Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          ikhjx0jTZ+lB+XF8HY0dI9Sw0lV7/OfL2KRMaSu0IkM=
Subject key identifier:   8F:47:FE:B0:23:4A:86:BD:82:0A:AA:1D:C5:6D:E9:2A:F0:52:A5:A4
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       01901DEB9059B3B6986F4282F58285BF9B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          07A1
Signing time:             Sat 15 Jun 2024 22:01:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:35 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: PS86P68M1TZzOMNbHWOJSl1aB9U3Yjuaa+oQ54uUF0A=)
                          2: qIBIhPUVkTGNPbgf9UsSA_VNwZM.roa (hash: aX/s9bGatrSWtut5BYc66YesTo51i3iVjoYdc5twLvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:90:59:b3:b6:98:6f:42:82:f5:82:85:bf:9b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Jun 15 22:01:35 2024 GMT
            Not After : Jun 16 22:01:35 2024 GMT
        Subject: CN=8f47feb0234a86bd820aaa1dc56de92af052a5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:6e:e0:6e:fc:59:6e:9b:b9:bc:4e:ec:fd:
                    2f:bc:e5:a4:75:d6:8d:c4:75:31:77:bb:e3:ac:23:
                    72:6c:e8:0f:7a:9b:1d:aa:0e:40:a1:0e:21:b3:c4:
                    ac:3b:4a:5c:99:35:3d:5b:16:d2:8c:94:46:78:09:
                    94:ea:1a:39:ac:a7:30:59:a4:7f:ad:0d:7a:63:8b:
                    17:13:a4:90:6d:1a:ca:78:d1:61:6f:8f:2b:83:09:
                    c3:50:73:fd:bc:68:1f:ca:71:27:18:26:bf:96:a4:
                    83:5b:8e:3b:e2:73:9e:52:89:7f:c4:7f:c2:88:12:
                    27:32:de:16:4a:ad:71:fc:3f:ce:5a:66:c0:74:37:
                    29:94:ab:0b:b4:54:a2:61:54:d3:a9:18:55:ec:ca:
                    b0:d3:57:5d:86:90:64:d0:50:9a:df:6b:d8:55:36:
                    95:a7:03:45:db:ba:c8:c0:cc:9c:ba:c5:4c:31:55:
                    fa:aa:97:ff:50:21:f3:90:97:59:9e:22:a1:ee:a7:
                    c7:5d:78:d9:99:2a:10:42:da:06:8a:ef:d5:98:08:
                    36:a8:5b:aa:89:81:4e:d5:78:45:b6:15:e8:2b:57:
                    8a:5b:8c:f0:45:e9:d7:fc:a2:f3:8e:3a:4e:fb:79:
                    9b:54:0c:59:19:d9:c5:0c:9f:20:19:6b:71:87:38:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:47:FE:B0:23:4A:86:BD:82:0A:AA:1D:C5:6D:E9:2A:F0:52:A5:A4
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d7:aa:30:3e:9d:ba:75:09:21:40:fa:74:dc:36:a9:b8:61:
         94:be:21:69:96:f6:7a:00:73:fa:9e:c0:8b:aa:1b:39:e0:61:
         22:c2:fd:7e:8b:1f:4a:ca:03:e3:b3:8f:a1:28:4c:53:ea:bd:
         16:46:71:8b:0d:6d:13:b9:92:c4:32:e0:28:0d:66:f1:49:61:
         ff:cd:9f:f9:f8:0e:5a:4e:d9:b9:50:73:85:b6:40:77:78:a2:
         c8:07:03:fa:5d:47:73:0c:d1:e6:9f:44:a3:44:8a:c1:cd:8d:
         2c:1c:7c:f2:9b:5c:ec:63:54:b9:1d:44:62:50:c8:f1:3a:ca:
         15:30:23:c5:7c:d4:35:8a:e6:3b:43:64:8f:c6:2d:0a:46:0b:
         79:4a:83:11:97:3c:e9:08:6f:a1:6f:da:4b:cc:19:e1:82:cd:
         1f:d3:6c:01:dc:07:07:57:0b:6d:15:05:21:f0:66:e3:f9:b5:
         22:7c:49:f7:61:88:66:29:a0:95:f5:51:13:a0:d3:07:a9:13:
         8a:1a:b9:e8:5e:1f:22:29:b2:85:83:8a:d6:8b:35:67:c8:96:
         4a:19:f7:47:a0:b7:cf:1a:d3:4e:f4:0a:8b:87:30:72:52:84:
         5f:5b:19:81:75:56:59:af:94:ac:4a:d1:87:bb:90:8b:79:50:
         9f:25:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:07 2024 by rpki-client on console-fra.rpki-client.org