Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File:                     sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier:          Z+yJ6Syg7snFKRRrzr/2yk0+SBTUKan0EmehzwsZWvE=
Subject key identifier:   07:22:05:B9:82:0E:EB:8A:A0:E7:BC:59:15:5C:1E:C9:58:34:68:9B
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer:       /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial:       019040B02C332F905570F791BD7284A91C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number:          1158
Signing time:             Sat 22 Jun 2024 16:03:25 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:25 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:25 +0000
Files and hashes:         1: q_zVIv3ZSx5Y50mZpDM4yd3uS1w.roa (hash: zvt3Da8THyJuHO5B7Ksy/vw1qXi643t1ahcbx4oJCBI=)
                          2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: v4ZvyihXSDZB9pG+2FL72pkGl1YldBeaj389RM8Cxic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:2c:33:2f:90:55:70:f7:91:bd:72:84:a9:1c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
        Validity
            Not Before: Jun 22 16:03:25 2024 GMT
            Not After : Jun 23 16:03:25 2024 GMT
        Subject: CN=072205b9820eeb8aa0e7bc59155c1ec95834689b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:10:d1:35:42:1a:85:fc:27:e6:fd:2f:47:
                    3b:dd:a0:06:c1:76:0f:db:5d:f3:f6:95:f7:73:ff:
                    a8:8e:bf:80:48:f6:b5:ed:a9:3e:7a:76:95:98:a3:
                    b8:96:9d:61:e0:ab:6f:33:b2:36:96:b8:a8:5d:96:
                    0d:53:86:1d:83:9e:5e:2a:f7:77:d8:47:4d:df:4f:
                    d2:90:c8:b1:f6:89:be:f1:5c:1f:cf:5c:d6:16:71:
                    84:ea:37:92:7a:5e:47:61:f2:db:09:b0:12:56:aa:
                    49:5a:ba:d8:28:11:d5:b9:9a:38:dd:e7:b6:5e:4b:
                    24:67:66:32:60:9c:65:f2:4a:a4:b6:fa:e5:c2:75:
                    a0:17:1b:85:b9:13:67:b7:9e:52:57:bd:b4:12:0e:
                    5a:ae:df:1f:8f:24:22:ad:78:bc:97:8c:f6:dc:17:
                    5a:ae:ca:66:ad:a0:6a:5c:65:69:c3:17:ed:a9:a6:
                    24:02:6f:a5:19:fb:87:a5:16:26:9f:5f:91:e8:a1:
                    db:1c:a3:b0:fb:27:7e:96:e7:9d:27:79:c5:35:89:
                    f4:ce:50:32:14:fe:bd:0e:7f:dc:d3:02:c1:7e:94:
                    1f:36:d3:ba:90:0c:86:07:22:8c:31:42:8f:e0:b5:
                    3a:11:fb:c4:56:b7:fc:bb:d6:41:5b:5f:d8:7e:0f:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:22:05:B9:82:0E:EB:8A:A0:E7:BC:59:15:5C:1E:C9:58:34:68:9B
            X509v3 Authority Key Identifier:
                keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:eb:9f:b4:59:fa:ba:81:48:03:94:e4:eb:e8:81:ff:27:
         d3:a0:94:a8:ca:0a:e5:51:eb:40:c7:78:15:09:d6:a5:22:71:
         b5:02:af:8d:99:a5:35:eb:a8:14:f3:7d:a5:49:6e:a6:3b:7e:
         be:c4:0c:0b:98:eb:0c:1d:12:4b:19:9c:93:91:bf:ac:79:2c:
         8e:c1:17:1e:e0:29:6f:96:96:1d:af:8a:a9:43:31:35:0e:14:
         5a:22:5e:19:77:1b:a8:2c:9c:fa:72:6e:cd:f7:38:1c:93:e9:
         c0:05:33:c0:d9:10:48:08:57:c6:fe:86:28:ce:d6:1d:6c:8c:
         00:16:7d:06:65:ea:6a:92:f2:ff:14:ed:90:9e:53:8d:28:8a:
         0d:f9:16:54:1d:c4:69:21:d9:98:98:cf:00:f9:2f:70:e3:e3:
         87:20:b1:ae:e6:35:04:ed:ce:af:c9:d6:34:8c:99:79:47:35:
         fc:4c:a2:d4:ef:06:2e:ea:4b:3a:8d:ea:e9:28:a8:83:01:76:
         ff:34:2e:91:d2:c7:a9:45:38:e9:f1:d0:d3:e5:55:b0:f8:d4:
         dc:b3:3e:27:56:17:74:fa:6f:1f:aa:9c:1c:ab:60:af:31:a9:
         c5:70:da:32:57:1c:75:ef:0b:43:99:6d:df:bf:0c:de:4c:a0:
         dd:3a:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:49 2024 by rpki-client on console-ams.rpki-client.org