Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File:                     AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier:          X1nTMYGJztEdxdiqVZ3c+jzsqT8sNIAm6tllACYiyys=
Subject key identifier:   C7:95:23:C3:54:F4:75:EC:C7:CB:FD:BD:90:23:4A:91:15:AC:1D:5B
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer:       /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial:       018F3A0C3BA19F0D9ABCDAB696EE9DA1601D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number:          1154
Signing time:             Thu 02 May 2024 16:03:51 +0000
Manifest this update:     Thu 02 May 2024 16:03:51 +0000
Manifest next update:     Fri 03 May 2024 16:03:51 +0000
Files and hashes:         1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: xYOCT1aOGfz2wmrznUWEcBfVftqP8+lThcA+9KlnyNk=)
                          2: H1Upf48guG6wLq-b7f2l-RgWplk.roa (hash: Z2t6JhSnb+GLWTV3ZIt3K0DQ8yjjQPthRCQmLMp8pkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:3b:a1:9f:0d:9a:bc:da:b6:96:ee:9d:a1:60:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
        Validity
            Not Before: May  2 16:03:51 2024 GMT
            Not After : May  3 16:03:51 2024 GMT
        Subject: CN=c79523c354f475ecc7cbfdbd90234a9115ac1d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:ec:74:31:f7:23:67:dc:cc:30:34:0c:de:
                    b2:75:a3:46:df:28:16:b6:2f:50:ff:af:f9:84:82:
                    f9:43:5b:c7:5b:6b:77:e4:6c:1f:d4:2e:7c:da:10:
                    f3:77:31:7f:7e:78:f9:ea:f7:63:7f:c5:8e:f0:f8:
                    8c:13:dc:60:3f:d1:a9:6a:13:33:6d:c7:aa:2c:22:
                    9c:a6:fa:dc:6d:85:da:7c:bf:21:79:c6:09:42:ec:
                    7a:5c:84:67:76:01:ce:04:90:65:e4:b5:b0:77:a9:
                    00:93:74:35:5b:e7:25:4d:48:6f:e1:43:6a:4c:70:
                    5f:11:d2:06:1e:45:bc:78:d9:d5:e8:57:d5:f5:e4:
                    90:2a:b5:f5:90:11:a6:be:31:a9:94:6c:c7:4c:31:
                    af:9f:6c:1e:5f:bf:64:55:76:7f:15:64:3c:82:71:
                    36:4a:53:40:55:64:ab:da:6b:a8:f6:85:57:ef:e4:
                    31:2c:00:25:d5:d8:52:84:67:e9:9c:76:6b:06:af:
                    ef:91:3b:6c:dc:09:33:2a:fd:92:85:ca:2a:cf:a5:
                    19:8e:f5:ff:3b:54:bd:7d:4e:fc:8a:bb:4d:35:94:
                    4f:71:ac:a4:67:76:ff:97:a3:16:62:77:ec:34:c7:
                    f5:fa:cd:4d:b4:e3:d3:77:67:51:cc:0b:de:d5:6d:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:95:23:C3:54:F4:75:EC:C7:CB:FD:BD:90:23:4A:91:15:AC:1D:5B
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:90:57:9e:d9:d6:b0:1f:53:1b:1d:a2:99:51:98:e3:cf:
         14:9f:ab:8a:3b:ad:b3:96:bc:cc:67:68:67:28:c1:76:50:20:
         2f:57:3e:c7:bf:9c:90:ad:9e:0d:15:58:5c:12:bf:79:25:24:
         55:ef:73:ae:a8:93:45:ca:4d:3d:41:91:28:90:06:08:07:e4:
         d7:71:75:13:c6:9f:e6:e2:13:23:28:4d:76:96:1f:34:66:fe:
         56:ff:02:c4:c8:e1:3c:5e:af:b3:cf:f8:a9:84:96:d2:f1:53:
         6c:a5:31:59:bb:e5:9c:6b:1e:4d:e7:da:10:46:a1:bb:cb:f9:
         06:ab:7b:a6:65:18:b8:e1:b7:26:6b:e0:dc:be:3d:89:ed:53:
         7a:ca:66:bf:0f:65:57:a5:87:16:8c:c9:0a:4b:a9:50:74:10:
         58:3b:ae:27:66:6e:db:d4:9f:6e:25:5e:14:6d:da:28:ce:c0:
         ff:3c:8d:ee:b1:6a:b3:4e:e1:d6:86:66:14:a7:72:bf:13:88:
         69:12:38:85:88:da:c8:41:0f:d1:2c:0a:61:da:71:e3:98:0a:
         83:78:02:62:69:b7:47:d4:28:48:bf:5c:29:29:12:b6:8e:76:
         15:13:2f:6c:57:97:b0:86:af:1a:31:89:47:99:e4:9f:58:ee:
         d9:93:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:28:58 2024 by rpki-client on console-ams.rpki-client.org