Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          XddeQJ7NHHWIREUABU06www7RKu8q1GW6kDF8fcohpk=
Subject key identifier:   66:76:6F:83:1A:4F:B8:78:EC:9C:48:A7:DB:A1:21:2E:FC:93:C1:C7
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       019045665B0545C1D3607975865AA26B49BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 14:00:54 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:54 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:54 +0000
Files and hashes:         1: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: U2ArQL1igDuRfxc9THJFGqRrjYkzN1gTocZLKDOkfjQ=)
                          2: gdGrf4D9k-A_WQILKGoLnMoxWwM.roa (hash: +YNgVcHyd14shHgP1G9Qx20XMYPGvMOYpjF5wiwb8To=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:5b:05:45:c1:d3:60:79:75:86:5a:a2:6b:49:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Jun 23 14:00:54 2024 GMT
            Not After : Jun 24 14:00:54 2024 GMT
        Subject: CN=66766f831a4fb878ec9c48a7dba1212efc93c1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:a6:40:09:e9:3d:00:8b:c7:f9:f7:72:6b:
                    c9:35:ee:73:be:24:2f:52:bf:92:3e:98:a1:a4:5e:
                    bc:30:91:95:35:04:a2:47:d6:f2:62:ff:c4:74:06:
                    8c:44:07:3c:2e:d4:81:59:97:ab:11:42:cd:9e:9a:
                    fd:8a:62:31:c1:4e:08:1a:1e:20:62:f6:9b:a2:21:
                    61:31:9d:43:18:5b:75:64:cb:da:9d:00:de:bd:aa:
                    4f:de:ec:cb:f1:b1:57:b8:de:99:12:ef:e8:42:af:
                    51:b0:c7:70:d2:3d:5c:b4:6f:73:a2:c5:8b:a2:09:
                    be:b7:3a:ac:50:3b:8f:5c:76:49:21:32:77:b3:79:
                    40:13:59:f0:6b:19:14:07:e5:8e:a4:b6:25:2d:a5:
                    b5:a6:83:12:68:0f:5e:3a:52:34:3c:b2:42:1f:2e:
                    c1:ba:2f:1a:9f:8e:24:85:48:11:11:a6:52:9c:9d:
                    8e:11:85:9a:e5:1d:f3:9c:c5:ff:b5:50:d0:f6:fd:
                    4c:2f:9c:f1:73:c4:a3:82:8d:b4:67:77:15:f5:9e:
                    83:fc:b6:7a:10:dc:e2:c7:90:5f:f4:f3:95:62:06:
                    62:f3:4b:63:0a:93:99:48:85:0c:60:f8:8a:dc:32:
                    ee:10:91:1b:17:87:b3:99:16:5c:70:23:33:03:58:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:6F:83:1A:4F:B8:78:EC:9C:48:A7:DB:A1:21:2E:FC:93:C1:C7
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:9f:e4:25:31:09:74:f9:89:ae:fb:cc:8c:84:f0:32:66:
         8e:4d:7b:e4:dd:a8:ab:53:9a:9f:40:10:45:51:77:4d:3b:9e:
         c3:85:4e:b9:07:b6:45:5b:2e:9c:75:da:5d:da:6e:96:f4:ac:
         fd:33:d4:41:5f:9d:07:ff:32:ed:7d:35:45:29:26:0d:2c:f3:
         0a:d2:4a:33:6d:61:3a:a1:d5:51:7e:18:7f:00:53:f4:e3:af:
         3e:89:20:01:15:5d:f8:bc:2a:5e:85:7f:c6:6f:e8:3e:63:40:
         a6:db:64:02:a2:79:ef:50:00:91:c2:52:b3:a4:70:04:57:6a:
         9d:03:b2:2d:2e:8e:15:97:e4:5b:a4:02:7e:b7:09:b4:48:b7:
         48:e6:e0:0a:2f:d9:4f:35:11:63:f7:e6:d4:d4:07:9d:72:b3:
         a4:3c:8d:5f:e6:62:92:96:96:e7:7e:44:1a:e4:f6:6e:f2:d0:
         0b:ee:e4:51:fb:c4:8a:1a:04:0e:4a:30:60:62:c7:c7:65:d1:
         b7:6b:e0:a3:06:9c:33:5c:8e:39:74:bf:4c:bb:53:3a:78:f7:
         f7:64:ac:be:6c:28:41:8c:68:bc:a0:b1:e3:4d:7d:b5:5b:0a:
         0b:1e:0d:ef:08:4f:96:84:b4:5d:ed:4e:de:50:57:0b:5f:16:
         56:82:a5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZlsFRcHTYHl1hlqia0m+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjQwNjIzMTQwMDU0WhcNMjQwNjI0MTQwMDU0WjAzMTEwLwYDVQQD
Eyg2Njc2NmY4MzFhNGZiODc4ZWM5YzQ4YTdkYmExMjEyZWZjOTNjMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2OmQAnpPQCLx/n3cmvJNe5zviQv
Ur+SPpihpF68MJGVNQSiR9byYv/EdAaMRAc8LtSBWZerEULNnpr9imIxwU4IGh4g
YvaboiFhMZ1DGFt1ZMvanQDevapP3uzL8bFXuN6ZEu/oQq9RsMdw0j1ctG9zosWL
ogm+tzqsUDuPXHZJITJ3s3lAE1nwaxkUB+WOpLYlLaW1poMSaA9eOlI0PLJCHy7B
ui8an44khUgREaZSnJ2OEYWa5R3znMX/tVDQ9v1ML5zxc8Sjgo20Z3cV9Z6D/LZ6
ENzix5Bf9POVYgZi80tjCpOZSIUMYPiK3DLuEJEbF4ezmRZccCMzA1hMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ2b4MaT7h47JxIp9uhIS78k8HHMB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjif5CUx
CXT5ia77zIyE8DJmjk175N2oq1Oan0AQRVF3TTuew4VOuQe2RVsunHXaXdpulvSs
/TPUQV+dB/8y7X01RSkmDSzzCtJKM21hOqHVUX4YfwBT9OOvPokgARVd+LwqXoV/
xm/oPmNApttkAqJ571AAkcJSs6RwBFdqnQOyLS6OFZfkW6QCfrcJtEi3SObgCi/Z
TzURY/fm1NQHnXKzpDyNX+ZikpaW535EGuT2bvLQC+7kUfvEihoEDkowYGLHx2XR
t2vgowacM1yOOXS/TLtTOnj392SsvmwoQYxovKCx4019tVsKCx4N7whPloS0Xe1O
3lBXC18WVoKlZA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:39 2024 by rpki-client on console-fra.rpki-client.org