Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          /N6aE+7WFM70wuMbMxveZNTKJED9V8wTiskNJsdZZ8c=
Subject key identifier:   8C:9D:32:6B:69:EF:05:6F:36:3A:D7:20:6A:58:DF:D6:56:B0:80:00
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       01901EC70911A3934F2FEF2BC2A0E7EF06E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: 4f9VISYrKEaDFqHFD7pveX5KfmbFh9QXvAGTiqq8op0=)
                          2: gdGrf4D9k-A_WQILKGoLnMoxWwM.roa (hash: +YNgVcHyd14shHgP1G9Qx20XMYPGvMOYpjF5wiwb8To=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:09:11:a3:93:4f:2f:ef:2b:c2:a0:e7:ef:06:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=8c9d326b69ef056f363ad7206a58dfd656b08000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:83:2f:b7:8e:1e:30:45:b3:3f:dd:56:c3:
                    45:0f:b7:b7:b4:27:83:02:29:1a:97:df:b3:12:43:
                    dd:e7:1d:52:e6:a8:f0:31:3e:13:07:55:0c:81:d6:
                    ce:79:cf:c7:fb:4c:bd:b8:ac:1b:ad:21:22:38:7b:
                    96:b4:85:4e:cc:29:1f:12:0f:75:a6:a6:69:1e:18:
                    59:90:f6:71:09:92:6e:ee:08:1c:71:be:1d:96:48:
                    0d:d7:66:a1:64:0d:1b:7b:a2:3a:d3:47:9c:5a:d7:
                    80:2b:30:8a:f4:c6:08:9a:6f:a8:18:ab:6b:b4:44:
                    6f:07:6e:e4:aa:12:04:a5:2c:76:eb:3c:00:7f:bc:
                    1b:3b:ce:86:1c:54:d7:06:6a:1b:4b:8c:75:2f:7e:
                    b1:3d:fb:12:1a:cf:fd:c6:36:72:8e:27:5d:b6:fd:
                    fe:cb:11:f6:d1:a4:e8:1a:73:4f:51:f4:e1:68:4a:
                    56:61:a9:bb:ff:19:58:b8:f5:4e:29:d3:63:cf:0c:
                    2a:de:5a:3b:bb:8a:48:e0:cd:0f:98:cc:ef:50:c5:
                    61:b4:9d:0b:67:29:05:77:89:31:85:ef:c8:0f:70:
                    c7:b0:ce:50:69:b8:66:a1:05:82:d8:d7:73:c8:a7:
                    88:17:49:df:01:65:30:53:67:33:96:d0:93:c6:57:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:32:6B:69:EF:05:6F:36:3A:D7:20:6A:58:DF:D6:56:B0:80:00
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:70:8d:58:be:cd:c7:4d:55:a3:02:b4:16:d1:a4:20:17:
         3b:85:9c:93:7a:28:4d:66:7f:fb:78:96:ca:5d:15:9d:2c:4b:
         58:00:74:75:81:b1:86:36:3d:22:66:bd:35:23:01:e0:df:7b:
         df:d0:3d:a6:ce:7b:85:2b:4b:a8:e1:6a:b7:ce:55:54:90:43:
         50:9e:e6:69:3d:c2:cf:ba:26:9c:1e:3c:7f:f8:36:12:71:c7:
         96:c2:08:f8:22:81:6e:91:dd:8c:5d:e0:0b:e6:82:d2:ae:20:
         06:7d:0d:e8:23:4f:88:c0:8f:b5:b4:6e:47:cc:aa:5b:7b:31:
         23:26:10:9d:bd:71:8a:9d:10:e5:b2:83:de:5c:ad:25:01:21:
         9c:cb:c0:aa:9d:49:1c:99:d9:7d:ad:74:6b:f2:9d:fb:f1:ba:
         2d:10:e3:ec:7e:69:a3:5a:86:4d:6e:68:fc:36:c6:fd:f2:07:
         c6:94:f9:4d:27:84:27:7b:e5:4e:cb:51:61:27:96:32:51:ea:
         96:3a:9c:9d:97:9c:f7:b2:ee:6f:f0:40:97:8b:15:69:9b:5f:
         79:f5:2a:9d:b9:cb:ac:4a:4e:09:2b:53:9b:d4:c3:52:78:66:
         67:b8:a0:46:a5:10:ac:1d:a7:ae:0d:ba:a2:0d:e3:69:9a:9c:
         9b:ff:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:04 2024 by rpki-client on console-fra.rpki-client.org