Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          ZbER1rQhE1O39yoz53xW6mXs1z5CFnsyt7/MhmS7Cyk=
Subject key identifier:   5B:5E:F6:D7:40:C1:B8:7B:A1:22:72:DF:81:E4:76:86:B6:4B:FE:AF
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       0190335FD0C2BDE5054D6E9A5942F0C4ACC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          0FCE
Signing time:             Thu 20 Jun 2024 02:00:35 +0000
Manifest this update:     Thu 20 Jun 2024 02:00:35 +0000
Manifest next update:     Fri 21 Jun 2024 02:00:35 +0000
Files and hashes:         1: 7kOO2EcY9KRJheV_ECnPzGVramk.roa (hash: ViA3SLPnPDDxLiVkgH/9jf+H71qJYGJkDud+/ednBCQ=)
                          2: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: 4x53EUjgCqVNkEqvVJCUN1qsKzWZE+N7buxbiK+uahk=)
                          3: Yhgb0ysi2mI3of8KMnRrt3pFG3c.roa (hash: zCM3HyPqyiWLeMiz0aJRY/qz4RvgHTe0/7vAOudW+Es=)
                          4: _Nq2qKBOpf_4kBrga5fPyO1nD9Y.roa (hash: gCxJb7CZZFfPwOyK2kRkK2PJ5UQ0Bi3tlx9tULheFb8=)
                          5: hv1f4U3Orb2kg1dCV40dZaRsxf4.roa (hash: rbCZA3ADN6ZOEwo1yknc0JkyckBJO5rHPMmcQV1xW+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:5f:d0:c2:bd:e5:05:4d:6e:9a:59:42:f0:c4:ac:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jun 20 02:00:35 2024 GMT
            Not After : Jun 21 02:00:35 2024 GMT
        Subject: CN=5b5ef6d740c1b87ba12272df81e47686b64bfeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cf:09:a8:b8:8a:e1:23:a6:15:e0:61:ce:05:
                    f4:ff:b7:b9:3d:3b:54:d7:ac:76:a6:b2:a3:fd:df:
                    84:f7:a9:8d:3c:70:14:5a:07:e2:08:b4:d2:16:16:
                    31:52:4b:ef:95:5b:ee:90:43:44:91:8b:ae:7a:15:
                    7f:a9:b5:39:83:a9:13:c5:c7:6c:c3:51:92:6d:9f:
                    da:c3:b6:f1:aa:70:ae:11:18:7e:c8:72:4f:28:e8:
                    a3:42:26:6c:cc:9e:68:e6:94:3e:64:b6:70:9a:4b:
                    38:88:21:70:52:da:66:f3:53:3e:34:60:48:81:9a:
                    59:7d:b1:0d:80:69:a7:08:aa:e3:df:cd:d2:b2:7a:
                    ee:5e:57:c3:c7:91:83:60:d5:62:e5:ca:a4:cf:ab:
                    ff:60:17:68:02:2e:02:52:47:13:61:52:59:9c:fa:
                    54:c0:9e:68:7f:77:5d:50:d3:13:5e:03:1f:33:2a:
                    d5:b9:35:27:08:01:c7:5e:49:03:65:ed:bf:61:4c:
                    4a:cd:cc:b9:cf:7c:fa:1a:88:30:6d:5a:ce:8f:d0:
                    4f:2b:70:40:53:23:96:31:a0:0f:d8:a3:f0:2e:b1:
                    71:dc:4f:3b:1a:6d:6e:91:01:55:9e:82:d3:0a:d1:
                    c1:e5:e0:3c:1c:ff:12:56:18:7a:a3:cf:05:09:16:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5E:F6:D7:40:C1:B8:7B:A1:22:72:DF:81:E4:76:86:B6:4B:FE:AF
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ec:6c:37:81:94:78:bd:60:b3:c2:2a:95:74:fc:f6:c3:fd:
         a5:9a:22:57:b2:61:88:5e:4b:fa:fb:a0:34:98:37:4b:4f:d1:
         c6:7d:7c:4a:d3:58:f9:a9:b9:86:67:cf:4b:03:17:33:77:3a:
         37:7a:0f:bb:5a:4a:1e:01:b9:4b:8b:a9:b0:be:6c:ff:c2:43:
         ea:5e:b1:70:8d:01:e9:51:f5:6b:9c:20:84:3e:8d:e7:fc:f4:
         6f:0b:aa:bb:58:26:73:be:31:6a:c7:f1:60:27:34:de:bf:41:
         bc:ba:7a:9f:f4:2f:d9:ec:5d:ef:d6:c4:25:e3:7d:2c:6f:52:
         09:4f:18:96:c4:ee:43:62:66:99:a8:40:76:0d:84:3a:0b:d5:
         85:f6:7b:56:20:33:59:0f:26:69:97:a0:a5:e2:e4:3a:b8:be:
         8c:28:68:6f:11:e6:f5:5f:88:56:39:01:31:62:e8:50:8d:7c:
         4a:e1:5f:f9:43:c3:ed:83:62:7e:cd:ca:f0:b1:02:37:25:ac:
         7a:e0:22:20:47:66:aa:9e:f2:bf:11:2d:94:7b:90:5c:be:eb:
         b1:a0:29:67:eb:19:de:e2:14:e9:5b:48:f0:e6:ea:c4:eb:03:
         7a:71:db:e5:2e:1a:45:fb:e0:e9:72:72:67:b6:e4:10:f8:3e:
         76:07:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:07:33 2024 by rpki-client on console-fra.rpki-client.org