Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File:                     AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier:          K/3hZWEi07bz3R8TbayvV9+TC+rYR7FQAuQvldQlIHU=
Subject key identifier:   8C:37:EE:8D:78:02:46:29:FA:5B:71:79:B9:8B:AB:C0:33:D8:76:5C
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer:       /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial:       018F1F6DD45DFD41882939148408677E3E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number:          0E2B
Signing time:             Sat 27 Apr 2024 12:00:42 +0000
Manifest this update:     Sat 27 Apr 2024 12:00:42 +0000
Manifest next update:     Sun 28 Apr 2024 12:00:42 +0000
Files and hashes:         1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: gXZfrbrIl0Xg0v2BQ/p+KaS8G3R6n60PPzL1kuGpC+g=)
                          2: jO3myQDaRJcweoQRPM8SkcQgSAg.roa (hash: bcLvLsrPNE5g3esL4TGau/shv1edRuCc9IpRL22EjXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:6d:d4:5d:fd:41:88:29:39:14:84:08:67:7e:3e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
        Validity
            Not Before: Apr 27 12:00:42 2024 GMT
            Not After : Apr 28 12:00:42 2024 GMT
        Subject: CN=8c37ee8d78024629fa5b7179b98babc033d8765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:a4:3e:e8:2f:49:45:8f:3d:f7:9d:81:0c:
                    3a:23:a9:7b:c4:61:f5:74:89:7b:cf:0b:e7:38:f0:
                    af:92:af:38:4a:2c:9b:a5:a6:77:bc:39:57:1e:8e:
                    e4:71:26:c7:75:d7:c8:d3:d7:41:2c:49:7b:31:29:
                    33:c5:4f:66:e2:a8:b6:5e:e7:c9:49:d3:3e:14:24:
                    28:48:62:4e:12:fc:28:43:e9:bd:16:51:04:17:60:
                    ac:59:98:2b:0d:76:27:bf:d1:4d:31:5a:65:33:17:
                    98:ae:0d:65:f3:3d:5a:8d:e1:ac:ad:3e:4e:cc:cb:
                    fc:64:51:97:4f:b7:81:9b:a5:68:19:3e:30:65:60:
                    a9:bf:21:d1:3b:d9:d9:f2:7d:2a:a2:d9:ef:b0:fc:
                    2c:d3:fb:02:f2:d4:36:8a:c9:d0:a8:92:42:a9:41:
                    e2:a4:a9:22:3a:ae:ad:b5:20:cd:be:d4:f8:03:7a:
                    76:99:4c:38:a0:a3:d1:44:63:4f:0e:bf:98:b1:5d:
                    31:a8:78:90:5c:df:8e:c7:30:8c:50:45:30:62:5d:
                    39:95:96:6e:b0:b0:9a:7a:a6:9d:99:f3:71:ad:24:
                    6a:92:9d:8f:ba:27:cb:84:ef:3a:38:c0:17:91:d2:
                    7c:f5:65:a5:fc:46:26:5a:d4:76:d3:2f:24:da:f5:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:37:EE:8D:78:02:46:29:FA:5B:71:79:B9:8B:AB:C0:33:D8:76:5C
            X509v3 Authority Key Identifier:
                keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:32:27:eb:01:e0:a6:25:b0:bd:cf:22:47:3c:ce:3e:29:b6:
         e2:c2:ba:ed:1e:d7:ed:9e:d1:34:08:d7:08:a2:3b:59:96:5f:
         f3:68:96:e7:b7:2a:39:4a:22:7a:32:58:0b:b5:9c:f1:dd:e2:
         05:9d:81:f9:d6:4f:26:d3:c0:36:ab:61:f6:66:02:0e:97:b2:
         c5:26:2e:a5:1d:4b:87:46:a6:5f:13:68:0b:76:4c:63:51:61:
         d8:96:00:c7:b9:78:7f:24:cf:39:30:bb:2c:44:6b:61:70:36:
         7a:43:02:06:22:66:66:5b:d3:df:55:6e:50:ab:c6:9c:4a:38:
         bb:47:34:4f:12:4e:79:9f:aa:d9:ee:2d:e7:dc:5e:c8:78:1b:
         12:76:d9:bd:59:ce:ef:7b:20:94:69:83:2b:7d:df:d0:b7:2e:
         f1:88:b0:50:3a:20:6d:24:3b:10:ff:12:f2:0d:2c:ff:fe:36:
         0e:55:8b:87:38:53:10:c2:6c:9d:72:a0:3b:27:14:db:73:f7:
         9d:4d:b3:9c:9c:25:31:c6:62:e3:f8:c2:6c:90:c7:d7:17:52:
         bb:e8:d8:b7:73:42:6b:07:4e:f2:da:f6:8a:ec:3f:96:ba:e0:
         aa:01:9b:0b:d9:33:3c:46:14:82:3c:8b:00:8d:74:33:7c:c4:
         c5:31:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:00:49 2024 by rpki-client on console-ams.rpki-client.org