Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File:                     afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier:          dyT+U0tWsxr1VFrtwrJhXi9fFXGzpme8QPS1NsBB6Hg=
Subject key identifier:   BC:15:BD:E0:27:F1:20:80:F2:3A:0F:C5:FA:A7:CB:5C:27:E4:A5:10
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer:       /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial:       018F87B61D79E3B2413A7877F706C094FEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number:          03AC
Signing time:             Fri 17 May 2024 18:00:10 +0000
Manifest this update:     Fri 17 May 2024 18:00:10 +0000
Manifest next update:     Sat 18 May 2024 18:00:10 +0000
Files and hashes:         1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: RWmZH7U0CQ8lj4hGwnx/n1oRC1xaFA9JLUhfJK1j15k=)
                          2: yy5qsCuo4yiMAJn_Uvt_Y0XRwKU.roa (hash: VoBADLKiJ+ZyOMmnE5ffhReUUmMzjEtpURqfze+14vE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1d:79:e3:b2:41:3a:78:77:f7:06:c0:94:fe:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
        Validity
            Not Before: May 17 18:00:10 2024 GMT
            Not After : May 18 18:00:10 2024 GMT
        Subject: CN=bc15bde027f12080f23a0fc5faa7cb5c27e4a510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:e5:19:e9:ad:5c:ac:96:b1:cc:a6:49:71:
                    5d:50:12:c4:4f:56:8f:6f:da:17:85:03:03:57:a5:
                    40:5c:f0:c7:57:a6:ab:25:16:92:8d:ac:22:a4:c9:
                    2b:a7:29:d1:39:7b:53:2d:2a:f6:87:8e:54:35:ac:
                    e8:02:ff:bc:26:77:80:74:b9:87:73:8c:a8:96:cf:
                    27:24:4e:bd:21:b3:77:72:99:5e:25:bb:e2:4f:96:
                    da:50:e6:9c:bd:86:91:20:b7:a5:a3:fd:be:8d:c8:
                    36:54:df:20:6c:6f:53:39:82:5e:2e:dc:39:1f:88:
                    39:7e:35:bb:72:d6:2e:7f:28:77:db:ad:81:91:d1:
                    c3:1c:ad:b8:7c:e4:1a:c2:44:47:ed:6b:85:33:f2:
                    e9:c6:8e:0d:cf:b9:c5:75:b8:81:35:54:03:d4:f4:
                    d5:1f:c4:ec:8f:96:c6:8b:0c:75:c6:a2:75:98:0d:
                    84:fa:b8:f4:a2:b1:45:99:61:bf:66:02:f0:5b:b9:
                    34:f4:2b:4b:91:21:d0:b7:9a:2d:2b:98:2c:ff:30:
                    aa:2f:b5:11:ef:a5:9c:ae:8f:cf:66:cd:e9:54:78:
                    44:71:61:56:91:31:e1:4d:49:e3:f6:a3:ab:a2:b0:
                    4c:11:55:c6:c4:45:4d:89:ba:7f:cf:c5:16:b8:b5:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:15:BD:E0:27:F1:20:80:F2:3A:0F:C5:FA:A7:CB:5C:27:E4:A5:10
            X509v3 Authority Key Identifier:
                keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:76:68:b3:42:a0:1e:0a:c0:37:49:5a:f2:87:94:7f:26:
         c8:50:eb:9d:16:6a:69:9e:c2:6c:5b:41:fd:3a:b0:ff:fb:80:
         81:63:c0:dc:41:98:a9:40:0e:7e:b6:34:3e:8a:1d:78:a8:20:
         a7:34:3a:b8:f5:a3:94:42:ac:1e:c2:08:36:f9:9b:1b:60:78:
         0f:f5:40:40:02:31:24:7d:06:06:60:18:89:ab:75:45:d5:80:
         0f:50:e3:93:24:cf:7d:62:5b:d1:e7:e0:bd:df:51:ae:5c:cb:
         b7:92:8f:73:04:d2:0c:0e:9e:9a:4a:60:05:36:f3:db:bd:e3:
         12:ba:58:7a:c1:d5:a0:29:8f:d9:8e:cc:6a:28:70:eb:f7:9f:
         80:de:09:67:0e:83:3e:d5:ed:0b:dd:46:57:ff:00:c3:11:27:
         cd:38:83:72:25:d4:0b:d7:ee:62:e8:15:64:2a:d0:6d:32:fc:
         6f:a2:ae:80:9e:20:63:38:5a:96:b6:64:44:31:18:9d:c8:d5:
         d0:10:38:5b:ec:c0:16:38:f5:e6:9c:50:ef:11:da:98:0b:dd:
         32:11:71:52:db:9e:91:13:e5:ef:55:2f:64:54:d5:4e:98:4a:
         62:ca:a3:85:e2:a5:ed:da:f5:5b:91:d0:bb:74:5f:d6:8f:2a:
         de:f2:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:41 2024 by rpki-client on console-ams.rpki-client.org