Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft
File:                     ABULau1t1D10jXcDPP0BhGE27xQ.mft (raw, json)
Hash identifier:          P2H2iiHDxZ8TdzGaQKeOZFECoYBa2jB+1E0lsXIb8/s=
Subject key identifier:   A8:B6:6E:B1:D8:0F:22:03:E8:F1:1D:CD:A6:C5:0B:E3:3D:96:27:8A
Authority key identifier: 00:15:0B:6A:ED:6D:D4:3D:74:8D:77:03:3C:FD:01:84:61:36:EF:14
Certificate issuer:       /CN=00150b6aed6dd43d748d77033cfd01846136ef14
Certificate serial:       018F45A18620D8C633D779096BE0ADDC04E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABULau1t1D10jXcDPP0BhGE27xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft
Manifest number:          04A4
Signing time:             Sat 04 May 2024 22:02:44 +0000
Manifest this update:     Sat 04 May 2024 22:02:44 +0000
Manifest next update:     Sun 05 May 2024 22:02:44 +0000
Files and hashes:         1: ABULau1t1D10jXcDPP0BhGE27xQ.crl (hash: ZhbsHvGFLVT3adjtdI5/ePvxZXOLx8opJdQkRmoPqp0=)
                          2: px67ewm4v_gygoCoORvB9PQQjuA.roa (hash: HSQ0J3PtYVLRWaJl93p4Ou2lrD/ZuysMuI1fcXfRwOk=)
                          3: ripo2-X5lVnCwPz37hEzktdesuo.roa (hash: Cwe2bMh9gwaSgW3vlLqSdjxTsCB7LUrQjMAloeL9Oh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABULau1t1D10jXcDPP0BhGE27xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:86:20:d8:c6:33:d7:79:09:6b:e0:ad:dc:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00150b6aed6dd43d748d77033cfd01846136ef14
        Validity
            Not Before: May  4 22:02:44 2024 GMT
            Not After : May  5 22:02:44 2024 GMT
        Subject: CN=a8b66eb1d80f2203e8f11dcda6c50be33d96278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:90:3a:62:15:5a:2d:34:b4:81:76:8d:70:
                    41:b0:59:ca:1a:e8:dc:8b:70:72:2e:24:94:db:75:
                    dc:2c:b4:77:f0:e9:9d:de:31:22:ad:e7:6d:ae:c7:
                    ae:00:01:dd:31:48:5a:2d:c2:15:c8:a6:cb:d9:bc:
                    43:6e:61:71:86:c9:50:be:81:11:e4:ba:4e:df:5e:
                    45:23:f2:3b:23:2b:73:17:66:8e:b4:a9:5b:e2:b4:
                    42:53:d8:ad:05:1a:16:f7:15:aa:d1:e2:8e:94:2d:
                    0d:dc:a0:33:56:95:a0:1e:73:d3:e5:e5:f2:e5:2e:
                    83:d7:5f:26:ca:b1:d6:03:53:d7:dd:10:b3:8f:ce:
                    82:c7:9e:8a:20:0a:74:bd:76:eb:89:ed:3a:26:7a:
                    55:b4:2a:a6:00:03:d0:fc:c3:ee:5c:92:7d:9d:d3:
                    c5:42:ed:de:60:7e:8b:44:ac:aa:2e:94:2e:fe:25:
                    57:8a:52:2e:b9:4b:01:7a:9a:8a:a5:cf:e4:6e:e4:
                    2c:54:aa:3d:d9:67:cf:ec:ba:bc:31:b9:c2:10:26:
                    f9:25:2b:76:71:aa:07:3f:e2:9f:7a:3a:13:0c:6a:
                    2a:d4:7e:34:ba:19:e4:e1:af:e4:9c:2d:60:b5:a3:
                    cc:76:e4:d8:2b:4e:71:88:1c:25:fd:f2:45:28:9f:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:6E:B1:D8:0F:22:03:E8:F1:1D:CD:A6:C5:0B:E3:3D:96:27:8A
            X509v3 Authority Key Identifier:
                keyid:00:15:0B:6A:ED:6D:D4:3D:74:8D:77:03:3C:FD:01:84:61:36:EF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABULau1t1D10jXcDPP0BhGE27xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:22:11:0a:08:ae:27:7b:92:0a:ed:48:5f:48:e9:37:b2:
         b0:24:20:ec:e5:5d:2a:06:e6:97:d0:13:f9:f0:73:48:c7:63:
         cd:22:0b:04:4c:3e:69:c2:96:5a:25:09:e3:37:64:42:26:bd:
         7a:97:ab:de:a9:01:6b:a8:44:6f:ac:14:65:93:67:14:09:d1:
         1d:58:73:1b:3e:14:73:f7:bd:e9:c0:02:a1:bc:14:f2:76:04:
         68:5f:9c:82:1f:2d:a5:f3:23:fd:46:51:32:e0:94:84:00:3b:
         b2:03:74:48:8f:ca:56:79:81:15:8c:cd:9b:ba:74:62:da:9d:
         ce:90:2d:7c:1d:fa:06:c3:c4:43:dc:3c:9b:ef:bf:40:db:01:
         da:3e:17:72:12:0b:f0:81:6c:28:17:cc:c0:9f:ca:c7:6d:f1:
         14:fb:78:14:8c:c5:0e:0c:83:24:96:c4:1b:05:a6:b9:2e:51:
         9e:af:ab:92:41:e5:39:f5:cc:83:f2:52:a7:e7:dd:85:bf:30:
         11:ab:b9:38:d0:7a:cd:4d:a8:82:a9:1d:1e:6c:58:c6:f5:21:
         f5:03:9f:0f:3d:b0:45:ea:4e:e4:d2:3e:dc:1e:ce:c6:0e:f4:
         6e:0c:dd:3a:9f:cd:3d:bf:44:46:f1:71:7b:3d:20:f3:ec:42:
         3b:f6:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:24:52 2024 by rpki-client on console-ams.rpki-client.org