Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
File:                     AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json)
Hash identifier:          bbNyvvb5C9jfjXo/eV1sAhxymXFGmjmdGcoTWbB/ZPU=
Subject key identifier:   20:44:36:2E:85:C2:52:71:A6:D1:1C:CE:8C:F6:5C:91:38:E4:5D:2F
Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
Certificate issuer:       /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Certificate serial:       018F44FBCB61E9E2B730DA9A3CE9A1073C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
Manifest number:          10B6
Signing time:             Sat 04 May 2024 19:01:43 +0000
Manifest this update:     Sat 04 May 2024 19:01:43 +0000
Manifest next update:     Sun 05 May 2024 19:01:43 +0000
Files and hashes:         1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: WWxYm5tP1BidDiGdRMLgYf+UslI2XsUW0EfjfQCM1wc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:cb:61:e9:e2:b7:30:da:9a:3c:e9:a1:07:3c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
        Validity
            Not Before: May  4 19:01:43 2024 GMT
            Not After : May  5 19:01:43 2024 GMT
        Subject: CN=2044362e85c25271a6d11cce8cf65c9138e45d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:8a:8f:40:0a:6e:d2:e4:4a:9a:7a:01:e3:
                    87:1f:e1:0e:67:0c:23:da:ab:b5:68:4e:ee:05:9b:
                    14:72:df:c4:64:0f:cb:33:e1:dc:39:08:e5:07:bf:
                    0d:13:64:1e:38:fe:8b:42:6b:39:b3:68:05:98:72:
                    3b:23:55:cf:77:ed:ef:48:2b:ba:81:26:2a:88:2e:
                    89:dd:e9:af:f9:13:bb:fa:71:ac:50:b4:36:ef:8a:
                    8e:3f:c2:e1:62:81:5c:c2:a9:a1:a9:74:d5:b5:e6:
                    c8:83:b3:55:b9:3e:45:c6:3b:18:45:84:7e:92:21:
                    b4:33:64:c1:27:e6:23:f0:8c:b0:27:3a:fe:1b:ac:
                    ff:f8:8e:e1:61:99:20:6e:8a:34:24:df:ee:b3:e7:
                    9c:36:ab:6a:ca:c8:75:07:f1:e2:8e:13:72:35:f7:
                    dc:7d:48:55:15:58:04:b9:9c:ea:44:50:e3:99:e7:
                    5e:58:a3:e8:30:94:5e:2c:b8:37:b1:4e:60:b0:c4:
                    0f:5e:c4:30:6c:33:c7:51:95:49:7a:3e:b2:cc:f9:
                    18:5c:72:c6:e0:8d:32:9a:dd:3a:2f:35:79:4d:3f:
                    2a:0d:e2:33:2b:70:1c:ba:fc:04:24:43:1e:c6:4f:
                    ed:a3:6d:71:80:32:3f:6f:1a:43:4b:16:7d:e8:69:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:36:2E:85:C2:52:71:A6:D1:1C:CE:8C:F6:5C:91:38:E4:5D:2F
            X509v3 Authority Key Identifier:
                keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:59:72:56:b8:d8:3f:3b:e0:1a:91:ee:4d:76:9d:bf:c3:
         be:de:e0:5f:19:cd:9a:7a:36:90:4d:57:36:2c:d5:01:0a:e3:
         3e:87:2a:1b:4e:23:d7:fe:e9:c3:88:e3:c0:ca:01:44:08:5d:
         ca:c2:16:c5:59:ff:bc:10:db:ae:3d:f3:98:9f:a7:33:3e:f8:
         47:fd:06:ba:58:dd:3d:90:0d:53:52:b9:d8:bd:2a:36:c9:0e:
         ba:03:35:8b:7b:e0:94:b4:91:0b:86:9a:ab:f3:fe:f6:10:0e:
         fc:5f:72:45:36:fe:d0:bd:61:43:3e:ec:c7:73:a5:04:29:24:
         0d:02:a3:b6:ba:e3:d4:e0:70:45:60:78:75:6c:02:40:da:ed:
         3e:9c:e2:ec:f3:89:09:64:cd:3d:c6:b2:52:84:52:c4:62:a1:
         f5:5d:54:65:fd:be:25:13:2a:2d:a2:cb:ac:e7:ea:cf:1b:24:
         6a:28:3c:ee:ee:69:fc:48:94:db:b0:57:9c:2d:f8:2c:56:ce:
         36:75:3e:6d:6d:6b:f4:8e:43:9b:bf:19:da:f8:1b:25:df:f9:
         0c:27:f5:66:18:f5:01:fa:82:75:cc:dc:04:5c:d6:55:a0:d1:
         9e:ed:9f:ca:e6:c4:ab:03:4e:dc:5d:99:fb:5c:c4:51:cc:ff:
         2f:f3:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:56:04 2024 by rpki-client on console-ams.rpki-client.org