Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File:                     AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier:          ds5qyvskkeLsYmGzoARcLkg1WzCmVm9RWHZnaTauzKA=
Subject key identifier:   5C:A2:A4:91:15:FB:E0:EC:E9:45:B5:54:BD:9D:64:5C:DD:A8:4B:4B
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       01906D1AA7508A02E94761650A0C518EB46E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number:          0C0A
Signing time:             Mon 01 Jul 2024 07:03:01 +0000
Manifest this update:     Mon 01 Jul 2024 07:03:01 +0000
Manifest next update:     Tue 02 Jul 2024 07:03:01 +0000
Files and hashes:         1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 9WucLe3mPJ24ch7wgseUihEIMTMJ7SPl7KW++xLB5lk=)
                          2: Dcvxu9tUnpZqoeXW9IXyV2pU7EU.roa (hash: YqkXDDw1XcCGyJZssA4HEvOX3gikrGxAlvJ9bt7J11Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:1a:a7:50:8a:02:e9:47:61:65:0a:0c:51:8e:b4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: Jul  1 07:03:01 2024 GMT
            Not After : Jul  2 07:03:01 2024 GMT
        Subject: CN=5ca2a49115fbe0ece945b554bd9d645cdda84b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:06:a0:94:a0:8e:2d:45:ae:4a:f8:e6:9f:
                    d7:c3:c4:c6:dd:b5:a7:50:14:79:bb:a0:20:6b:88:
                    db:04:b5:66:d8:a0:f6:a7:45:ae:c5:a5:ec:d3:43:
                    e6:70:14:7d:dc:f9:21:aa:0b:bb:7e:cb:b7:ac:fa:
                    c1:63:f9:3c:d5:fb:db:8c:4f:32:37:3f:ab:dc:04:
                    4a:b7:ef:37:84:38:2d:d2:6d:e2:68:c0:31:af:dc:
                    d5:cb:d8:49:9e:e5:49:b2:4d:00:ab:4d:f1:a0:c4:
                    b8:b2:07:eb:3a:46:2b:21:28:16:99:a8:c8:e1:cf:
                    3f:ba:f5:81:39:ae:e4:59:3b:1b:c0:63:ff:6c:c5:
                    8f:14:c5:03:ec:4c:14:31:94:88:e6:3f:02:f6:c5:
                    e8:8a:27:b2:01:d9:89:49:ba:9e:e5:7a:d4:45:8b:
                    a6:b3:7b:16:c6:39:88:89:a9:81:01:89:63:4e:bb:
                    67:c2:75:20:47:d5:46:39:a8:d2:09:31:9d:1b:6b:
                    0e:00:c9:b4:21:dc:a5:fa:8e:84:b1:e7:cf:c6:ed:
                    a5:9e:9e:bb:df:8d:cc:05:4b:72:1d:10:78:b8:cb:
                    58:b6:00:95:d1:f1:42:2b:76:0a:0a:61:e9:7d:33:
                    01:7a:41:36:29:45:86:12:12:53:b7:88:cd:fc:d7:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:A4:91:15:FB:E0:EC:E9:45:B5:54:BD:9D:64:5C:DD:A8:4B:4B
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:d1:b9:cb:4f:06:d3:83:41:93:fa:90:75:c0:b7:80:ca:
         57:0f:74:6a:0f:6e:f5:f9:93:68:d7:ee:50:7a:f9:cc:76:be:
         20:1e:37:cd:ef:c8:05:5b:a5:69:c6:e4:d4:78:d9:51:43:41:
         77:b8:6f:2e:62:c2:cc:ac:8a:da:9e:ff:9a:91:ed:f0:0b:dd:
         0d:de:bc:3a:8b:4a:2f:8f:03:c2:14:d1:fa:20:a3:3a:43:82:
         87:bd:90:fd:9b:21:a5:72:70:b7:36:1b:28:6a:a3:8c:b6:8f:
         b2:07:b0:97:32:57:cf:9f:a9:28:f7:39:aa:2d:22:4c:11:3e:
         af:2c:11:09:26:51:1a:ff:45:67:dd:6a:98:9e:85:85:4e:0c:
         3f:50:71:89:d1:19:42:ff:1c:7f:d2:48:5b:66:96:f3:75:c9:
         51:d3:39:f9:ae:9e:ed:7f:4b:0c:20:e3:60:da:92:33:ab:7e:
         1e:0e:f5:d3:83:36:87:97:e9:5b:7d:b8:30:34:91:8e:a1:1c:
         5c:de:62:bc:6a:df:51:4e:af:aa:ac:74:41:3c:1b:1f:ed:34:
         58:95:2b:91:b6:df:48:b1:a1:86:78:3f:45:c4:06:0d:f6:31:
         2f:b0:0f:4f:50:ae:db:c4:0d:1d:59:1b:c7:29:20:72:fc:e4:
         38:f0:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:00:09 2024 by rpki-client on console-ams.rpki-client.org