Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          u9kijTZpuKXICV4bFIYzX11JYeCjB5TIxj7W9pL9ViQ=
Subject key identifier:   92:14:E5:48:DC:DE:81:53:52:8E:DB:16:34:2E:16:0F:9E:33:42:5B
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       018F58F27B18F11494FEC690C43D7764AE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          0E9D
Signing time:             Wed 08 May 2024 16:03:57 +0000
Manifest this update:     Wed 08 May 2024 16:03:57 +0000
Manifest next update:     Thu 09 May 2024 16:03:57 +0000
Files and hashes:         1: 8LJGiI5kv_sZzjrLRU5PK9RdvhM.roa (hash: YC2BrzWA0CyES45w+TmOlv2ONvQTBN32FivXu3P0SCk=)
                          2: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: +3SjvViBwQrgZqkYZkxYlUgZJNwCwuT3BlmlmNO5qKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f2:7b:18:f1:14:94:fe:c6:90:c4:3d:77:64:ae:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: May  8 16:03:57 2024 GMT
            Not After : May  9 16:03:57 2024 GMT
        Subject: CN=9214e548dcde8153528edb16342e160f9e33425b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:34:d8:ba:8d:a0:78:a4:20:9d:72:ca:ad:
                    1c:98:86:a6:8e:83:64:13:a1:80:4f:d0:55:19:2f:
                    e7:e2:45:2f:91:59:48:29:c4:c6:49:5c:d2:17:81:
                    4a:6e:1d:7b:99:17:10:8a:c6:37:72:a9:4f:25:20:
                    c3:b4:61:01:df:b6:83:4e:19:af:62:4d:f3:85:9d:
                    82:65:db:84:f2:f9:32:02:36:91:4f:ce:7f:82:51:
                    fa:74:c2:ac:91:55:3f:eb:1a:37:1f:f6:9a:c2:c0:
                    0e:1f:f3:ea:e0:12:4e:81:b4:58:91:f7:a5:b1:db:
                    59:ea:93:bc:42:3e:cd:75:6c:38:16:e8:44:0e:55:
                    d3:63:fd:45:ac:9e:ae:6a:ed:07:72:b9:68:c9:37:
                    2e:d8:9c:56:69:9f:29:2c:8c:cd:5e:67:bc:cb:07:
                    2b:6a:c5:6f:8d:31:88:02:1f:91:d1:1a:14:a7:19:
                    69:53:82:8e:82:44:36:56:07:9f:d2:31:04:a3:07:
                    c2:82:3a:8d:43:4b:98:58:b3:c6:8d:d6:a2:51:e6:
                    a2:a7:1f:0d:16:fa:ac:4d:2b:4f:43:be:75:39:38:
                    62:63:e4:f9:3c:cd:24:e3:40:96:37:6e:01:7a:f8:
                    f2:96:2d:af:f2:70:82:32:86:e7:46:04:53:23:b8:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:E5:48:DC:DE:81:53:52:8E:DB:16:34:2E:16:0F:9E:33:42:5B
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:f3:2a:00:9f:9b:18:e2:96:ab:ee:89:bc:c4:fa:a2:17:
         9f:0b:d0:d9:61:b2:58:d6:7a:66:ab:9e:01:5e:f2:04:fb:3b:
         28:f6:e7:4a:fd:05:5e:30:9b:e1:30:48:99:78:2d:a4:6b:c5:
         33:01:81:2c:49:29:07:d8:68:e0:59:2e:dd:62:8e:9b:04:a7:
         b1:a2:ea:d4:ed:6a:01:13:30:f9:89:b0:b3:11:0f:0d:24:8d:
         5d:de:60:80:98:f0:2a:5c:c9:39:9f:e9:93:e0:90:e3:d4:19:
         45:84:a3:fb:e2:14:b0:5c:8b:66:c8:aa:de:c7:b2:5b:02:6f:
         4d:ee:8a:ea:16:c7:68:df:7f:96:94:e4:e0:4f:57:7c:32:30:
         54:dc:4e:bc:96:b6:13:f4:ce:64:68:92:c0:91:a8:1f:62:20:
         aa:fa:45:30:32:ed:f0:3d:e9:ab:a0:96:35:a7:6e:aa:6e:2d:
         c7:bf:db:20:12:41:0e:0e:f8:ee:b6:10:84:23:66:7f:50:92:
         23:d3:49:ad:24:53:4c:9c:07:0b:f7:d6:9b:a6:e0:a0:ba:ba:
         91:1d:76:6d:8c:ca:d6:23:ca:e7:7a:26:63:4c:20:0e:f5:f7:
         30:10:36:0c:47:eb:56:b4:13:e7:a5:2d:e3:55:d4:a7:28:9e:
         93:73:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:03:27 2024 by rpki-client on console-ams.rpki-client.org