Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File:                     Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier:          k36ZlgEOM6waoICy4nwir/V3VMOlN6FPtFVg79vOImc=
Subject key identifier:   C5:0C:1E:C0:D6:12:8A:45:FF:1A:AE:50:68:F8:0B:DF:FC:6F:41:98
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer:       /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial:       01901D0F11B6A5C5AC6B0D658478DBA7B45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 18:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:45 +0000
Files and hashes:         1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: CZu/XpWVzlFiPKCVT09zlIgO1HbWQK531o8TXk5lg+4=)
                          2: i-oTAxoPzIuytNlOrdQr3jdYzag.roa (hash: SkUbQyXRAHV/SVVyjy4Tq4m8cza+5VJxLckRGHdTQ5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:11:b6:a5:c5:ac:6b:0d:65:84:78:db:a7:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
        Validity
            Not Before: Jun 15 18:00:45 2024 GMT
            Not After : Jun 16 18:00:45 2024 GMT
        Subject: CN=c50c1ec0d6128a45ff1aae5068f80bdffc6f4198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:86:93:d6:e6:be:9a:b3:8c:c4:07:ad:c5:
                    7b:1b:c8:9c:c0:c1:1b:51:2e:c2:03:31:9c:55:f6:
                    2f:d6:0d:b1:a6:f9:84:02:b0:39:29:10:00:54:6f:
                    5d:3b:f7:65:2c:c2:44:4f:58:99:15:b3:f5:24:7b:
                    a5:be:64:d5:3c:86:60:47:d8:9a:f4:83:9b:da:81:
                    71:bf:c2:b6:25:af:f1:47:8a:36:a4:3c:9b:31:92:
                    f6:62:28:85:4a:85:a6:28:9a:d4:9e:e3:60:92:e2:
                    3c:c4:72:8f:1a:42:23:40:ba:65:e5:0f:fe:94:f6:
                    32:ad:c6:8d:2c:a6:8b:6d:e7:03:14:33:eb:24:79:
                    f2:5f:83:15:08:12:7a:97:d1:8e:ca:b6:7b:5b:d8:
                    99:24:3f:90:af:92:c4:19:f4:b0:a4:13:05:da:ca:
                    90:67:0a:89:c4:aa:bb:d6:9b:56:ab:f8:2b:dd:52:
                    28:45:f9:df:bb:00:9a:4e:75:4a:71:c9:b5:f1:57:
                    3c:3b:18:e5:b6:98:bc:c5:ce:26:9c:6c:a3:5d:a8:
                    14:ad:62:01:7e:a7:38:72:91:97:11:9f:bd:30:f6:
                    24:a8:60:45:79:7d:71:08:84:2a:79:98:0b:08:ff:
                    e5:c2:25:c4:8d:31:26:4a:d3:b2:84:bc:66:18:dd:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:1E:C0:D6:12:8A:45:FF:1A:AE:50:68:F8:0B:DF:FC:6F:41:98
            X509v3 Authority Key Identifier:
                keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:af:37:dd:c0:2a:92:5a:2d:74:54:e1:c5:bc:a3:6e:c0:
         48:56:0c:28:5a:c2:67:01:75:11:d3:13:fa:36:b1:cf:50:1d:
         44:de:96:ac:12:1a:e1:58:81:e8:24:8a:7c:8d:7c:15:0b:ae:
         83:3a:29:88:23:a4:df:b4:f2:e4:c1:55:e4:d6:3b:5c:12:d4:
         63:64:65:6c:4c:45:28:4b:5c:cf:34:5b:24:d7:a9:c4:21:3c:
         94:01:ab:6b:20:17:5c:44:53:ae:0f:a1:7f:97:d4:89:ef:9d:
         34:f3:41:ab:64:3c:30:bc:8b:c5:61:c7:4d:0c:fa:cb:57:38:
         d2:c3:39:3d:2f:21:3a:78:50:1a:b8:fa:8a:20:8f:98:93:29:
         5a:ed:9c:25:ad:19:94:b7:48:75:99:bf:27:63:e1:77:22:ac:
         7f:7a:7f:72:0a:da:b4:aa:6d:fa:dc:b6:09:3c:98:66:0e:dc:
         94:13:e7:0a:11:6b:6c:1a:af:0f:ec:00:0a:19:d0:54:3f:15:
         2d:a4:b4:86:07:12:0a:4f:f3:8c:04:0a:e6:65:7e:b1:2f:c6:
         1b:a5:68:57:f8:a1:be:33:cc:86:ac:94:43:bf:20:8f:61:5c:
         10:13:b5:41:5a:84:c8:f9:f3:f7:ed:85:ab:7a:fa:c6:9a:80:
         63:01:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:41:19 2024 by rpki-client on console-fra.rpki-client.org