Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
File:                     AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json)
Hash identifier:          lI8+V6nOyrN9WBCVww/jaVti55yNfaf78pSdXuZTqew=
Subject key identifier:   5B:85:0E:EA:A0:A1:EC:3F:4B:1A:25:69:38:A0:E1:EA:2B:6D:0A:86
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Certificate issuer:       /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial:       018F3DAF7859B38EB813D910914FB1516F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
Manifest number:          1212
Signing time:             Fri 03 May 2024 09:01:00 +0000
Manifest this update:     Fri 03 May 2024 09:01:00 +0000
Manifest next update:     Sat 04 May 2024 09:01:00 +0000
Files and hashes:         1: 1RcjV8HDMcjwcsGKKeFuxRBUxxw.roa (hash: xwkYTk7vrU2pe4XbBidGPNvS4lTZfxsLmybdht5dFlw=)
                          2: 6d8vbaYM2pUuR_Rue51xj0XvzS0.roa (hash: oF1tCXzd/AqB9OiyR5JXyDtYSO+4Lskm6DQviFNOdws=)
                          3: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: nRzBNq54htElZE0OfRWxZEafdHY0gQY+DX/DwF8eTj4=)
                          4: VoPH9k1N1OTksWL8-31giZ0FNSM.roa (hash: NDwu8Il8szGOokbSwbr8bOUVADBKNswxI9YTXRcI5yc=)
                          5: aLohYEVysrWGQLLh5rriT7ev6Z8.roa (hash: u+5uKwN0Yb1IFn0wimGqAUkhxUzHJJxN+p0RC0+WtF0=)
                          6: iPQvz4g1MCs2HQrvfIJaBwFBc5s.roa (hash: bKrrKT1nW3QzztwI4+mb0jUpn9wSH/1O8lsv/2/HAFY=)
                          7: kNSoD3kL7jtcH2kfuW4ffXi86LU.roa (hash: WYn03slDHpvflZBwUiVz+sybtOHqXvpBLTtearOQ3Jo=)
                          8: nmmGqRS_EEHan_A6VoKCvqqqPm0.roa (hash: +n1xf8rFYHNw+AUdQGQLYGXSRsxXXkxwq7DH89BqnGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:af:78:59:b3:8e:b8:13:d9:10:91:4f:b1:51:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
        Validity
            Not Before: May  3 09:01:00 2024 GMT
            Not After : May  4 09:01:00 2024 GMT
        Subject: CN=5b850eeaa0a1ec3f4b1a256938a0e1ea2b6d0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:ff:73:24:24:84:f9:1c:bf:5e:e8:a8:f4:
                    42:ee:de:b4:f2:a4:02:95:cf:3c:70:75:e0:e1:95:
                    4b:06:5a:7b:c5:6f:1a:df:c9:c1:4d:8f:08:2d:af:
                    c8:b1:fc:b4:b6:13:6e:88:10:6a:57:bd:7e:a3:88:
                    49:1d:13:0c:c7:d4:8e:9c:82:d1:b7:bc:65:1a:38:
                    3d:5c:d3:5f:65:4d:05:fd:f2:57:94:f7:02:cb:88:
                    81:ab:eb:d1:47:0b:79:45:5a:b2:73:43:f4:d7:f3:
                    f0:da:78:74:dd:1d:e3:0b:00:78:0d:c5:60:39:f1:
                    a5:ff:c7:1e:27:b9:f0:1a:c7:b3:c2:d8:92:b7:ad:
                    82:b8:d6:3e:51:38:a8:69:1f:fb:2b:b3:1a:91:d3:
                    71:e4:81:34:d8:be:4c:3b:1e:28:f7:48:07:d2:ca:
                    c3:3f:e9:31:57:a1:19:e3:81:5a:94:89:c0:b3:d8:
                    b8:b7:e3:ea:0f:02:9f:fc:b2:88:f9:5e:36:56:35:
                    eb:0b:2c:a4:b1:3b:32:d1:95:80:d0:e2:61:93:00:
                    ee:3d:62:43:54:3c:4b:5c:fe:f0:3e:4e:0a:fd:d5:
                    da:f0:fb:81:7d:9e:33:65:28:b6:ce:1d:26:d0:fe:
                    a9:42:96:28:5e:03:89:27:de:83:bc:ac:c9:68:a1:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:85:0E:EA:A0:A1:EC:3F:4B:1A:25:69:38:A0:E1:EA:2B:6D:0A:86
            X509v3 Authority Key Identifier:
                keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:9f:9e:47:ed:a3:10:22:59:be:36:d1:c4:49:75:10:db:
         fe:fa:15:7a:a3:2b:31:d5:0d:33:02:19:84:04:16:89:cd:cb:
         1e:e2:aa:d2:52:ac:13:54:8e:96:14:25:4b:be:f8:ad:63:76:
         94:b0:25:df:b1:94:02:fb:89:77:10:94:4a:cc:87:20:80:38:
         06:24:b0:c0:40:3f:64:4e:bd:86:b4:0c:f3:68:82:94:da:69:
         85:3c:b3:ea:05:0c:c1:fb:61:9e:6f:c5:b8:85:fe:a6:62:a6:
         d1:40:2e:4f:4b:c1:b4:3b:e3:b5:89:fe:7e:c3:4f:8a:47:3a:
         3d:e3:30:dd:99:9a:45:38:d1:26:85:64:7c:29:a7:00:cc:1a:
         a6:e9:f3:87:15:bc:90:c2:c8:98:11:69:51:6b:08:9c:49:61:
         90:e5:d5:38:7f:34:aa:8a:5f:8b:74:b6:8a:67:91:59:12:99:
         2b:d4:c9:47:99:e9:71:6a:42:0b:24:32:22:6b:9f:e3:91:7e:
         e0:04:b6:38:36:8a:2e:b4:e8:f5:90:d9:52:43:6b:da:e9:69:
         cc:8e:db:19:80:7e:8a:a6:da:e2:7e:51:1f:8b:33:43:5c:e5:
         7d:9c:57:fe:05:cb:53:b1:f3:c1:06:e4:09:63:31:16:19:39:
         a8:45:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:11:38 2024 by rpki-client on console-ams.rpki-client.org