Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File:                     sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier:          dObqelDxc3sc57IlErbah2mnbPkU51d9UYGnC69WkTs=
Subject key identifier:   77:45:1B:E9:38:DB:1E:AE:71:27:26:C8:75:1F:97:D1:D2:A3:EE:16
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer:       /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial:       01901EFD67F786995BAE2924DE4D9A42DF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number:          0299
Signing time:             Sun 16 Jun 2024 03:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:41 +0000
Files and hashes:         1: dosWJ2UNRv6JvVy-TdoQYPyAYb0.roa (hash: wgiGy9C+cn4P+7ORf3xx4n9y7HS7MtLA82zdpjLIND4=)
                          2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: cBuOhQ5xukRBGpju+eXlyAKblHpzX4JPp1wzl2nuAls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:67:f7:86:99:5b:ae:29:24:de:4d:9a:42:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
        Validity
            Not Before: Jun 16 03:00:41 2024 GMT
            Not After : Jun 17 03:00:41 2024 GMT
        Subject: CN=77451be938db1eae712726c8751f97d1d2a3ee16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:56:a2:e8:be:6d:11:4f:2b:99:79:36:9b:
                    ce:ef:36:4d:64:01:b0:71:18:7d:12:3a:f9:66:9d:
                    f7:0a:bf:df:41:30:af:99:85:d5:b1:3d:23:dd:f2:
                    ea:49:09:d1:1f:82:8b:77:ff:07:03:9f:94:33:f8:
                    08:89:7f:3d:52:69:34:ac:de:ce:db:20:09:a6:c0:
                    fc:b7:3a:21:2c:df:be:4a:bd:dd:ad:56:15:a4:41:
                    a5:13:39:3b:dd:b4:8d:3c:cb:c3:4d:ea:17:2b:a7:
                    76:a0:93:cc:99:b5:fe:b5:d5:6e:e3:dc:1d:a3:38:
                    9d:40:3d:02:34:5d:5f:71:7a:db:26:6d:75:91:bb:
                    fc:96:55:77:de:49:af:58:85:0d:89:b0:a8:61:14:
                    fe:2f:4b:a3:35:36:05:7a:65:88:90:29:d3:70:6c:
                    86:df:7c:52:d1:7f:68:a9:cb:cc:5f:62:b9:c8:67:
                    a4:a5:85:10:7d:3b:9c:de:bc:5e:f6:ec:d6:d7:e4:
                    3b:64:8c:bf:25:91:f6:30:9e:e8:a3:e7:a9:76:fb:
                    63:52:f0:71:3d:13:1e:40:e0:a7:1f:99:8c:34:df:
                    44:c3:b5:21:b9:85:65:2c:01:7a:df:f0:83:64:b0:
                    1b:ea:eb:6a:80:75:a1:e6:41:1a:b6:d0:35:8e:ec:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:45:1B:E9:38:DB:1E:AE:71:27:26:C8:75:1F:97:D1:D2:A3:EE:16
            X509v3 Authority Key Identifier:
                keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:7f:c2:96:97:6a:99:2a:42:58:3d:9c:fe:8a:2f:79:07:ea:
         1f:8d:0a:69:8f:da:b0:ec:4f:03:17:04:5b:dd:f1:aa:ad:89:
         87:fc:a8:19:57:e7:62:65:f9:cd:f2:8c:f9:de:ef:b6:3e:37:
         8a:ae:4c:82:5b:93:f6:f2:5c:d9:b8:d1:26:3c:9a:ea:b2:3f:
         91:68:d1:6b:24:8f:e6:d7:45:eb:8b:88:90:38:12:a8:c8:50:
         d1:f6:66:29:7a:97:03:d5:c7:17:fe:84:8e:fe:2f:6d:63:3a:
         df:52:18:5c:88:b3:1e:40:d0:8f:50:45:33:18:92:c5:67:d0:
         ef:04:95:b2:d5:b9:fa:39:9c:3a:f9:97:af:c5:16:54:0a:ec:
         7c:85:9a:45:5a:fb:c2:73:51:72:6e:39:a0:4f:71:33:9f:9c:
         a3:8c:c6:c1:d4:ab:6a:6a:8e:03:fc:b5:22:fa:8d:d6:68:c0:
         a4:b6:3d:39:ba:11:76:4b:ec:b7:35:87:47:1c:a6:61:28:94:
         6d:f2:2b:b2:bb:ef:2f:23:36:8e:f9:62:26:20:08:65:34:b8:
         18:99:de:f3:b8:c5:08:91:4a:31:3c:f0:8a:94:6e:da:00:5e:
         25:51:bb:5b:59:89:48:8b:27:83:fe:30:0f:fe:88:d7:c7:a0:
         e5:be:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:36 2024 by rpki-client on console-fra.rpki-client.org