Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          1vxj5eTl9bcfYtHGcpPXZjfoonzqHSFw+pfCjKRaSKU=
Subject key identifier:   68:60:5C:72:AA:4A:51:73:84:62:F4:E4:EF:26:8A:05:F5:06:EE:1B
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       018F8749D72AAA66116CE850F1073DA46A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          02A7
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: wDMyY8WgxLlpkQYy1uQXVYhewo15oeHTpoVYh6vdKn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d7:2a:aa:66:11:6c:e8:50:f1:07:3d:a4:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=68605c72aa4a51738462f4e4ef268a05f506ee1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:54:f2:de:49:bb:51:ac:9c:9b:b8:13:02:
                    fc:9d:c7:44:dd:50:3f:18:f3:9e:8e:5c:03:79:fa:
                    a2:60:ab:91:1e:9b:56:72:20:6a:77:d7:f2:17:b2:
                    e2:cd:b7:59:63:c9:8a:74:78:0b:cb:7b:1d:00:27:
                    d3:96:7e:ae:0c:13:7c:10:fc:28:a0:30:2e:2c:4b:
                    3f:bd:1d:6d:a8:8b:82:45:88:1d:53:f5:5f:06:7e:
                    4b:34:12:6a:25:44:ae:97:0c:0a:21:26:f7:50:ad:
                    d7:78:c0:23:57:48:4b:80:87:9f:94:83:86:e7:41:
                    c9:32:5a:12:52:eb:fc:da:b0:35:47:0c:04:bc:59:
                    e1:dd:af:71:ab:74:40:a1:57:87:90:25:7d:0e:6e:
                    09:81:84:f5:50:48:52:e9:c6:aa:89:36:e2:bb:df:
                    4b:ac:d7:f4:e6:e8:9a:45:ad:ab:11:6c:b0:27:82:
                    b6:94:58:dc:58:a7:6c:2e:1d:a4:71:96:ac:5a:f3:
                    57:7a:cf:8f:0f:e0:1a:fe:0f:8b:96:7a:61:2c:2d:
                    4f:d6:74:83:ec:5e:c0:85:2b:6e:f0:ae:0c:bd:9d:
                    9b:34:d1:84:43:fa:ce:3c:2b:5e:7a:45:a0:88:24:
                    13:ff:3b:1d:69:93:6e:3d:a2:6e:c9:91:37:3f:dc:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:5C:72:AA:4A:51:73:84:62:F4:E4:EF:26:8A:05:F5:06:EE:1B
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:2a:2a:83:cb:02:27:f7:1f:55:78:45:6d:98:ec:08:e4:
         00:54:e9:46:cb:ce:bd:99:75:65:fb:a7:b2:6a:64:34:8d:36:
         a7:66:04:88:30:73:0e:91:90:a3:2d:0e:10:cb:91:4f:d1:f9:
         a4:80:f0:a8:0d:0c:0b:2a:c6:ea:93:80:3d:18:28:e8:fc:f3:
         20:df:cd:ff:f5:82:00:c1:ad:53:45:ca:6d:bd:56:f3:54:55:
         f9:71:d3:70:e8:0e:37:4f:21:3c:1e:64:5b:62:eb:12:d2:de:
         da:06:f3:5e:cd:4b:6e:99:ee:6d:20:ff:7b:47:5f:b5:ed:d3:
         69:c2:52:98:b5:85:58:65:f2:f4:76:a8:81:90:59:a0:d9:56:
         0f:fd:dc:71:c0:5e:e8:70:24:20:08:a9:ee:bd:61:71:8f:a8:
         2b:75:6c:96:58:46:0d:77:0c:58:f4:17:ee:e8:76:ab:91:83:
         b5:e8:5f:c5:90:21:0f:88:2c:23:38:17:d1:97:02:f2:3d:04:
         95:4c:4c:72:c4:4e:50:88:40:95:05:be:05:00:b3:7e:81:8d:
         f2:b6:4a:ec:9e:b4:45:ad:87:19:25:c1:08:1e:ed:31:5a:08:
         14:3d:b8:0f:83:b1:4a:98:ae:90:b7:fa:1c:6e:1f:31:98:9a:
         d8:0a:e0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdcqqmYRbOhQ8Qc9pGpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjMxMWY4MGE3YTc2ZTlhZTAzYjhjMTNkODJkODNlOWMw
ZjgzMjIwHhcNMjQwNTE3MTYwMTU0WhcNMjQwNTE4MTYwMTU0WjAzMTEwLwYDVQQD
Eyg2ODYwNWM3MmFhNGE1MTczODQ2MmY0ZTRlZjI2OGEwNWY1MDZlZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oZU8t5Ju1GsnJu4EwL8ncdE3VA/
GPOejlwDefqiYKuRHptWciBqd9fyF7LizbdZY8mKdHgLy3sdACfTln6uDBN8EPwo
oDAuLEs/vR1tqIuCRYgdU/VfBn5LNBJqJUSulwwKISb3UK3XeMAjV0hLgIeflIOG
50HJMloSUuv82rA1RwwEvFnh3a9xq3RAoVeHkCV9Dm4JgYT1UEhS6caqiTbiu99L
rNf05uiaRa2rEWywJ4K2lFjcWKdsLh2kcZasWvNXes+PD+Aa/g+LlnphLC1P1nSD
7F7AhStu8K4MvZ2bNNGEQ/rOPCteekWgiCQT/zsdaZNuPaJuyZE3P9yhEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhgXHKqSlFzhGL05O8migX1Bu4bMB8GA1UdIwQY
MBaAFAEjEfgKenbprgO4wT2C2D6cD4MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMzk2ZWUtMGFlYS00N2YzLWI5ZmUt
NWI5YmE5MWRlMzNkLzEvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMzk2ZWUtMGFlYS00N2YzLWI5ZmUtNWI5YmE5MWRlMzNk
LzEvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8AqKoPL
Aif3H1V4RW2Y7AjkAFTpRsvOvZl1ZfunsmpkNI02p2YEiDBzDpGQoy0OEMuRT9H5
pIDwqA0MCyrG6pOAPRgo6PzzIN/N//WCAMGtU0XKbb1W81RV+XHTcOgON08hPB5k
W2LrEtLe2gbzXs1LbpnubSD/e0dfte3TacJSmLWFWGXy9HaogZBZoNlWD/3cccBe
6HAkIAip7r1hcY+oK3VsllhGDXcMWPQX7uh2q5GDtehfxZAhD4gsIzgX0ZcC8j0E
lUxMcsROUIhAlQW+BQCzfoGN8rZK7J60Ra2HGSXBCB7tMVoIFD24D4OxSpiukLf6
HG4fMZia2ArgJw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:11:54 2024 by rpki-client on console-ams.rpki-client.org