Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          J3Hy+NNxs2kV7T9z6jitxtQAZVXXSO68t2fXKMuA3gM=
Subject key identifier:   2A:AD:14:9A:96:D2:66:BA:79:96:CB:A3:05:8A:0D:C1:A7:2D:CE:3A
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       01901DEAE9FCDA865B40BDDD11E0E4F8695C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          05C9
Signing time:             Sat 15 Jun 2024 22:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:52 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: 0r7EQDxkM29Hj90FtWJKVXleIfvC3xtEnnH27qZ5YPU=)
                          2: T9t9OE-bq6IuzHn9tsTExsp7Lss.roa (hash: NuJSzGbfK84q0LNak9etGdjMRFA2QtdntT43eRuiufA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e9:fc:da:86:5b:40:bd:dd:11:e0:e4:f8:69:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Jun 15 22:00:52 2024 GMT
            Not After : Jun 16 22:00:52 2024 GMT
        Subject: CN=2aad149a96d266ba7996cba3058a0dc1a72dce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d3:6f:79:da:6b:b0:2f:69:df:1f:52:48:ca:
                    94:b1:2f:4d:0a:d5:d1:2f:2a:6a:e7:1e:f7:c5:64:
                    01:79:f7:83:07:31:80:d1:e4:bb:ad:7e:3e:ea:94:
                    0d:b4:aa:b9:24:ac:b0:de:51:01:22:6b:c0:f1:c4:
                    8d:63:e9:b7:fb:7a:83:c9:8b:99:cc:69:ed:2d:c1:
                    ca:f5:f3:21:8b:28:0f:4e:f9:35:65:52:3c:bc:62:
                    53:28:3e:3f:50:c2:18:80:bc:15:c4:41:6b:0d:ec:
                    72:8e:2a:ce:ca:7b:e5:7d:1c:eb:b6:7a:e7:8f:3d:
                    3e:94:45:65:31:64:e7:15:c7:33:5d:5c:3b:3e:9d:
                    52:d0:f5:73:9b:98:81:dd:0a:0b:89:6e:03:00:51:
                    15:6c:27:8e:5f:72:65:fc:94:31:64:b4:40:37:db:
                    8f:e5:ac:28:c9:4b:bd:0f:19:e7:e2:10:2d:96:ef:
                    fd:1d:51:57:38:80:6e:88:21:5e:dd:a4:64:09:a1:
                    90:a1:35:50:a2:26:a0:91:4b:b5:20:e6:c6:e8:ed:
                    d2:86:2e:4e:d0:cf:61:84:c5:64:5c:14:c4:8e:cb:
                    3d:90:3e:a5:94:28:18:1a:ff:7d:45:e5:a2:f3:fa:
                    4b:43:5e:39:c7:95:f9:79:0b:5c:b1:af:d9:19:9c:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:14:9A:96:D2:66:BA:79:96:CB:A3:05:8A:0D:C1:A7:2D:CE:3A
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:22:4b:e9:68:99:ee:ff:3f:dc:30:da:cf:2a:97:75:58:
         9c:26:6b:55:c4:ba:c7:e5:25:1d:c5:1a:19:c4:fc:34:03:7b:
         65:d0:13:70:56:a1:e6:9a:3c:be:35:d3:24:6b:95:81:05:47:
         67:59:0b:77:d4:0d:d6:c9:6f:c1:1c:21:91:b0:91:00:fe:8a:
         16:c9:ce:50:9a:ca:f7:5b:59:0d:2b:7a:77:be:be:43:1c:2a:
         dd:5d:37:88:5b:5d:c9:04:38:24:75:88:d1:21:9f:53:29:8f:
         d0:ca:7f:d4:ea:0a:44:cd:c0:82:b0:89:cb:9d:6a:b3:c1:e0:
         af:a1:d8:b8:37:c2:7c:14:aa:e3:ee:ad:2b:bf:4f:b2:17:3b:
         bc:83:43:20:7d:11:c3:e0:84:15:d8:44:ad:ee:03:bd:8d:07:
         4a:fd:66:4d:39:df:e3:19:36:97:12:c9:6d:98:47:a6:e9:e7:
         c9:49:a1:73:bd:de:63:24:30:c9:e9:00:3d:4d:bb:fb:59:57:
         a7:de:94:75:29:e6:e6:b3:dd:9b:97:3f:82:5d:94:ee:b2:78:
         7b:c2:b4:6c:36:44:aa:bc:dc:5c:5b:8b:e0:bf:ce:4b:7f:fd:
         ec:e7:eb:50:bc:f5:2d:7f:15:48:53:bf:f8:a6:0d:aa:e4:40:
         a5:68:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:35:45 2024 by rpki-client on console-ams.rpki-client.org