Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File:                     AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier:          kKdfX+0U/BcT5/MWFjWdSknVdw1Ku/CavOeNs4EZVNc=
Subject key identifier:   7C:5B:0C:AD:6E:C2:F1:8F:3A:22:B0:07:6F:5A:48:41:9A:12:70:94
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer:       /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial:       018F497E8DBA756377C8ED8B40F43F8C861E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number:          0A19
Signing time:             Sun 05 May 2024 16:03:01 +0000
Manifest this update:     Sun 05 May 2024 16:03:01 +0000
Manifest next update:     Mon 06 May 2024 16:03:01 +0000
Files and hashes:         1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: qmcbK/OURfNdbfcsaCew/2I9GUZtd6e51sKywqYR+R0=)
                          2: FT3zu-yitliCkfNclwUHBU7N7dU.roa (hash: VGTJcHwefh8USFopvGpMxGN2ILYWaNnCLTvtXsv+4p8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:8d:ba:75:63:77:c8:ed:8b:40:f4:3f:8c:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
        Validity
            Not Before: May  5 16:03:01 2024 GMT
            Not After : May  6 16:03:01 2024 GMT
        Subject: CN=7c5b0cad6ec2f18f3a22b0076f5a48419a127094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:c6:5c:d9:f5:e7:97:f9:60:a0:e8:70:fa:
                    26:06:36:bc:f7:dd:1e:75:d9:24:77:d9:60:75:2a:
                    2d:ac:6d:80:e4:0c:fa:a4:00:93:45:72:d1:a7:d7:
                    d3:43:20:f0:e7:b5:dc:1a:ac:3c:f2:24:77:29:f4:
                    bc:05:0f:d9:22:4b:a2:b8:4b:f8:19:9c:9c:4e:df:
                    b1:57:4b:07:84:f0:bb:cf:6e:a9:af:f0:98:c5:5c:
                    85:76:65:e6:00:da:87:af:34:3b:c0:6c:34:10:34:
                    33:87:8a:00:2f:ab:66:04:fd:95:98:01:70:46:b1:
                    b2:c7:cd:3c:2a:b6:ba:48:0e:55:f2:36:79:ca:e8:
                    81:86:23:ac:f2:a1:aa:68:76:fc:cc:09:9a:80:0a:
                    17:e3:c9:8b:3b:e8:0d:69:c9:9b:16:ef:b9:ac:78:
                    26:9a:e9:5f:6e:d3:a4:94:2f:77:f5:13:9b:a7:db:
                    f6:9f:bb:52:15:e9:ae:9e:39:bd:8b:ff:bd:a0:38:
                    b2:b1:55:c8:d2:be:e2:b9:d3:c9:ec:80:59:b8:c3:
                    44:2d:c0:b6:02:13:17:65:d8:e4:ed:bd:d7:e3:93:
                    8e:20:b8:0f:19:87:e7:08:0f:67:04:fb:89:ae:cd:
                    fc:f8:48:60:0b:a2:c0:6a:a9:22:3f:fc:20:07:74:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5B:0C:AD:6E:C2:F1:8F:3A:22:B0:07:6F:5A:48:41:9A:12:70:94
            X509v3 Authority Key Identifier:
                keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:71:f7:54:83:c2:90:57:2a:7d:b4:0c:94:8d:91:82:cd:
         11:98:27:66:0c:56:87:30:b4:30:30:76:a4:45:53:5d:3f:4b:
         68:fb:31:2c:0e:79:27:4e:bc:80:08:3f:cb:90:0c:ee:5d:44:
         4b:d2:89:55:c5:c0:f5:e0:9b:01:30:0b:66:79:63:dd:a8:46:
         e9:23:63:8f:ed:34:c4:59:26:c2:0a:f4:67:da:d7:52:dd:41:
         d7:d6:8b:12:96:f0:cb:4c:a9:6f:d9:63:15:3e:ff:c6:9d:c4:
         cf:9d:36:58:9a:cb:aa:1d:cb:5b:bf:d8:b2:55:32:b5:2d:b5:
         7d:b8:c5:dd:8f:ad:4d:4c:a6:2b:4b:67:c3:bd:4a:58:6e:ac:
         19:90:f9:f0:35:44:33:a8:53:27:2c:f2:e3:63:49:32:13:13:
         25:9a:b2:47:07:c2:20:91:1b:a9:13:85:b5:0e:9f:1e:85:9b:
         e4:6d:bc:24:49:cc:d9:dd:ba:3a:f5:a4:b1:32:e6:5c:cd:c0:
         91:0e:22:ba:ac:9e:5a:e0:03:bc:8f:f0:39:67:68:47:67:e9:
         99:be:4f:9b:9d:35:cb:1a:77:4b:c2:6d:da:fe:e3:df:77:dc:
         ca:8a:3e:ce:8f:f4:98:55:cc:56:fd:98:ca:6c:69:ee:34:05:
         a5:ab:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:37:32 2024 by rpki-client on console-ams.rpki-client.org