:bb:22:b5:20:10:
                    b1:1e:f8:b0:23:39:cc:5b:3c:e9:52:4d:28:3e:7b:
                    8f:ec:5a:97:f4:18:5f:c2:e7:4c:05:25:94:3c:b2:
                    0e:da:a9:d3:4e:c1:ba:11:74:87:46:98:31:b8:7a:
                    d1:21:de:85:01:1d:fa:f5:e9:71:99:52:5e:ec:60:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:ED:9E:1D:CB:0F:6E:2A:1E:C7:81:CB:25:ED:A2:0A:E2:66:B8
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:db:ff:52:37:5c:11:34:2b:a4:d4:ad:64:68:dd:87:da:59:
         72:1d:78:b1:e9:57:4c:71:4c:cd:fe:5e:64:2b:7d:71:ee:be:
         84:fa:2d:7a:c2:b3:fa:72:4d:96:1c:f5:ff:5c:a3:1c:39:ad:
         0f:2c:d9:89:44:41:dc:46:73:54:ed:e2:a7:d9:bc:4c:96:f7:
         4c:82:f9:86:6e:5d:60:5a:ba:0f:0f:0c:79:25:79:1f:a5:20:
         58:0c:c7:ad:5c:e5:0c:e8:ec:49:c0:88:47:c2:09:fa:5e:c0:
         28:3b:24:af:c0:ca:27:96:64:c1:2b:15:45:5d:85:77:0c:a2:
         c9:c2:ff:fd:c4:79:ea:36:33:da:ce:78:46:a9:05:85:01:19:
         ca:a1:89:02:48:83:b5:cc:f6:73:3f:9c:71:b4:1b:b2:e7:10:
         c5:7b:cb:2e:bc:0f:2b:d0:25:0b:c1:b8:c1:d1:1f:17:81:6a:
         df:44:8e:0d:b5:8d:0c:b4:75:62:b5:2e:5f:fb:05:3d:b2:6a:
         12:90:54:cb:6e:b9:fc:33:07:c7:8e:d8:35:0d:3e:dd:67:00:
         62:e6:b4:16:7e:01:f8:90:86:2a:fd:5e:11:f0:79:ea:64:a0:
         29:58:4b:b6:aa:73:c1:8a:db:5c:f0:42:81:cd:3e:b5:6d:dc:
         69:11:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:18:09 2024 by rpki-client on console-fra.rpki-client.org