Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File:                     AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier:          /VrF9LbzCvBvWOvImaaMVxohBuDUx4+qGIGrAlhCtjY=
Subject key identifier:   E2:EB:50:EB:EC:3A:A7:5D:58:87:F3:C5:F2:65:38:4D:BF:BD:0A:8E
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer:       /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial:       018FB2D81A704343691F55DB63FFA6ADBE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number:          118E
Signing time:             Sun 26 May 2024 03:00:57 +0000
Manifest this update:     Sun 26 May 2024 03:00:57 +0000
Manifest next update:     Mon 27 May 2024 03:00:57 +0000
Files and hashes:         1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: MSTRaQA7XT6KOd5Y+tWY0BsFakkcfHX1o9IF7ycBjRw=)
                          2: y24rB24IWHermlVSDwnxlGzf3Ys.roa (hash: RbSTG3uwhg+MoRtzCfeI6Xp8b7vhL+dnUy6mhOTBuJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:1a:70:43:43:69:1f:55:db:63:ff:a6:ad:be:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
        Validity
            Not Before: May 26 03:00:57 2024 GMT
            Not After : May 27 03:00:57 2024 GMT
        Subject: CN=e2eb50ebec3aa75d5887f3c5f265384dbfbd0a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:c4:66:de:10:c4:37:c1:4f:b7:87:f5:db:
                    be:92:14:99:81:24:34:78:e8:0d:be:39:4e:02:39:
                    2c:d4:11:69:16:3e:c2:e4:89:eb:b0:b0:49:dd:7e:
                    a8:68:c3:b9:0b:1c:ef:33:1e:0a:73:bc:83:cd:d7:
                    0d:f1:e2:10:62:47:d2:14:b2:16:dd:87:eb:41:e3:
                    a9:0a:de:26:32:51:74:63:5b:09:a0:b0:88:9e:49:
                    f9:d8:b1:98:33:99:3d:ef:a5:6a:66:49:65:3f:a5:
                    1b:d8:fa:d4:cd:43:29:5f:02:b6:f1:6e:5c:b2:44:
                    fa:b6:ad:6e:fd:4b:46:1b:e3:fd:1d:7a:07:a6:08:
                    c1:1b:6c:5e:45:ab:17:dc:e6:84:2b:c1:61:08:7f:
                    57:d0:ec:8b:c3:ab:0a:89:51:94:d2:58:c4:ba:c4:
                    11:1d:65:9d:29:60:2c:1b:df:83:74:9a:ae:0e:0b:
                    9a:da:c2:c9:24:6c:86:6b:95:f8:bf:38:a3:1b:61:
                    dd:9b:13:35:13:10:94:85:ae:8f:ae:28:67:18:99:
                    6e:b2:dc:77:da:a4:3e:04:fb:d4:5f:27:d1:6d:5c:
                    7e:e1:ec:ec:35:72:89:c3:70:e1:06:80:00:22:ed:
                    ab:48:e9:9b:e5:e1:7b:c7:95:7e:14:0c:6f:dd:44:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:50:EB:EC:3A:A7:5D:58:87:F3:C5:F2:65:38:4D:BF:BD:0A:8E
            X509v3 Authority Key Identifier:
                keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:62:9e:af:19:70:4b:7b:f8:9b:99:8f:31:1a:47:cf:18:
         b8:3f:df:a2:2a:28:6a:4a:8a:7e:ab:53:0f:69:ad:7b:b8:11:
         69:92:76:cc:e6:bb:97:7d:ca:67:38:5e:c5:50:51:b9:f0:21:
         a1:47:23:d4:92:11:9a:bc:44:59:da:45:b7:47:03:37:e1:a0:
         e3:94:2b:44:3a:03:c1:56:bb:20:4b:28:96:f7:f6:23:04:e4:
         e5:4e:4c:af:26:45:4a:97:99:dc:b5:46:05:ab:b1:03:94:99:
         74:f4:74:46:f3:46:91:94:b3:fd:8f:0d:f5:47:80:6b:d8:0c:
         bd:be:de:dd:15:12:78:f5:57:56:8e:5b:15:8a:71:9f:8a:87:
         77:b0:ae:b8:9a:d7:04:6e:81:bc:da:54:52:0d:27:0a:49:14:
         61:0b:95:f6:57:23:cd:98:ae:35:08:18:35:82:a1:7a:da:d5:
         da:0f:51:4a:d2:ff:53:84:15:dd:72:c9:87:8a:ea:ed:e4:58:
         f2:07:18:a2:a1:72:9f:02:5d:a7:6e:05:0a:cb:bc:5d:21:97:
         1d:9b:3a:3d:fa:a8:b1:c8:3e:5e:e1:cb:d0:24:9b:9f:ce:0c:
         cb:bc:03:90:20:6a:ac:78:f7:de:5b:1f:e6:57:73:3b:e0:9c:
         e8:e9:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 07:02:24 2024 by rpki-client on console-ams.rpki-client.org