Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File:                     AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier:          Ka7UzHv0TSPfmObqhZFpi+hXcrOTaAb/623yLn42Z3A=
Subject key identifier:   4F:1F:66:63:22:41:B4:C3:56:BC:30:8A:B6:63:4B:C5:AF:3F:BE:A4
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer:       /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial:       018F3A0B6F6B97F7EED4556832856D277676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number:          0A37
Signing time:             Thu 02 May 2024 16:02:58 +0000
Manifest this update:     Thu 02 May 2024 16:02:58 +0000
Manifest next update:     Fri 03 May 2024 16:02:58 +0000
Files and hashes:         1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: vfkijhbpZNCllynd7U1ZKdnpu7BZzPg+G9LF6bOKp+Y=)
                          2: L1laDd3yKHr-pHkuY4J7xAEC1oE.roa (hash: YE1BMczhmFEGz39++sm77tSR1SHDqQVc+L50fPoO+To=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:6f:6b:97:f7:ee:d4:55:68:32:85:6d:27:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
        Validity
            Not Before: May  2 16:02:58 2024 GMT
            Not After : May  3 16:02:58 2024 GMT
        Subject: CN=4f1f66632241b4c356bc308ab6634bc5af3fbea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:ff:4d:e2:74:5f:a4:38:13:33:47:8d:00:
                    fa:66:63:bb:b4:ef:60:fb:06:67:7a:b9:09:f3:86:
                    1e:8c:fb:43:85:08:d1:32:21:89:a2:50:28:49:88:
                    ef:b8:63:98:da:58:1b:2b:b9:23:97:4d:a1:01:fd:
                    1b:47:2a:e5:85:0d:ff:f1:ee:2b:93:e2:1a:1c:7b:
                    6c:4c:c5:9b:63:af:5c:ce:7c:34:b9:9b:f4:cd:1e:
                    01:bc:45:28:15:d1:7f:3a:21:28:ed:30:75:e5:cf:
                    4c:df:2d:af:54:48:28:9a:6f:f3:69:31:71:9e:82:
                    8f:ec:76:41:b0:cf:9c:06:43:02:be:22:ac:f6:24:
                    88:27:78:f6:a5:03:06:d2:83:44:82:4b:f5:47:32:
                    61:20:75:c4:14:56:18:d3:d9:a9:5d:25:a6:0d:17:
                    5b:60:0d:65:b8:0b:48:5d:86:cd:10:23:5a:67:8e:
                    a3:c5:0a:0f:ee:1e:56:e7:92:b9:1f:0d:7f:48:5a:
                    03:3e:09:ac:3f:7f:c1:0c:29:a0:8c:36:c8:79:69:
                    ed:9c:7c:af:37:45:12:97:74:ac:46:7c:1a:ed:5f:
                    60:1f:d1:6c:e5:a7:9f:1e:e1:6e:12:63:38:23:0b:
                    0e:2f:19:4f:c3:08:f2:a8:50:15:11:27:10:09:bb:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:66:63:22:41:B4:C3:56:BC:30:8A:B6:63:4B:C5:AF:3F:BE:A4
            X509v3 Authority Key Identifier:
                keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:78:d0:fa:82:10:3f:ba:19:2e:e5:cb:ec:ca:d9:a2:37:67:
         07:5d:57:38:b5:28:97:a5:52:61:78:24:fd:12:31:c0:b3:9c:
         3a:56:1f:cd:75:7b:b6:fc:8b:3d:10:d4:6a:ba:21:29:aa:0c:
         ef:22:02:af:c8:ec:3a:61:b9:36:2e:75:b4:06:ca:dd:a5:a8:
         0c:42:74:1b:e5:a0:75:c9:97:0d:93:40:cd:22:f5:da:ff:e2:
         cb:06:29:28:8b:01:ec:0f:d6:7c:4f:14:5d:1f:e2:e1:27:a6:
         e3:f9:87:48:6a:c6:0e:60:4b:9f:64:75:52:eb:21:b1:e1:61:
         f1:bd:3d:80:10:a3:66:bd:d7:d5:45:bc:a6:e1:77:30:49:70:
         19:b5:49:81:ea:38:6b:dc:3d:0a:bb:1c:0f:99:94:1b:d5:1f:
         f3:d6:3b:92:73:96:3a:d1:b5:ba:49:a1:ae:e5:99:98:2d:3e:
         8b:ab:ae:b7:41:ca:24:de:85:a7:ca:df:87:66:ca:9d:2c:13:
         7b:73:a5:5a:35:b3:d5:f9:30:df:be:0f:b9:9f:e5:43:78:c9:
         ee:94:86:19:2f:d8:1d:5f:b5:26:f9:f2:70:c9:22:35:58:23:
         49:c0:2f:e3:2b:86:f3:7b:2f:3e:e1:1f:2b:ac:59:77:fa:ca:
         1d:90:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:30:36 2024 by rpki-client on console-ams.rpki-client.org