Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File:                     SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier:          KiG53PrDdAdaOHUK8XzeYS3c7l8e2EMq4rs+X+43x94=
Subject key identifier:   37:50:E2:7A:37:BF:9D:EE:2D:05:CA:8B:D2:28:44:ED:27:81:ED:9A
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer:       /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial:       01901E21A96ACF59A1A60BDB9D7925C95889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number:          017E
Signing time:             Sat 15 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:40 +0000
Files and hashes:         1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: f8Vl83xcKfeTsOyjGfEPeqmT7Ly0pQJFd/2HVX+Gcnw=)
                          2: hvcqH8YkM67Bj-RkxkXRe199Vdo.roa (hash: 8UuKl5yv1AjmimUfUpsL495/E4e/2SOqnMxaA9aJVas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a9:6a:cf:59:a1:a6:0b:db:9d:79:25:c9:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
        Validity
            Not Before: Jun 15 23:00:40 2024 GMT
            Not After : Jun 16 23:00:40 2024 GMT
        Subject: CN=3750e27a37bf9dee2d05ca8bd22844ed2781ed9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:0c:b4:45:c8:d9:8d:eb:f5:d5:15:57:e6:
                    3f:df:1b:1f:62:10:0b:ab:13:51:22:02:bf:f3:c1:
                    9e:9a:c0:59:4c:38:d3:50:15:36:05:6d:c4:3e:cc:
                    d8:1e:89:51:2e:6e:60:1b:04:bc:cc:26:05:a2:f8:
                    39:73:a4:6c:ba:d6:4a:5d:0f:89:00:fe:39:3a:24:
                    52:29:2a:6d:30:f9:cc:13:64:e6:fa:1c:c2:a1:88:
                    a7:55:7d:d9:df:33:95:48:03:cc:be:44:46:7e:bf:
                    8c:05:00:72:57:9b:9e:89:19:86:81:c7:ea:54:d6:
                    c5:d3:a9:b2:74:9a:e8:49:64:9c:9c:bb:c8:cf:e8:
                    d4:82:83:d9:28:50:b4:e9:32:e8:e1:38:b0:45:8d:
                    d2:0c:80:9c:da:16:2e:87:ff:1c:b8:fe:ba:b8:5a:
                    9a:7a:b8:9d:4a:c1:0f:c5:6c:eb:a3:a8:e1:61:6f:
                    3b:fa:ad:e2:74:89:aa:33:c3:4c:ca:77:48:dd:53:
                    86:7d:46:16:a5:82:dd:5f:f1:e8:21:3d:28:6b:7a:
                    13:1e:98:3e:3d:41:1c:3f:a4:11:4a:97:35:ff:f7:
                    7a:69:8a:9e:d5:13:fe:74:5f:48:a3:2b:67:4d:7f:
                    61:75:2f:b6:bf:ed:64:24:cf:15:27:b3:1f:c0:85:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:E2:7A:37:BF:9D:EE:2D:05:CA:8B:D2:28:44:ED:27:81:ED:9A
            X509v3 Authority Key Identifier:
                keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:b4:0d:ef:8c:6c:55:76:55:22:4a:a8:f8:d7:d6:97:88:
         1f:e1:e4:ca:66:c9:99:45:96:e2:77:fc:7a:3a:ef:b8:d9:aa:
         3e:f6:70:dc:46:04:ea:a1:47:0a:ac:5d:2f:03:a5:3c:07:19:
         bd:29:91:1c:e3:e2:31:3c:40:ff:bc:b0:83:69:a9:41:b4:c8:
         88:fd:fc:b2:79:db:58:e8:cb:a7:55:fe:c9:c7:b6:d5:70:88:
         62:95:57:fa:0e:38:7b:bc:9b:fd:bd:f5:7c:d9:07:8c:cc:f2:
         49:a3:9c:c3:15:6b:00:59:11:71:6f:4c:61:b3:ea:3d:f5:6e:
         65:31:03:da:52:0f:55:9a:f4:e9:04:71:3c:a2:bb:64:86:28:
         42:ca:f1:7d:51:6d:a2:eb:77:6b:6a:d7:d5:7c:1e:07:7e:21:
         a5:6f:02:7a:b8:76:81:c4:a0:d9:a6:ef:d0:c0:61:07:4c:25:
         8c:ff:1d:e5:b5:27:cf:a2:9e:cc:f9:c1:9f:b2:b5:44:9a:d7:
         4d:cc:24:2b:fc:69:88:bf:49:30:55:97:f7:63:28:45:68:32:
         89:72:7a:d5:6f:59:f4:cf:26:92:88:01:9e:32:1b:5e:b4:a3:
         01:a7:f8:da:66:ea:4e:23:b8:fe:ec:64:66:01:30:53:42:98:
         45:82:70:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIalqz1mhpgvbnXklyViJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGUzZTgwYWVlYjg0YzMyNjEyZjRmYWQxMTZlMjY5MGE1
NDZjN2EwHhcNMjQwNjE1MjMwMDQwWhcNMjQwNjE2MjMwMDQwWjAzMTEwLwYDVQQD
EygzNzUwZTI3YTM3YmY5ZGVlMmQwNWNhOGJkMjI4NDRlZDI3ODFlZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkisMtEXI2Y3r9dUVV+Y/3xsfYhAL
qxNRIgK/88GemsBZTDjTUBU2BW3EPszYHolRLm5gGwS8zCYFovg5c6RsutZKXQ+J
AP45OiRSKSptMPnME2Tm+hzCoYinVX3Z3zOVSAPMvkRGfr+MBQByV5ueiRmGgcfq
VNbF06mydJroSWScnLvIz+jUgoPZKFC06TLo4TiwRY3SDICc2hYuh/8cuP66uFqa
eridSsEPxWzro6jhYW87+q3idImqM8NMyndI3VOGfUYWpYLdX/HoIT0oa3oTHpg+
PUEcP6QRSpc1//d6aYqe1RP+dF9IoytnTX9hdS+2v+1kJM8VJ7MfwIVRjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdQ4no3v53uLQXKi9IoRO0nge2aMB8GA1UdIwQY
MBaAFEgOPoCu64TDJhL0+tEW4mkKVGx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0E0LWdLN3JoTU1tRXZUNjBSYmlhUXBVYkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85Y2U0NDktNWVhNi00ZjgwLWJhNWQt
OTdiYjFhN2M0MzE2LzEvU0E0LWdLN3JoTU1tRXZUNjBSYmlhUXBVYkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85Y2U0NDktNWVhNi00ZjgwLWJhNWQtOTdiYjFhN2M0MzE2
LzEvU0E0LWdLN3JoTU1tRXZUNjBSYmlhUXBVYkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGji0De+M
bFV2VSJKqPjX1peIH+HkymbJmUWW4nf8ejrvuNmqPvZw3EYE6qFHCqxdLwOlPAcZ
vSmRHOPiMTxA/7ywg2mpQbTIiP38snnbWOjLp1X+yce21XCIYpVX+g44e7yb/b31
fNkHjMzySaOcwxVrAFkRcW9MYbPqPfVuZTED2lIPVZr06QRxPKK7ZIYoQsrxfVFt
out3a2rX1XweB34hpW8Cerh2gcSg2abv0MBhB0wljP8d5bUnz6KezPnBn7K1RJrX
TcwkK/xpiL9JMFWX92MoRWgyiXJ61W9Z9M8mkogBnjIbXrSjAaf42mbqTiO4/uxk
ZgEwU0KYRYJwzA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:07 2024 by rpki-client on console-fra.rpki-client.org