Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File:                     AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier:          3Y5yCdRRqPRJ3xCDk2iwDhandZyrLR43VrtUqt7ZUhI=
Subject key identifier:   8D:7E:A4:92:8F:11:8A:0E:37:A0:52:E2:3C:FE:CD:6F:67:E9:44:9B
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer:       /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial:       018F48333C3E7A1FFF6D001B28D0C8DBE20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number:          0730
Signing time:             Sun 05 May 2024 10:01:08 +0000
Manifest this update:     Sun 05 May 2024 10:01:08 +0000
Manifest next update:     Mon 06 May 2024 10:01:08 +0000
Files and hashes:         1: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: 8R4RgGsdjmdfiByCOOg3NNhyXNZqUw2FS84RprgdJmY=)
                          2: dY5YHDURGUHiN-lAbH3teL3Zvnk.roa (hash: UPeZHsHSrqoO0IahxKFNK0L+q5H85m2PNs0xM64op9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:33:3c:3e:7a:1f:ff:6d:00:1b:28:d0:c8:db:e2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
        Validity
            Not Before: May  5 10:01:08 2024 GMT
            Not After : May  6 10:01:08 2024 GMT
        Subject: CN=8d7ea4928f118a0e37a052e23cfecd6f67e9449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:ab:69:55:ed:ae:30:cc:63:a2:b8:36:ea:
                    1b:68:70:af:b2:b2:1e:74:8c:43:90:c4:8f:8c:cd:
                    9d:42:c3:69:e8:09:f2:d4:4d:d3:c9:c9:ac:fb:d4:
                    e2:00:8c:cf:a5:fd:51:b2:b7:a2:c9:60:b4:fa:68:
                    0a:1f:94:e7:c4:80:8c:23:1f:c3:9a:b5:0c:0d:dc:
                    aa:1c:b3:0a:5f:8c:e7:54:d0:a0:fb:c2:e5:72:dd:
                    8b:28:fe:b3:58:07:ca:c2:08:09:3d:2c:22:ba:67:
                    dc:a1:f0:cc:36:1b:07:d3:39:39:ae:4c:96:88:94:
                    33:3d:e2:bf:79:9c:ef:68:12:33:ee:62:6b:5d:4d:
                    63:9a:c4:a7:51:91:37:82:cc:1a:75:e7:13:40:e9:
                    25:d7:30:9d:ba:b6:87:1c:4f:15:e5:a2:38:99:48:
                    77:32:a7:d0:57:bb:b0:e5:83:bb:5d:1b:74:42:b8:
                    e4:8f:b9:7c:b9:e3:76:b3:48:49:8a:ab:00:89:db:
                    25:23:00:27:a9:e7:d0:f5:16:90:89:de:79:de:41:
                    d1:12:04:ec:ea:02:6c:de:1f:a3:4a:fc:6b:66:c0:
                    f3:8b:50:2c:70:af:a9:35:4e:c5:47:d5:07:58:38:
                    2d:e0:2d:81:87:20:82:25:e6:c2:c4:50:de:dc:89:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:A4:92:8F:11:8A:0E:37:A0:52:E2:3C:FE:CD:6F:67:E9:44:9B
            X509v3 Authority Key Identifier:
                keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:ad:53:a7:3b:28:d3:10:2d:02:24:31:98:b6:8d:80:ff:
         10:2b:57:29:d8:36:ef:f4:30:b7:4b:d7:ad:12:a4:c4:05:a6:
         d4:dd:b7:f2:99:4e:c5:6f:af:32:b3:2e:db:4a:5d:c6:e7:ea:
         7e:21:56:50:7d:26:ba:f1:d4:f7:4c:16:78:ec:c4:33:3b:1f:
         a7:43:60:41:c3:40:cd:52:37:e2:ac:2d:e1:7f:98:5c:79:f0:
         c0:bf:a7:e5:2d:0a:78:98:d1:50:64:6f:2e:3d:a2:1b:7f:0d:
         7d:7e:8f:58:51:66:bf:38:5a:92:a9:c9:c7:1f:36:bc:d9:40:
         a5:29:04:e7:d7:51:49:a6:56:08:6b:a7:f7:a2:e3:77:16:1f:
         f8:43:2c:f0:dc:29:bf:81:b2:ac:1f:6e:de:df:a4:96:7c:82:
         10:f9:e3:2f:15:d9:5e:e8:c1:2d:96:1d:78:68:70:25:02:94:
         46:7d:b8:30:52:1c:86:cc:41:41:e3:c5:8d:bb:3a:31:ea:4f:
         e9:d5:57:17:28:79:62:17:36:23:89:50:96:e0:8a:93:e5:6e:
         e2:0a:01:de:01:c2:89:e7:7c:14:38:20:cb:6b:7f:39:e6:29:
         cb:65:b2:a3:76:d5:e8:e0:28:dd:44:17:dd:bf:20:58:d3:81:
         93:a4:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:18:08 2024 by rpki-client on console-fra.rpki-client.org