Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File:                     aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier:          vZEHGjGGIdmlc8tkzgKi+AgjMKCCBMoW3dXYzegg5Z8=
Subject key identifier:   B6:9F:BD:91:A2:E2:81:DC:87:15:92:46:34:26:08:51:6B:37:BE:25
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer:       /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial:       018F836D048AA0DFDE7A88F17552EBF89098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number:          091D
Signing time:             Thu 16 May 2024 22:01:50 +0000
Manifest this update:     Thu 16 May 2024 22:01:50 +0000
Manifest next update:     Fri 17 May 2024 22:01:50 +0000
Files and hashes:         1: TdpY5eTyaPIFCk0tzu-NsNSBy-0.roa (hash: v0pj11yYB9E0aNT3VmgqpIrcc143yTmmsaBYpPk/8wU=)
                          2: WY1yRWypkNSlEVzPYxoV5d6dIRU.roa (hash: fbmuonLXg3f7eFxeHfGcFdFa1T7fXkhsMLsTPezIYYE=)
                          3: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: UyjLV8z96MjBZUgHwn3/nJvIk1Lw7wNrKVE31TryxiY=)
                          4: vVX4VyRLpmDdb9ca6LoNLOMmDrQ.roa (hash: hAEx8Q5sTnges4rxRuMC4MNROP70Spbqnums+ajZVKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:04:8a:a0:df:de:7a:88:f1:75:52:eb:f8:90:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
        Validity
            Not Before: May 16 22:01:50 2024 GMT
            Not After : May 17 22:01:50 2024 GMT
        Subject: CN=b69fbd91a2e281dc87159246342608516b37be25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:40:2e:15:59:60:e2:54:03:a6:be:4e:af:
                    63:87:5c:25:c4:bd:07:cb:11:61:8e:60:00:7e:12:
                    d1:0d:73:98:66:25:ba:ec:49:6f:cf:b5:d7:c8:c3:
                    06:27:a1:9b:4c:96:4c:c9:0d:18:65:12:69:d6:49:
                    43:02:e8:e8:f2:3d:98:9c:fa:b0:93:e8:26:0e:d4:
                    48:b9:45:8c:03:44:2a:36:c2:d6:69:3e:60:7f:8d:
                    f8:cf:ca:93:c6:5b:1c:6f:ce:c9:3c:80:5b:ff:76:
                    d1:e0:b0:6e:5b:86:70:f5:2a:42:53:72:1a:ef:98:
                    8c:2c:4e:1e:4a:0d:ec:49:1b:c7:e7:a2:99:0a:e6:
                    97:9f:3c:9c:26:2e:f5:a2:3d:88:ea:c0:a5:73:77:
                    75:4f:0d:50:36:5b:cb:35:be:c9:cf:3c:8c:33:93:
                    ef:86:95:54:4b:d9:69:5d:30:f3:99:ea:de:47:63:
                    49:69:b4:8b:32:25:d3:d1:48:66:51:0d:21:b1:82:
                    90:42:7e:ee:89:89:8b:ad:71:66:a1:e3:66:10:64:
                    0c:75:40:c8:0f:74:ae:64:92:d7:04:30:6d:25:68:
                    d5:d7:38:3e:7e:81:54:d1:56:11:87:ca:f7:ca:ba:
                    4f:c2:03:48:e9:af:65:36:6e:43:bc:ce:72:d8:60:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:BD:91:A2:E2:81:DC:87:15:92:46:34:26:08:51:6B:37:BE:25
            X509v3 Authority Key Identifier:
                keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:7d:66:61:55:d4:47:1f:a0:4f:30:03:e7:38:b2:30:cb:
         4d:f7:96:5b:4f:ea:54:55:28:65:02:98:6a:15:29:25:2b:27:
         2e:c9:54:05:0a:15:e4:59:3b:13:72:be:75:2d:d5:88:d1:e0:
         d1:c6:44:61:4c:6e:4c:5c:d1:37:7b:84:ea:97:d8:d1:9e:44:
         51:d8:c5:bc:5c:6c:d2:54:b0:cd:bf:69:6f:e3:5d:4e:88:cf:
         96:d0:b2:b7:6e:1f:e3:52:12:90:37:75:43:e1:cd:23:ce:83:
         70:7d:96:88:0d:23:39:5d:5f:e8:0d:f9:25:92:58:61:51:96:
         be:99:79:47:89:15:31:db:30:7d:9a:3e:64:9a:ee:c5:28:72:
         2d:be:8e:b1:bc:51:d3:10:34:d4:ce:74:bc:9d:8c:9b:48:35:
         00:46:5e:ad:96:2c:56:f5:f2:dd:f2:86:f7:98:97:6e:fb:94:
         16:78:17:a2:22:97:54:d5:a8:aa:e1:c0:ec:c6:f2:ff:d0:03:
         9a:28:d4:5d:94:ec:ae:0f:8f:e9:b3:d1:a6:a5:31:19:86:3b:
         a2:e7:ea:38:d4:cb:b9:79:68:b7:78:aa:06:97:07:7f:55:30:
         25:21:db:05:5e:a8:0f:a2:3d:77:56:03:a1:02:c2:98:9e:fd:
         8e:ea:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:51:58 2024 by rpki-client on console-ams.rpki-client.org