Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File:                     sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier:          BUTGlyrC6OlqLb2GTqJjmrZGvJG4pm3KPMT9tgVcu/0=
Subject key identifier:   6C:F2:69:4D:F5:07:D2:BF:C2:D3:54:6F:EE:FC:D4:8A:E2:F9:64:D4
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer:       /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial:       01901DED7B08C401E1494B9203DFFBAB1C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number:          048F
Signing time:             Sat 15 Jun 2024 22:03:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:41 +0000
Files and hashes:         1: DB4wjBrwL2eZkVrmW1g38rjMqpw.roa (hash: NThAzVn94D7QV7ccQk/9DFSXn/42WWXrBGFCNqEdMdk=)
                          2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: a12Gja9BYFxM+eMP8TlqeeWcKLxOSHbxz0krIeJ7P3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:7b:08:c4:01:e1:49:4b:92:03:df:fb:ab:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
        Validity
            Not Before: Jun 15 22:03:41 2024 GMT
            Not After : Jun 16 22:03:41 2024 GMT
        Subject: CN=6cf2694df507d2bfc2d3546feefcd48ae2f964d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:af:02:59:21:19:7c:3f:39:db:1e:d1:39:
                    6c:d4:1f:67:7b:ea:06:84:eb:e3:8b:db:7d:d0:83:
                    00:8e:47:19:2a:79:82:fb:f4:57:db:ed:f4:89:fd:
                    f8:5a:18:c4:c7:6b:f1:d6:60:5a:13:e8:3f:d8:f1:
                    47:90:16:74:e0:65:fa:e6:45:22:8d:dc:b6:cb:51:
                    56:6e:9b:fc:f9:2d:8b:36:97:9c:03:95:ec:92:35:
                    3e:36:b7:b0:29:05:db:35:99:c4:ea:fe:8f:bc:33:
                    16:c1:c2:4a:c2:cb:41:38:88:11:41:94:c3:e9:8b:
                    18:92:f1:06:dd:85:ac:52:0e:3d:5b:ce:e3:fe:7e:
                    c0:fe:25:88:9c:82:03:0b:d4:c6:51:dc:4d:83:ad:
                    56:d3:16:ef:ab:19:fc:9e:fc:8d:bf:73:58:b7:4c:
                    03:85:b8:3a:b6:e9:87:c2:13:49:d0:5b:09:55:c7:
                    80:4b:33:58:b2:02:9b:4e:ab:60:3d:e4:8d:a2:48:
                    86:55:3e:0f:e8:f3:9d:5f:2a:ad:31:9d:24:bb:fe:
                    69:ba:36:c3:c7:d0:c8:85:59:a4:5d:b8:f5:71:ed:
                    e2:36:80:65:47:f6:96:5f:4a:93:7f:29:f6:13:26:
                    d3:4d:40:73:03:66:94:82:77:e5:a5:31:29:cd:ea:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:69:4D:F5:07:D2:BF:C2:D3:54:6F:EE:FC:D4:8A:E2:F9:64:D4
            X509v3 Authority Key Identifier:
                keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:d1:d8:e1:b1:48:33:ad:81:85:a3:fb:76:f3:19:73:c6:
         79:6b:b3:28:d0:25:43:5d:44:ee:49:8e:3c:23:aa:da:91:54:
         9c:fb:26:07:f7:ef:21:d1:fb:a7:1b:22:46:3c:a5:69:a4:dd:
         7c:f6:93:df:ab:67:5f:ad:62:38:3e:f2:c4:76:e4:e5:b4:d2:
         20:ee:21:60:96:36:80:7b:54:6a:ae:59:a6:d2:7f:59:d5:50:
         ec:c7:65:5e:3d:0f:f6:08:6d:97:0b:65:17:a1:48:4b:07:1c:
         76:fd:83:cf:cb:68:01:10:67:0b:45:c9:87:58:17:f6:19:3e:
         fd:93:dc:9b:d7:91:d2:1a:c9:c6:b1:82:d5:54:a2:fa:12:26:
         7b:a3:df:e2:df:9d:e3:99:b6:f1:52:4c:82:95:59:f3:6b:57:
         c1:f3:73:b6:ec:69:40:7b:35:91:70:83:8c:da:de:59:2f:27:
         42:10:bc:d7:39:94:d8:44:72:b8:7a:62:30:7f:1b:19:b1:07:
         3d:c3:09:60:2d:b0:e7:4e:9f:47:d3:dd:bc:25:0e:e8:bf:fa:
         e8:24:8b:d9:bf:28:42:a5:50:2a:2f:b6:87:cd:d3:ec:11:11:
         dc:9f:10:b4:b2:67:b9:0a:fa:94:7a:9f:cf:eb:d8:3d:26:07:
         5b:b1:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:59 2024 by rpki-client on console-ams.rpki-client.org