Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File:                     SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier:          DeUUdjRbj08idbOXhG1QpGEBcvVFEhMXZQlTJMW7XMU=
Subject key identifier:   89:01:38:CD:1C:68:D5:49:F1:5A:9D:A7:15:C4:97:46:D7:A6:3B:7E
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer:       /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial:       01901DEB0415A3F9B133624CEC9222B8725A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number:          0809
Signing time:             Sat 15 Jun 2024 22:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:59 +0000
Files and hashes:         1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: +V/Mn8E9C+rgdz6v5G26qnblpNKtkMgImpyLfAZHAfk=)
                          2: zJp3SNOr_8ddqMK5l2DferSbfas.roa (hash: X55i4VnhjONf1BomWCuFB3kGbemWBgrv5K0g+AdaITM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:04:15:a3:f9:b1:33:62:4c:ec:92:22:b8:72:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
        Validity
            Not Before: Jun 15 22:00:59 2024 GMT
            Not After : Jun 16 22:00:59 2024 GMT
        Subject: CN=890138cd1c68d549f15a9da715c49746d7a63b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:a8:33:ed:6c:6b:9f:5a:13:4d:9d:ad:26:
                    b4:22:0f:84:41:66:c6:d3:26:f5:db:d5:b9:e6:b1:
                    42:60:e3:4e:26:d1:b6:47:7b:5b:93:0b:ab:f5:75:
                    1e:52:b3:55:ef:46:4d:51:31:35:82:34:a8:66:7b:
                    7b:84:6f:26:30:d2:a7:68:87:38:94:ba:00:4d:77:
                    60:f8:f5:d1:e8:cc:60:a5:5a:9d:54:09:8a:b3:e2:
                    74:69:95:fd:60:71:a2:68:ea:a5:a0:21:15:fe:48:
                    c3:02:99:f6:b4:df:28:24:f5:83:f3:3a:e3:e6:f5:
                    a1:ba:08:66:8d:40:a0:b9:ed:fe:7c:52:4f:1a:51:
                    80:e0:28:3e:c9:00:19:e7:f9:33:75:ea:dd:21:a0:
                    3b:21:ab:9f:10:db:08:50:90:e0:9e:1f:6e:2e:b4:
                    0a:66:ca:fa:6d:e3:39:49:63:98:eb:9b:05:4d:54:
                    14:c7:da:a6:0f:8a:00:71:14:e2:68:fd:2c:72:42:
                    bb:ac:ff:fc:84:52:12:05:25:96:e7:a5:e2:8e:61:
                    58:b0:cb:8d:32:0c:02:b7:50:3c:00:41:03:ab:03:
                    75:8e:6a:ba:53:e7:04:77:3b:0b:ab:51:64:c2:78:
                    33:c5:b0:1f:fb:5d:ca:86:45:e4:31:97:98:19:49:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:38:CD:1C:68:D5:49:F1:5A:9D:A7:15:C4:97:46:D7:A6:3B:7E
            X509v3 Authority Key Identifier:
                keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:0d:32:c6:0a:0e:a5:65:d6:39:a7:16:30:f2:41:31:6a:
         a0:63:ec:99:2a:70:c8:37:88:01:3c:e0:7b:f8:09:74:68:66:
         dd:d7:c7:0a:34:6f:d3:85:ce:6e:b9:6c:36:88:41:9a:0a:62:
         2a:f0:64:6b:64:01:65:a3:55:5e:11:9b:13:61:ef:d3:35:02:
         97:85:b1:5f:ee:2a:70:49:5d:cd:96:a2:0e:d4:99:fe:9a:78:
         4f:15:29:c2:58:15:93:69:d7:11:9a:ed:b2:72:60:f2:67:8c:
         7b:7e:71:63:81:68:9a:4d:93:a2:f4:77:9e:d3:af:8c:63:39:
         c8:79:36:0f:48:e8:80:67:7c:3a:63:8b:a6:10:a9:28:c3:bc:
         22:59:dc:a5:5b:e6:73:84:0d:c9:77:05:55:d7:af:3b:a6:27:
         37:39:e9:67:fb:1a:ef:e2:b4:1c:d8:53:68:d7:5b:f2:99:d9:
         cb:2d:89:8d:a3:d7:85:40:55:31:93:0a:01:31:3f:00:30:61:
         be:12:44:d3:7f:29:50:fb:ba:b7:91:d7:ea:c9:f0:d4:24:73:
         29:14:c6:bf:4f:da:ab:49:06:42:02:21:6b:4f:5a:e9:97:8b:
         6e:e6:8d:65:75:3b:69:1e:ef:6d:81:3e:f2:64:0d:c6:40:08:
         0a:7e:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:13 2024 by rpki-client on console-fra.rpki-client.org