Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File:                     APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier:          K3RMPKKwXCgzLamdyruwydqIyQF3a8TP7YQ9CNYT0VY=
Subject key identifier:   A8:78:05:AA:15:0C:8F:6A:F5:B6:FC:1D:F0:A0:A4:05:BA:B8:DE:6F
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer:       /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial:       018F45A03A3F612EE4EDFC98ECFD352B2958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number:          1082
Signing time:             Sat 04 May 2024 22:01:19 +0000
Manifest this update:     Sat 04 May 2024 22:01:19 +0000
Manifest next update:     Sun 05 May 2024 22:01:19 +0000
Files and hashes:         1: 7oU8RiP7VXMRKfyoy5aBBxA_tbA.roa (hash: UQoiD6QoixOp7OH3fLrBG3Hl4rdymiOEU6J0NvtWS/0=)
                          2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: zza5I9Lv4hsDo/9blQiBZoGZu2B6cddVIoJ8TdSKT+c=)
                          3: IbOY8Ni_ZbRII-pOmchjAxAe1eg.roa (hash: 2Fu+OC2U9xtHpUmIcqmaK2ruSG2iseSpWMKJU3QXqIE=)
                          4: OVVurWILl50Wy3vmdlTcF5dWlBs.roa (hash: WH46Gjn1b5TE0+ygCKYQqS/Gls2Z1w/Tvg7QJf/4DGI=)
                          5: zSKDIVAuzqMwusUv9fHehFUJvE8.roa (hash: gklnc5aYRpneKApx1UXwNoQ2Js868O+tTqxIcceL6q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:3a:3f:61:2e:e4:ed:fc:98:ec:fd:35:2b:29:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
        Validity
            Not Before: May  4 22:01:19 2024 GMT
            Not After : May  5 22:01:19 2024 GMT
        Subject: CN=a87805aa150c8f6af5b6fc1df0a0a405bab8de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:05:80:7f:58:1f:15:a3:e1:19:99:ae:4e:
                    ca:d2:09:8f:04:09:24:de:f9:91:f7:2f:5c:1e:6a:
                    08:65:9c:fc:52:c7:33:c6:11:86:14:19:48:82:46:
                    d6:0f:65:b9:67:8f:1f:f1:36:d6:09:ad:ff:09:41:
                    9a:75:b5:e8:31:b9:21:ab:99:3d:04:db:36:37:a0:
                    29:22:80:bf:2b:c4:0c:a0:0f:6b:8f:ae:bc:05:6f:
                    96:1c:f6:0e:a2:24:a0:ca:cd:7a:70:fe:bb:be:83:
                    02:36:f6:94:35:a4:87:59:62:72:59:d4:79:ff:1b:
                    bb:69:1f:78:23:fd:51:92:4f:49:69:e1:4b:27:b7:
                    30:dc:a8:14:e3:b6:ed:a5:e9:02:d4:54:c4:cf:6c:
                    dd:69:37:b3:bf:46:c5:72:c0:e0:ef:d0:85:0e:f1:
                    5f:d5:e3:b6:df:41:12:78:be:08:8a:4a:77:9d:1b:
                    3d:fc:e1:f1:4b:cc:de:14:e5:17:c5:59:17:ea:ac:
                    0d:07:99:25:d0:b7:b3:e5:ab:00:3d:58:7c:f3:7a:
                    18:fc:ae:f2:49:1a:5f:f0:83:4e:8d:b1:c1:88:6b:
                    1a:f3:e0:58:a1:14:a9:9f:df:43:bd:7b:ce:ab:fc:
                    cf:79:1f:a8:5a:f9:6d:52:5b:28:d8:f1:af:d5:02:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:78:05:AA:15:0C:8F:6A:F5:B6:FC:1D:F0:A0:A4:05:BA:B8:DE:6F
            X509v3 Authority Key Identifier:
                keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:03:9b:95:c9:73:17:2d:54:e4:8f:eb:7e:67:ba:b1:51:
         d8:0f:b0:55:21:85:df:23:c9:94:4b:2d:c0:a4:a5:6f:59:2c:
         63:a5:2a:1d:68:1e:10:5b:5a:94:06:eb:9e:bf:08:40:6e:38:
         8e:d8:f3:f9:5a:2c:3d:95:01:d5:f9:d8:57:2f:96:a3:52:f9:
         e5:fd:b9:36:90:6e:0d:31:31:c3:96:c2:88:d6:63:77:12:18:
         a9:86:7f:46:ef:37:2d:31:36:94:a5:10:80:b6:4d:11:71:64:
         e9:c0:43:1c:30:b7:e7:48:26:0c:4b:87:e3:73:ff:48:0a:b1:
         c3:22:4c:87:0a:8b:7f:58:73:23:de:df:bb:8d:ce:bd:c2:85:
         bd:9e:cf:8d:26:98:7e:c6:e5:1b:16:f8:15:05:88:3d:cf:3a:
         43:07:44:a8:af:30:3d:84:59:ef:de:19:0a:89:6c:72:bf:d3:
         e1:ff:28:bf:64:2e:69:15:0f:e0:31:26:11:3e:1b:98:9f:f9:
         9d:b7:f2:f9:0f:79:c9:9f:cd:74:da:fb:f8:91:f3:a4:9e:af:
         3a:c5:4f:85:36:91:95:48:52:d2:5a:da:6a:64:6c:21:2d:02:
         ce:fb:f7:af:fc:3e:56:6e:d7:52:bc:67:e0:7e:7f:4a:6b:e8:
         2a:5b:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:43:45 2024 by rpki-client on console-ams.rpki-client.org