Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File:                     SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier:          UlxoX7F+y7KsznPkc2vR5fyyPm2ZNbusgtoRz71L2y4=
Subject key identifier:   A8:74:C7:76:6B:22:8D:14:D4:34:D1:01:08:33:13:BD:21:DF:DC:35
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer:       /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial:       019042D2ECBB56B0658B2A947B360484BA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number:          0191
Signing time:             Sun 23 Jun 2024 02:00:37 +0000
Manifest this update:     Sun 23 Jun 2024 02:00:37 +0000
Manifest next update:     Mon 24 Jun 2024 02:00:37 +0000
Files and hashes:         1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: HBrYLO+2HqWCm6rZuniAtLToU8e/k2YLYnYoVxoJM7U=)
                          2: hvcqH8YkM67Bj-RkxkXRe199Vdo.roa (hash: 8UuKl5yv1AjmimUfUpsL495/E4e/2SOqnMxaA9aJVas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:d2:ec:bb:56:b0:65:8b:2a:94:7b:36:04:84:ba:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
        Validity
            Not Before: Jun 23 02:00:37 2024 GMT
            Not After : Jun 24 02:00:37 2024 GMT
        Subject: CN=a874c7766b228d14d434d101083313bd21dfdc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:a8:77:fb:ca:5f:a1:ef:33:ce:4f:29:76:
                    ed:ce:65:98:eb:de:33:b7:a3:ca:52:58:6f:8a:47:
                    f9:41:c0:9a:f0:87:31:9d:48:97:95:68:de:c9:a9:
                    4c:04:d3:b9:2d:31:71:f7:88:bf:7d:53:c8:4a:40:
                    de:87:bd:e1:4b:0d:bb:14:ae:b9:0f:99:12:be:05:
                    2f:8c:84:aa:ee:5e:9b:de:54:83:07:94:0b:09:03:
                    3e:68:12:50:ac:4d:4a:95:e1:d9:c8:13:c4:42:1e:
                    0c:34:51:8e:f5:a4:52:d4:bb:5a:22:08:46:8a:1f:
                    ac:b7:de:be:9b:82:f9:a3:df:59:5b:67:96:b0:b6:
                    31:54:f4:c7:62:ed:b8:e3:a3:80:70:64:5b:ef:92:
                    83:c2:04:a1:9e:9b:e2:dc:43:ca:2e:52:96:bc:5c:
                    30:72:a6:15:43:21:a9:1e:1f:c1:ec:d8:50:54:c0:
                    68:e2:f6:37:8c:a0:b3:ed:62:95:b5:3c:8f:16:3d:
                    7d:cd:30:8a:91:21:dd:d9:69:31:17:33:f5:8b:0c:
                    53:6d:9e:5f:a6:3d:91:b3:1d:24:e3:49:23:a3:01:
                    91:30:6b:81:db:97:73:c6:b8:0b:8c:39:29:cd:d1:
                    fb:90:f4:47:0e:5a:30:44:d5:39:27:2a:dc:58:db:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:C7:76:6B:22:8D:14:D4:34:D1:01:08:33:13:BD:21:DF:DC:35
            X509v3 Authority Key Identifier:
                keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6a:d7:09:76:69:0d:3c:f8:e9:20:b1:2d:be:05:d9:ac:c6:
         47:56:df:0f:0b:74:ff:d6:61:ef:42:7a:11:9c:00:da:14:de:
         d4:60:a4:16:87:ec:4a:df:40:60:ef:a0:6c:cc:6b:89:16:02:
         d3:a9:44:fb:1c:b7:b7:55:c7:3b:7f:99:db:f6:74:c8:b1:0b:
         33:30:40:72:c3:56:36:72:0c:8e:e7:51:0a:23:99:f7:25:45:
         55:a5:e6:e7:49:f0:7d:48:aa:a0:c5:08:09:fd:12:bb:34:c0:
         7a:93:d2:28:69:08:c2:e0:0c:32:85:94:3f:81:fa:eb:d3:25:
         c0:c9:8a:a3:c2:03:70:fb:6f:70:76:59:c7:fd:f7:f3:23:5d:
         ef:4b:dd:b4:90:fc:24:c7:87:c9:31:2a:12:14:b4:f0:a1:ee:
         72:b9:92:d9:fe:9a:50:c7:f2:61:c7:a6:bf:45:25:76:12:c7:
         72:15:06:f1:dd:19:69:e8:81:ff:5c:7e:2a:50:ad:76:f1:24:
         4b:c6:e3:da:24:f1:b4:9b:bc:99:9d:7e:c1:12:9f:ff:6f:da:
         69:14:fd:29:c9:7d:6a:e1:cf:e6:89:de:18:e7:db:d8:c0:08:
         c2:45:b7:82:39:62:b7:34:20:34:22:0e:ad:68:6d:94:8c:d0:
         4e:d1:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:09:27 2024 by rpki-client on console-fra.rpki-client.org