Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File:                     AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier:          SnbQ24ERj/DyoYcb5xOjoRrZsxBdjt3zblcDaCvfgcI=
Subject key identifier:   42:71:EC:55:26:30:1C:4E:C2:3A:2E:66:2C:68:3F:18:AD:A7:B8:3D
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer:       /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial:       018FF6014EC4F82BEF1CF1EA84520B4F3FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number:          0C2B
Signing time:             Sat 08 Jun 2024 04:00:31 +0000
Manifest this update:     Sat 08 Jun 2024 04:00:31 +0000
Manifest next update:     Sun 09 Jun 2024 04:00:31 +0000
Files and hashes:         1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: DWa2RVO3i5ZXETNmc4RjkcxwWkEov15uNVm3vJo5gbI=)
                          2: EsOgOUCt9qTwIfQYYkKxRGilRvs.roa (hash: WDvULFM3E+fAnGjO0b9z69rYlLFkAI2+xKq+FoYlEMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f6:01:4e:c4:f8:2b:ef:1c:f1:ea:84:52:0b:4f:3f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
        Validity
            Not Before: Jun  8 04:00:31 2024 GMT
            Not After : Jun  9 04:00:31 2024 GMT
        Subject: CN=4271ec5526301c4ec23a2e662c683f18ada7b83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:b8:bd:fe:c1:06:a0:de:f7:07:97:89:07:
                    6d:c7:5c:df:71:44:88:f6:0e:b5:5b:bb:8a:06:23:
                    eb:3a:79:fa:ea:fb:52:46:fe:59:d5:3e:56:b6:83:
                    18:21:85:bb:29:ef:58:92:d0:0b:08:7f:ce:59:83:
                    c4:6b:e6:09:bf:f3:52:fa:28:e4:eb:4f:63:56:be:
                    ff:5a:c2:52:bb:99:3a:c1:b6:45:ef:33:95:d6:f5:
                    9d:5a:0c:5b:79:2e:54:a1:dd:cf:12:0c:5d:7d:c3:
                    93:25:ee:d8:9e:bc:f7:8e:77:56:b0:00:fe:04:46:
                    9d:94:41:08:ce:18:62:68:8c:df:cc:f7:a5:b1:33:
                    d1:bc:37:00:04:01:f0:51:10:65:82:63:de:67:6a:
                    b2:4c:b4:28:e8:a1:2e:14:ca:d9:32:6c:e3:9c:e3:
                    15:09:68:7d:09:2e:12:01:c4:6c:4f:9c:2b:04:c8:
                    c5:4e:79:77:b6:dc:5e:01:89:be:09:cf:5e:ce:7a:
                    86:30:54:23:82:2c:28:d1:87:e2:18:73:d9:a1:d7:
                    a6:e8:d0:ef:f0:ae:2a:c3:bb:93:85:dc:5f:cd:fb:
                    d8:96:5d:d0:19:85:0d:59:7a:8c:83:a3:9b:ba:3d:
                    62:77:37:22:df:b0:93:f8:b0:c1:f7:cc:95:d4:31:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:71:EC:55:26:30:1C:4E:C2:3A:2E:66:2C:68:3F:18:AD:A7:B8:3D
            X509v3 Authority Key Identifier:
                keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:94:c1:d9:4a:07:a4:ca:d0:f9:74:9a:6d:21:05:5f:c0:
         10:8d:fa:7f:3b:51:61:c1:d3:9a:21:22:d5:21:f2:85:4f:32:
         e2:8d:ef:c1:36:1d:1f:9d:1d:8f:ce:51:8c:58:36:2b:e1:dd:
         0c:de:b1:4f:bb:16:5f:20:99:ac:b6:3a:6d:75:ab:d2:a1:5f:
         d3:06:67:36:cd:7b:2a:0f:83:21:5e:80:5b:35:68:33:c6:03:
         1a:c8:93:7f:e7:14:67:ba:cd:42:e6:69:c2:af:c0:da:7b:59:
         df:ec:9d:b3:f6:58:62:9e:90:29:e0:b9:1f:5c:11:b6:81:27:
         ce:b0:59:11:3c:1c:ce:79:4f:bd:df:a6:6e:59:61:05:ca:3c:
         c1:fa:bd:60:e3:38:4d:fb:45:0d:65:7c:71:ff:cc:9e:82:60:
         de:1a:80:b1:c0:95:4f:8b:65:e1:c8:8f:93:67:78:b6:76:65:
         fe:fb:35:50:bc:99:62:b5:18:1b:f0:a6:54:a4:1e:c5:ac:c9:
         36:45:02:88:7a:4f:17:a9:5c:11:31:12:22:9f:95:21:e2:fa:
         50:69:6d:95:04:c2:c7:24:60:d1:27:db:ab:81:a3:86:ba:df:
         be:eb:18:86:ce:dc:dd:be:ad:e7:db:a5:40:ca:5e:36:ff:94:
         bb:2b:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:25:27 2024 by rpki-client on console-ams.rpki-client.org