Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          UQPyfDpX4TvnvOODKXJ9X6Q+TwgW1EXylgBH5rR4C9s=
Subject key identifier:   CA:F3:86:D9:DE:EB:05:9E:92:54:55:A2:4E:9A:7E:A5:72:EB:58:BE
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       01901EC70A9386C457BDE49E2013F61B9797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          0ED7
Signing time:             Sun 16 Jun 2024 02:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:19 +0000
Files and hashes:         1: F6PQ9QxCrP1FvXd_CfbLxRhhTNQ.roa (hash: n0PRrUQAyBx9CcvAOmYSIyc/QdWUwxnb8OXptwsMWLg=)
                          2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: tYRj1TqWBB17XAz6GxOHMhklFerE0ofsdMWNCSEzDao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0a:93:86:c4:57:bd:e4:9e:20:13:f6:1b:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Jun 16 02:01:19 2024 GMT
            Not After : Jun 17 02:01:19 2024 GMT
        Subject: CN=caf386d9deeb059e925455a24e9a7ea572eb58be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:15:66:53:71:9c:46:ec:7d:d3:7b:8a:6f:
                    03:ee:60:2f:41:44:1a:36:c3:9e:76:8e:60:18:d7:
                    62:84:82:72:5f:8c:35:e0:41:91:77:da:5f:2f:c3:
                    5f:b4:e9:20:60:9d:98:28:d1:67:2b:e3:7e:de:38:
                    c4:ec:e5:52:75:9c:e3:45:9e:d6:10:9c:b0:13:56:
                    80:d7:b0:cc:d2:4a:20:24:4b:5d:06:c7:1a:63:9f:
                    54:d5:34:41:29:de:22:2b:14:46:d5:e7:2f:3e:4c:
                    9e:2e:20:29:c3:8e:b5:3d:66:c6:1b:f7:42:04:c9:
                    e8:60:dc:13:99:8a:41:83:cd:39:4a:c5:d7:23:14:
                    f9:09:3d:06:73:83:a3:98:4f:d4:f2:92:87:13:7d:
                    f5:30:d4:0c:ae:16:0d:40:04:b9:74:b4:0c:4f:bf:
                    b1:b3:ba:f6:05:29:6c:b4:41:35:19:54:d1:91:04:
                    f9:a2:15:87:03:fe:71:5b:7c:c8:c4:e6:06:86:91:
                    5a:36:b4:64:be:f1:86:69:59:d4:01:0e:b3:cd:9b:
                    a5:be:e2:ef:f9:a4:a1:f6:ae:67:9c:59:1d:80:0c:
                    4d:35:a2:2b:27:b7:08:7b:b7:eb:59:09:c9:9c:53:
                    75:7c:6d:00:fa:eb:89:86:4f:39:69:24:76:53:ca:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:86:D9:DE:EB:05:9E:92:54:55:A2:4E:9A:7E:A5:72:EB:58:BE
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:36:6c:f7:f6:52:4d:d5:aa:d1:2e:bb:6f:c1:88:ea:6f:b3:
         83:78:4c:62:5b:c1:68:ae:77:76:5c:33:df:0c:a9:92:0a:89:
         de:df:9a:b8:a3:1e:1d:52:5c:69:a2:78:da:60:68:eb:80:01:
         36:6c:a9:89:31:91:23:a3:34:1b:69:02:a5:b5:0b:ad:81:44:
         e3:28:50:53:05:86:a8:eb:d0:6d:49:62:51:13:3b:78:c0:ff:
         4c:1f:30:af:e2:29:8c:89:ff:c5:6c:79:14:29:bd:e6:34:e0:
         ca:0f:e0:60:62:51:a8:d0:cb:c7:9c:5e:be:10:d8:4c:9b:55:
         10:e8:70:b0:ca:79:34:79:1e:55:af:c2:96:c9:ed:31:3e:90:
         40:9c:2b:05:df:41:7d:a4:ae:ac:fc:10:8b:64:1c:c1:61:2a:
         0b:57:56:dd:b8:8f:67:99:61:db:a6:ac:31:8c:55:83:9f:59:
         23:cd:de:28:59:00:aa:b3:63:39:0c:89:8a:4f:58:20:51:59:
         43:cd:b7:74:84:80:09:c8:16:4b:c6:e2:50:df:c0:dd:46:98:
         1b:f8:9f:12:ab:91:bb:6e:50:4a:94:cd:c4:c3:d0:7b:33:8e:
         3d:e5:b2:19:aa:67:27:b2:2c:47:4d:ab:a0:44:df:42:fa:ad:
         3a:66:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:24 2024 by rpki-client on console-ams.rpki-client.org