Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          hV6ABKU81cDgvZaxL8YrPSkFvbxFhyCGLSKc1kAaUsI=
Subject key identifier:   CD:EA:05:84:3F:5F:41:2E:EE:B8:75:F4:70:BA:EE:5D:E3:22:59:B6
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       0191FAEC470E577121D45F5BA1078D6FA873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0828
Signing time:             Mon 16 Sep 2024 13:01:14 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:14 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:14 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: H+evM/W9wHNsdl7Ub/pYe4jQy5uPzC6MocA1yFqnCgQ=)
                          2: eX3uwQ2TPk0pcGf-IlqLjdsRFbg.roa (hash: DTM4fXfQJ4S/hnTLfiNjQOA9uGDWyuqyJOlMo5qDrQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:47:0e:57:71:21:d4:5f:5b:a1:07:8d:6f:a8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: Sep 16 13:01:14 2024 GMT
            Not After : Sep 17 13:01:14 2024 GMT
        Subject: CN=cdea05843f5f412eeeb875f470baee5de32259b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:90:ab:a1:7b:a1:f9:d7:ac:4e:a7:53:6d:
                    9b:56:86:0f:b8:87:a2:5b:3e:35:6b:3b:14:d4:c4:
                    04:cd:e2:7b:70:1a:85:f6:66:e1:c6:fb:aa:0d:3a:
                    e5:2a:48:0f:82:9f:7d:57:05:b8:2a:ff:cd:fd:a0:
                    fe:c0:d3:62:fa:d8:28:34:59:04:09:1f:b9:8d:6d:
                    56:37:e7:ba:7d:04:70:ee:d0:e5:e6:b8:78:dc:18:
                    04:13:c6:3a:4c:ed:03:e3:61:8b:d4:56:c7:68:b1:
                    0b:b2:b0:56:31:b9:32:9c:77:50:c0:97:31:24:75:
                    cc:57:96:24:56:79:de:8d:61:60:28:0d:16:02:d6:
                    a4:55:6d:c1:34:b4:49:b0:5e:f7:d0:e9:02:ed:b5:
                    e5:5e:be:bc:55:3f:da:40:7a:f1:85:dc:99:a4:ee:
                    f4:4f:5e:84:8c:c0:e8:56:be:21:70:13:11:24:18:
                    0e:b0:05:ba:ee:84:01:20:7b:df:b9:bd:de:65:c4:
                    c8:6c:80:4e:ff:b6:af:14:f0:1b:20:06:29:11:cb:
                    f9:22:b8:0f:25:b6:17:a2:18:9d:e3:9e:fd:96:bb:
                    32:97:4d:d6:a2:78:b7:a7:9e:5f:5d:04:d1:f4:49:
                    f7:b7:db:2d:ab:d1:79:7a:94:95:b2:65:7a:e0:2c:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EA:05:84:3F:5F:41:2E:EE:B8:75:F4:70:BA:EE:5D:E3:22:59:B6
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:bb:6c:0a:0e:21:c9:b5:40:6d:9d:cd:62:b4:6d:07:ea:
         07:64:7b:1a:9f:86:4e:d6:cd:f0:66:b1:ac:18:9c:76:8a:0a:
         26:80:98:a3:d2:a2:a1:1a:fb:ec:66:af:62:e0:c7:36:31:34:
         15:1a:f9:20:89:90:76:f1:50:87:bf:84:24:7c:af:1e:75:32:
         bc:77:31:dd:06:7d:6c:96:05:58:aa:62:be:ef:90:fd:82:f5:
         11:69:2b:21:35:f9:d9:7e:47:93:c0:91:bb:90:2c:5b:2c:84:
         b8:a7:55:9b:58:a1:80:12:28:1e:54:38:00:2a:53:50:29:da:
         e7:67:5a:76:f6:87:1f:c5:f9:d7:bd:db:ea:7c:c1:84:e7:96:
         98:b7:d4:09:80:0d:13:65:68:8c:03:a2:c9:a5:d2:7f:86:55:
         1f:f8:b0:df:f6:d5:2d:a9:dd:65:68:f4:82:2a:99:7b:50:63:
         a9:7e:8a:2a:49:6c:e7:6b:17:86:a5:3d:96:a2:dc:86:88:66:
         f1:a9:d2:8b:eb:27:d4:9b:d3:92:65:96:65:89:d6:65:53:e8:
         bc:f0:ef:50:93:0b:d9:c8:87:19:dd:42:f3:8e:bb:66:99:8a:
         17:cd:58:c9:f7:01:4f:dc:27:40:14:1a:a3:4f:cf:37:0c:0c:
         61:3e:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:36:18 2024 by rpki-client on console-ams.rpki-client.org