Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          rwG9ObAYdAGRRGfupQM3BvGVDOBn9uPJo6a62xCqrpI=
Subject key identifier:   C1:54:38:3B:64:ED:1F:4F:CB:D8:34:75:37:56:F2:05:27:25:93:4D
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       018F51375D2835C7CE1C0CC516ED980BFC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          10ED
Signing time:             Tue 07 May 2024 04:02:13 +0000
Manifest this update:     Tue 07 May 2024 04:02:13 +0000
Manifest next update:     Wed 08 May 2024 04:02:13 +0000
Files and hashes:         1: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: yTOk1yuyCmCR+w2twUAyYfVlAuaBmW1oH0xYquHqKXI=)
                          2: FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa (hash: gF4D1ulcjV1DkZUPHBEpr1TlhF34x1rjAXBanlr4vX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:5d:28:35:c7:ce:1c:0c:c5:16:ed:98:0b:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: May  7 04:02:13 2024 GMT
            Not After : May  8 04:02:13 2024 GMT
        Subject: CN=c154383b64ed1f4fcbd834753756f2052725934d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:a6:32:ca:fd:61:7f:22:4a:f2:8f:33:37:
                    d0:87:8e:ee:53:7a:42:1b:3a:40:e1:4b:48:21:8a:
                    2a:3b:27:67:b5:1b:ff:b4:88:6e:c9:db:46:bb:de:
                    ef:87:62:75:b4:4d:fd:82:59:5f:94:b5:89:f7:49:
                    fa:9b:eb:c4:72:3b:2f:3f:33:50:df:86:9f:9b:a7:
                    2f:f9:a2:26:f7:0d:29:54:19:97:04:c0:d8:9d:a2:
                    55:e9:52:5b:4e:68:40:5e:1b:3e:38:80:23:be:2d:
                    51:98:4b:b0:ab:e6:04:0a:14:27:bb:23:ce:b6:e2:
                    7a:a5:4d:d6:3d:b5:b0:ed:af:57:d2:d5:e2:d1:8a:
                    b7:83:34:4e:8e:c4:b2:a1:30:70:89:6b:26:0d:8c:
                    3a:33:0b:ae:d1:01:25:37:34:92:7f:8d:1a:1d:00:
                    89:d5:34:c8:e9:53:9d:2c:8c:43:81:28:1c:8e:30:
                    83:c8:78:ee:6e:19:ed:b0:9d:1f:6b:93:03:7e:5b:
                    2e:91:bc:ba:e0:79:00:fc:b3:34:66:04:dd:63:73:
                    92:86:77:54:73:68:0a:e1:f4:8e:3d:49:60:47:4f:
                    04:53:07:db:61:b5:cc:70:05:1c:3d:0e:f2:9c:d3:
                    1d:37:01:c1:54:11:73:69:5d:ab:b1:11:89:15:c7:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:38:3B:64:ED:1F:4F:CB:D8:34:75:37:56:F2:05:27:25:93:4D
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:15:1d:68:90:d8:cc:e0:fc:8f:18:94:1f:e6:28:c3:5d:4a:
         13:67:87:7e:e4:74:fb:54:f3:13:10:fb:37:21:2c:d5:69:48:
         e4:58:51:4e:ec:2a:a7:55:8e:05:1d:1a:02:e0:1a:5c:bc:29:
         57:22:c7:5c:f6:d7:e4:8e:33:56:6d:e6:66:4d:27:49:23:2c:
         eb:06:af:27:22:d5:61:8e:7b:c1:a0:f1:49:b9:a2:94:ff:ad:
         fb:cd:58:dc:1c:e7:f9:7c:9d:03:12:6e:56:85:2a:7b:a0:e9:
         bd:b9:6d:6e:3a:0f:02:46:1e:dd:02:14:82:ac:f2:62:eb:df:
         ea:ea:df:d7:63:cf:12:3d:8d:30:a7:1e:ec:c5:c5:b5:34:ac:
         a0:80:b7:82:c4:8b:37:a4:7d:6c:e7:23:18:63:98:6f:29:b1:
         3d:9f:03:dc:f7:52:20:55:f4:f8:7c:4b:7f:1c:92:56:90:da:
         28:1b:01:57:d3:bd:fb:0e:d5:d5:87:60:97:77:ea:62:ed:a8:
         0d:33:f1:ab:81:c4:9d:61:08:46:6a:2f:26:b2:3a:a0:57:cf:
         a1:2e:a4:ac:72:2c:1f:df:7f:4e:77:29:94:c1:ff:58:bd:a8:
         15:8b:81:1e:5a:b5:96:7d:e2:35:d7:f2:69:66:c2:3d:10:a6:
         de:0e:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:16:41 2024 by rpki-client on console-ams.rpki-client.org