Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          a9rzd63Q9ABhqOI5VKR17iY8W9fvEUzuaBAO4DrCthM=
Subject key identifier:   F0:15:E3:FB:67:E6:04:BE:ED:33:89:DC:B7:04:21:D1:8E:7E:62:27
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       01901DED2AE3F6243D91B811A7540F9A798F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          0482
Signing time:             Sat 15 Jun 2024 22:03:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:20 +0000
Files and hashes:         1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: RJVcmMy+mhVsLlkwVpMgMu2HYVTDuu00nsUZd/zjbp4=)
                          2: sH5bf7xRdvsa6ZuBpqEy31EH0Yw.roa (hash: S6xM2Y7AHmCfHO9b4C2Mtrk2TJGU2FOZTC+RSRt8YvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2a:e3:f6:24:3d:91:b8:11:a7:54:0f:9a:79:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: Jun 15 22:03:20 2024 GMT
            Not After : Jun 16 22:03:20 2024 GMT
        Subject: CN=f015e3fb67e604beed3389dcb70421d18e7e6227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:90:26:44:95:9f:34:01:3d:fd:c3:1b:18:
                    b8:1d:29:9d:5a:1e:8a:03:1d:01:33:f1:e0:14:ba:
                    0c:0e:88:08:86:d7:6a:af:9a:d9:32:57:62:4b:6e:
                    29:49:6c:a8:4d:80:44:74:e6:e0:b9:a0:15:ca:dd:
                    5d:cc:69:2c:1a:b4:2a:41:81:07:7b:c3:ad:fb:88:
                    80:54:f7:30:fe:47:59:82:fd:70:37:2e:57:25:b4:
                    d5:b8:33:46:f9:07:aa:25:a6:3c:1f:6b:fe:da:82:
                    20:86:a6:1c:4b:45:17:0a:7d:03:ea:bf:f6:cc:04:
                    d6:9a:ae:ed:13:03:54:68:39:21:1b:d0:e0:2d:0a:
                    44:95:97:8c:35:31:1b:6b:2e:d8:25:a5:4d:94:44:
                    25:5f:3e:3d:83:ae:00:47:ae:cc:76:6b:a5:14:4f:
                    8c:a4:3f:8b:3b:d5:3f:8e:13:fe:18:5a:6d:d9:b9:
                    90:99:22:78:be:4e:df:1f:f5:f9:70:6b:ba:0d:9f:
                    7f:9a:5d:9f:95:96:4b:18:8a:de:bd:9e:21:3d:67:
                    7d:b9:dd:a1:47:6b:95:fc:cf:23:d1:86:9f:d5:c6:
                    94:f9:d8:13:05:ca:b1:8d:5e:f3:f4:45:4e:8e:bd:
                    cc:fd:bf:cb:51:df:d6:95:37:71:87:3b:04:5e:11:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:15:E3:FB:67:E6:04:BE:ED:33:89:DC:B7:04:21:D1:8E:7E:62:27
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:5c:20:6e:32:61:7b:54:c7:47:51:40:db:60:aa:54:6c:
         b0:b9:04:4c:7c:a0:c2:6d:2b:ff:36:4e:84:ef:fb:6b:9c:0c:
         05:3d:75:15:6a:10:5d:50:c7:8d:e1:66:f8:8e:a9:d4:59:50:
         fa:40:67:b5:d1:85:f1:ac:22:6f:48:dd:22:2b:8a:c4:29:5d:
         f9:37:e7:2d:01:69:ac:f8:65:20:9e:6d:b1:12:8c:74:dc:ea:
         e7:7c:4c:07:9d:5d:d3:a2:7c:ab:92:48:8b:b6:c3:4c:cd:b6:
         f6:7f:8a:3e:d2:14:86:1a:3b:e7:22:03:03:c6:ac:77:d4:54:
         2e:b6:81:9e:39:58:32:7e:38:11:b3:e3:c5:a8:1e:58:6a:66:
         a7:8b:14:f8:17:15:00:81:d3:91:12:c3:ef:a2:8f:ba:e0:c1:
         49:b4:e8:56:30:d7:b7:b7:93:de:9a:4a:62:b7:2e:4e:03:2c:
         da:da:70:26:5f:e6:28:e7:ab:3c:60:7e:33:78:ae:42:9d:b4:
         18:22:7f:87:21:2a:7e:90:06:dc:6e:a1:a1:4b:c3:45:70:2f:
         83:bc:26:0b:13:25:05:75:05:54:6f:80:ca:40:7c:65:a5:91:
         27:b7:99:10:b3:c1:fd:3c:f8:7b:12:6f:20:46:e7:af:49:a4:
         ef:b8:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:55 2024 by rpki-client on console-ams.rpki-client.org