Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File:                     0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier:          TZJMlppsKJ92tvWiI4CA86wz2dxjiW6+77mZdxsE77E=
Subject key identifier:   28:DC:EC:8A:6E:A0:41:1E:01:E1:48:1C:F8:3C:1F:F8:E8:6D:DE:7C
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer:       /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial:       018F20EF80DC3F254FDB7D96CF2C25A315A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number:          0A7E
Signing time:             Sat 27 Apr 2024 19:01:57 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:57 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:57 +0000
Files and hashes:         1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: GlGq+XyBMabe9jGyvuA0jY+DqDP32uHJLydbRc416iA=)
                          2: XiRArs40bpmK80U0U3QnyZP5ncA.roa (hash: rI+ccKxm7CsxHnkOJwtIy3iwiYHb87oKetEQWxtOOy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:80:dc:3f:25:4f:db:7d:96:cf:2c:25:a3:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
        Validity
            Not Before: Apr 27 19:01:57 2024 GMT
            Not After : Apr 28 19:01:57 2024 GMT
        Subject: CN=28dcec8a6ea0411e01e1481cf83c1ff8e86dde7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:fe:7f:a9:3e:2b:da:0a:d4:16:cd:4d:00:
                    ae:55:f0:2c:f5:3f:6e:c6:db:5f:ef:31:cb:b9:70:
                    41:83:6b:d8:69:7d:74:92:86:18:76:94:94:5f:5e:
                    b7:42:80:bb:b0:a6:25:48:22:09:bb:dc:05:d9:f1:
                    2e:96:6c:f5:ac:b7:29:38:23:68:10:6d:c1:10:ce:
                    40:db:18:a9:14:82:3c:d9:ca:77:c8:07:7c:cd:2e:
                    0a:28:6a:32:5d:b1:9a:0a:4f:46:8d:a9:18:98:2e:
                    82:0c:70:4e:70:f9:73:7e:9b:b8:b5:e0:25:91:5d:
                    09:26:ac:2f:92:1e:8d:d3:41:3e:c9:b6:dd:d9:ee:
                    d7:15:d3:fb:85:ee:98:a0:de:d9:01:4c:f7:e4:e9:
                    62:9a:41:aa:82:5b:ee:35:99:bb:bf:d6:c8:f7:12:
                    9c:b2:7f:f7:06:48:ee:61:80:bb:f1:60:28:8e:b3:
                    1a:b9:6f:91:19:f8:cd:dc:1a:0b:e0:86:ad:37:4b:
                    ac:6d:54:24:dd:c5:64:90:d4:20:25:dc:c7:30:a5:
                    fb:08:8d:b1:a0:bb:75:96:44:d0:4c:cc:af:0e:c4:
                    75:c2:00:42:2e:ec:5c:44:61:c7:e8:60:18:07:8f:
                    d7:a2:2e:cb:b5:af:1a:a1:82:61:e5:8c:55:d5:9c:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DC:EC:8A:6E:A0:41:1E:01:E1:48:1C:F8:3C:1F:F8:E8:6D:DE:7C
            X509v3 Authority Key Identifier:
                keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:34:3e:b9:ca:d3:c7:78:40:95:70:c6:23:27:b0:36:32:
         0a:ae:ee:87:30:2f:ed:1b:da:ff:53:65:a8:b0:a0:b4:2d:e5:
         d1:82:be:9a:86:a3:8c:07:0e:ce:c4:77:27:aa:72:c3:13:d9:
         ef:b9:f4:f1:77:1b:57:bc:7c:e4:99:9f:d7:b0:4a:49:40:3b:
         21:8c:bc:7e:28:bd:7b:b8:8a:d8:00:d1:33:14:4d:24:32:c3:
         f1:40:b5:c5:cb:46:ac:ac:8d:54:18:ec:22:9a:93:55:7e:97:
         d8:ba:ae:dd:3a:a6:9c:2d:0a:0b:3a:18:07:74:da:f1:51:77:
         3d:c1:ac:f5:63:3e:cf:ab:8b:11:be:3e:17:7a:13:20:6e:4b:
         f7:3b:c5:2f:79:a1:24:b4:de:3e:39:21:6a:f8:0a:0f:51:57:
         2f:5e:43:ca:16:bc:82:5c:7f:39:ed:60:5a:d2:82:c1:5a:72:
         4a:b2:0b:7e:cf:c2:4a:13:b0:5b:21:dd:ad:46:70:eb:69:c8:
         67:dd:20:0e:9d:92:61:59:46:64:3b:88:e5:f4:3e:12:e0:ec:
         ed:a6:af:70:7b:73:1c:e8:ef:e4:4f:9b:c1:32:b8:b8:28:c7:
         bf:8f:de:e8:25:30:79:f1:a2:cd:e2:e2:91:5b:da:54:b4:46:
         4b:be:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:28:43 2024 by rpki-client on console-ams.rpki-client.org