Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File:                     AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier:          NAruypMQjJAc8ANnf2GEda3jDsI7GUKLOtgFPK2PMGo=
Subject key identifier:   61:71:7C:D5:04:A6:07:F8:23:83:F9:3C:BF:52:59:E3:B4:11:CE:78
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer:       /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial:       018F43B2A5575434F6EB22EA281A4C399A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 13:02:12 +0000
Manifest this update:     Sat 04 May 2024 13:02:12 +0000
Manifest next update:     Sun 05 May 2024 13:02:12 +0000
Files and hashes:         1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: s3Gg2JpriBSEjPiwMX801n3p42I6pOSDOccxxmyO18M=)
                          2: yyMfXZXl-MUruYrKCQaCQXwQw_I.roa (hash: aH4ZA5QGaSraY9gJ8xw6gG61rNtnAaC49YyvW9w7HNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:a5:57:54:34:f6:eb:22:ea:28:1a:4c:39:9a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
        Validity
            Not Before: May  4 13:02:12 2024 GMT
            Not After : May  5 13:02:12 2024 GMT
        Subject: CN=61717cd504a607f82383f93cbf5259e3b411ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:4b:99:f7:3c:70:8e:8e:9f:58:65:ab:23:
                    ba:61:b8:1e:d3:b7:30:4e:86:01:e7:97:2d:db:64:
                    ee:75:65:e8:b9:a1:c8:4a:48:30:fc:5e:91:e3:f0:
                    e7:ae:7f:d0:2d:d0:59:35:50:aa:71:11:51:3c:94:
                    b8:25:28:b4:d2:16:8e:8f:18:fb:d5:13:84:81:02:
                    f2:bb:89:83:c7:d7:4b:d4:b4:fb:93:05:04:7c:e6:
                    0e:1d:0f:77:8a:48:21:71:4d:fe:63:2a:28:c7:dc:
                    a8:bd:a2:94:84:8c:be:a4:8e:fd:cd:cf:96:44:6e:
                    24:de:35:33:ef:56:d7:d5:bd:fd:99:bd:ab:47:8e:
                    33:c8:39:05:45:ed:11:a6:0c:cd:6d:6e:f5:2c:44:
                    ac:58:dc:40:e4:9c:d7:9e:e4:f9:fc:d1:72:02:64:
                    7a:23:22:4c:3e:5a:e4:2a:ca:47:0e:1b:95:f8:d8:
                    13:5b:a6:61:e6:a1:3a:08:1f:74:15:78:34:66:04:
                    d9:77:3a:06:0e:04:ea:d7:a3:6b:60:09:c5:6f:c9:
                    59:aa:df:6e:31:aa:80:e8:af:94:0b:9d:64:8f:5c:
                    98:8e:3b:ad:1b:71:5f:0f:9b:62:84:4c:b0:f6:f8:
                    4a:e5:31:06:59:c3:1b:53:ff:ff:97:a0:cd:0d:ef:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:7C:D5:04:A6:07:F8:23:83:F9:3C:BF:52:59:E3:B4:11:CE:78
            X509v3 Authority Key Identifier:
                keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:25:8b:20:f5:67:75:f4:a5:5d:75:b3:10:e7:27:d8:ef:
         f0:91:25:74:ff:96:83:24:a7:dd:b4:18:cd:80:3f:98:72:f1:
         2b:dc:f2:d3:0d:ab:85:58:d3:34:72:79:1a:9b:14:55:d3:c1:
         b3:0a:3e:db:7b:c7:3a:af:0f:88:25:68:f5:ba:14:49:29:45:
         d7:b0:a8:61:f9:0c:75:39:61:0e:4d:e8:1b:e5:55:6f:02:65:
         41:68:7f:12:c4:8f:1d:25:a5:36:16:6e:df:16:8d:31:d9:61:
         c4:01:76:cd:da:8d:d0:03:6d:c5:c8:68:d0:8a:1a:c8:2e:97:
         18:c1:5e:85:bc:6f:00:de:87:c4:1d:6f:f0:c2:9d:82:10:27:
         29:a2:db:b2:02:79:2f:9a:fe:c1:5f:60:50:02:ba:4d:88:5e:
         61:70:3f:33:a4:cc:5e:09:8e:82:7c:7f:e1:3d:69:f6:99:fe:
         d8:3c:0c:ec:03:e3:bc:6b:23:68:4c:df:a3:0c:5c:bf:65:96:
         2d:cb:73:92:e7:70:c8:d9:27:d0:39:47:e9:46:5d:19:e0:81:
         3c:52:3c:36:20:78:94:6e:3c:2d:3c:4b:46:e5:02:52:8f:2c:
         3a:5c:9f:0d:2b:78:36:bf:62:ea:e1:ac:2c:60:29:bd:98:32:
         12:14:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:56:54 2024 by rpki-client on console-ams.rpki-client.org