Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File:                     AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier:          pJCF0ma33Kdimu3XSOdJPKAopQGuMrQGqBiSG8S3U+w=
Subject key identifier:   18:3E:2A:94:1D:93:EF:F5:CB:E2:6E:71:CF:5D:9D:B1:CF:BB:B6:52
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer:       /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial:       019352ACF7EF0AB1C26655540021529E17B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 07:01:27 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:27 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:27 +0000
Files and hashes:         1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: ecS/MSeftu/q86mtzFXQYvSeqgm3QK4vXUtocJL56bY=)
                          2: H1Upf48guG6wLq-b7f2l-RgWplk.roa (hash: Z2t6JhSnb+GLWTV3ZIt3K0DQ8yjjQPthRCQmLMp8pkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:f7:ef:0a:b1:c2:66:55:54:00:21:52:9e:17:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
        Validity
            Not Before: Nov 22 07:01:27 2024 GMT
            Not After : Nov 23 07:01:27 2024 GMT
        Subject: CN=183e2a941d93eff5cbe26e71cf5d9db1cfbbb652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:2f:1b:e3:a9:f5:19:49:30:a3:da:2c:57:
                    f1:57:a6:32:9d:3f:4b:96:09:2e:39:f9:79:a8:75:
                    56:e4:9f:da:3a:27:bf:78:e7:4e:1c:37:6e:11:0b:
                    62:79:ba:d6:74:19:0f:85:05:7b:5b:7c:b7:b5:77:
                    a1:7a:da:7f:5c:27:0f:17:01:47:8e:ae:43:0c:ab:
                    0d:33:41:86:7d:64:ac:a1:be:f3:71:5c:3f:fa:42:
                    b0:d5:c5:8d:cc:d3:b9:b5:03:e9:4f:1e:47:0c:30:
                    17:36:b6:2b:0a:60:13:1b:7a:1e:a1:df:fe:71:3e:
                    2b:85:f7:b9:7b:ff:cc:f8:27:70:6c:2d:ba:11:0c:
                    6e:da:b2:0b:69:61:08:5d:2b:cf:33:67:e8:83:d6:
                    a1:25:0a:7e:c0:73:2b:6a:3d:b7:16:02:87:fe:c3:
                    14:e5:57:af:16:1d:be:c5:68:15:29:9d:77:f3:95:
                    ba:d8:00:3d:32:cb:92:80:3f:f0:5f:ba:04:ac:d9:
                    5c:68:14:3b:a5:cb:a7:d4:81:5b:0e:9e:e2:1e:53:
                    5c:d1:2a:0d:99:66:2e:e8:32:73:0f:42:17:fd:2a:
                    ba:02:3a:cf:b1:c0:74:4c:6c:a8:67:20:5c:ec:fd:
                    9c:23:f0:02:42:e4:a8:31:be:13:60:53:92:7d:61:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3E:2A:94:1D:93:EF:F5:CB:E2:6E:71:CF:5D:9D:B1:CF:BB:B6:52
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:f3:43:e8:b3:e0:5c:ac:c9:f3:17:be:65:eb:08:2d:40:
         cb:75:fc:75:3a:b7:65:03:35:f0:28:1a:9d:6c:c0:d2:f4:9c:
         86:56:03:fa:76:d2:27:e5:0c:a5:d1:cc:ba:cd:84:2e:be:1c:
         cf:ab:34:36:c2:fb:4a:36:58:0e:c3:eb:6b:56:ea:b5:df:82:
         b7:25:5b:67:0b:58:58:39:2e:11:38:9e:0b:b0:a1:41:ce:b6:
         70:27:d9:61:88:4a:e1:86:7e:ba:fa:75:a1:13:d6:01:f2:48:
         4c:df:2c:f3:6b:bf:49:ae:93:01:a5:6f:ae:8a:aa:82:69:46:
         fa:46:f1:15:04:28:71:2b:d4:cf:ab:20:65:5c:02:bb:28:c2:
         12:11:b4:e4:15:cd:8f:27:e8:49:8e:88:db:f4:f1:cc:e8:17:
         1d:16:36:db:cd:4e:f2:f4:0f:97:27:27:bd:ff:30:ab:f2:9a:
         19:a8:cc:63:57:4e:93:74:de:12:c3:d1:f3:94:ab:a0:9b:5a:
         83:67:47:2f:41:ef:8b:95:cd:75:02:d2:d2:de:f2:04:d0:74:
         b2:d5:e4:3f:0e:b1:b8:88:14:36:14:ab:55:4c:de:40:22:a5:
         30:74:4c:eb:7c:ea:ec:c8:f6:e3:96:85:f3:5d:4a:fb:2a:52:
         d7:76:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:39:51 2024 by rpki-client on console-ams.rpki-client.org