Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File:                     SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier:          u5lbRZ79rMjb+TB4lDwpABJ9jmDRapmB6EeQ1oB+EL0=
Subject key identifier:   09:47:88:D5:C7:2F:E1:67:4F:AE:AA:D4:00:00:DA:B2:0D:27:8F:7D
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer:       /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial:       01901DED9F3BD26EC9381232AAF384C990FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number:          0A9A
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: f69BdYeDOimXx0tkgUE+F1MrDfroUqSsO+hQtM9JfEY=)
                          2: xS7RNTqCJXEqfO4r_LFu99a1G2c.roa (hash: LEkHeIdZuVNnCKqk6FI6ADiIZnnjWKRpmOgQemvk60Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9f:3b:d2:6e:c9:38:12:32:aa:f3:84:c9:90:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=094788d5c72fe1674faeaad40000dab20d278f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:0d:b5:3c:d1:27:0e:e2:70:66:b8:61:6c:
                    ee:5c:2a:71:67:d2:71:95:82:87:27:9e:22:fc:a8:
                    cd:40:b3:cd:5d:d4:09:b5:e9:68:e2:7c:13:ce:b0:
                    36:25:b1:cc:87:5d:4a:f6:7a:8d:58:27:16:33:5b:
                    b7:1d:cc:2b:34:e7:e9:bb:55:61:de:d5:d9:ae:d8:
                    a0:d7:b6:f4:84:7d:92:78:df:d0:91:2c:7e:55:9b:
                    61:85:e6:ca:fd:4b:11:68:3f:81:c9:71:5d:e9:1a:
                    26:ab:16:2a:74:9d:22:cd:2c:84:03:c6:29:de:5c:
                    31:d0:c5:88:82:62:2f:a0:90:3e:23:3a:12:e0:60:
                    26:e3:5d:dc:2a:0e:19:6f:ed:d1:fa:fe:22:9f:47:
                    34:f5:c1:47:88:36:4d:83:3d:f1:85:b4:3e:67:9f:
                    eb:72:e3:a1:af:28:0a:78:81:4d:5a:7e:d1:87:a1:
                    c7:e3:bb:a0:c9:5e:10:89:5e:6f:7d:d9:fb:10:68:
                    44:8f:5f:b5:eb:3e:55:9f:bd:7f:d0:30:c8:c7:54:
                    5f:e1:91:d5:f9:e3:83:c7:3c:95:12:82:00:60:59:
                    90:f4:69:c5:df:85:83:38:90:56:27:21:2d:e6:ce:
                    a9:ba:ce:7e:64:0f:3e:aa:b9:40:be:7c:0e:da:ac:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:88:D5:C7:2F:E1:67:4F:AE:AA:D4:00:00:DA:B2:0D:27:8F:7D
            X509v3 Authority Key Identifier:
                keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:44:90:73:3f:b4:78:c5:03:38:4d:bc:ef:c1:e2:22:a9:
         f2:ef:53:8e:2d:d3:7b:81:6f:10:ea:8c:32:95:7c:72:d9:9a:
         b9:1d:68:01:f0:a3:ee:d1:01:86:df:01:4e:c5:dc:d5:57:e2:
         4c:eb:77:0d:90:6f:ab:35:3f:6c:cc:0a:43:6a:06:8f:6c:62:
         44:ca:f7:e6:04:9f:93:9d:e8:27:e2:9d:b6:91:3b:d8:32:e6:
         49:68:64:1d:65:6e:5b:26:41:84:a6:73:57:40:8a:d7:8d:90:
         84:8a:40:1c:46:1d:68:a5:da:32:08:fd:9b:bc:e0:d2:3e:70:
         88:57:eb:90:d0:58:61:a5:f9:ea:b2:1b:95:a7:bc:43:c1:cd:
         05:3a:8c:89:3c:c1:cc:be:51:d2:cd:f3:d6:d8:87:9e:26:85:
         d8:b7:55:94:95:e6:f0:3d:8d:20:ee:85:a9:f6:49:d6:d7:d6:
         b1:79:f3:c8:6b:63:4f:7b:84:be:75:b0:ff:c0:f5:39:c6:84:
         89:78:cf:37:7a:8c:76:7d:3d:b8:b7:76:39:de:cd:f0:11:b1:
         5a:a6:99:a8:5c:6d:0d:98:ff:8a:f8:9e:6c:47:40:e6:e0:36:
         19:13:58:ef:10:ea:de:18:5d:83:64:4d:f6:c8:f9:5b:73:ee:
         a6:a3:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:37 2024 by rpki-client on console-fra.rpki-client.org