Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File:                     SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier:          Kij+AhKWkVYQdcmhurgS51o0aePX3f8mCP5TJ7IQHuw=
Subject key identifier:   4B:67:0A:2E:B4:D0:5C:1F:AA:F5:66:76:04:E6:05:01:07:85:B1:02
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer:       /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial:       01901E58C9A634D69362EE7F89219CB6F3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number:          078D
Signing time:             Sun 16 Jun 2024 00:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:53 +0000
Files and hashes:         1: 4EBp0kp452xf6on3ojDbYnWhVFQ.roa (hash: Qb5tHt+TKo/XOzbwT1q+nvOyv2D/Mvkx+MmqUoNELJU=)
                          2: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: fCIOrOnADf9V9MdWrJCWIPvEC0XqJJf/M7tdjxEcGt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c9:a6:34:d6:93:62:ee:7f:89:21:9c:b6:f3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
        Validity
            Not Before: Jun 16 00:00:53 2024 GMT
            Not After : Jun 17 00:00:53 2024 GMT
        Subject: CN=4b670a2eb4d05c1faaf5667604e605010785b102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:92:28:d0:78:cd:fb:f6:67:1a:1c:f7:5d:
                    2c:04:c2:dc:6d:74:15:bb:63:ae:af:8b:38:16:8c:
                    01:df:b4:f5:27:99:03:97:bb:c5:06:f0:7b:bd:9c:
                    72:ee:66:60:7f:8c:58:d2:fd:f4:27:67:c7:71:93:
                    45:c7:96:90:b8:45:d4:30:a2:7a:57:59:93:0d:ec:
                    45:51:bb:e9:62:6f:01:bc:25:1b:4f:f4:a2:fc:3b:
                    6c:b7:2e:9c:36:f3:72:2c:fe:2f:ee:9c:00:b0:70:
                    a0:f6:8a:81:87:32:ac:1a:ef:c3:74:9e:ce:b7:2a:
                    0b:cd:21:f4:89:1f:de:64:83:70:6a:d5:44:41:8d:
                    6d:98:d1:69:4b:23:8c:45:9d:6b:6f:d5:ec:84:81:
                    29:ff:51:26:c1:82:47:e8:71:8a:e7:dd:24:b9:70:
                    95:ba:e5:ec:68:d3:aa:70:82:03:82:c8:89:36:53:
                    d7:7a:38:13:f2:a5:dd:fa:11:bf:80:07:f1:70:7f:
                    b8:ce:ea:dc:7b:8d:21:a8:42:55:30:10:46:24:7e:
                    3b:73:87:a0:ce:b1:10:3d:b9:61:d9:03:5e:4e:00:
                    f1:d4:e4:c4:3f:f7:b6:a3:a8:ca:38:ee:13:61:38:
                    26:90:42:e6:af:38:75:71:e0:c9:5f:c8:29:9b:f3:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:0A:2E:B4:D0:5C:1F:AA:F5:66:76:04:E6:05:01:07:85:B1:02
            X509v3 Authority Key Identifier:
                keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:39:23:30:4a:a7:a0:fe:a7:db:eb:ad:f7:5c:10:59:17:4d:
         aa:ea:eb:9a:11:b6:45:a5:61:85:55:aa:e1:8a:88:30:3b:e3:
         c8:3f:82:04:fa:60:33:c4:df:a4:52:97:e8:d9:34:f7:50:8e:
         0f:bd:e3:fb:d7:61:54:41:c1:c0:03:f8:b3:8f:b0:83:e4:c0:
         08:fe:42:bd:21:fe:e4:15:75:9b:09:e6:95:25:1e:9d:15:e4:
         2f:a3:a1:b4:90:ef:8e:e7:e6:3b:d2:89:a9:86:f2:96:2f:dc:
         e5:65:67:1b:85:e8:b9:0e:da:2a:f4:dc:91:f2:ba:a7:7d:a4:
         8f:20:6a:a3:24:b0:71:6a:0e:0d:86:72:37:69:1b:27:d9:0e:
         37:04:3d:2d:fb:15:da:90:20:77:31:19:f7:94:e2:a4:54:77:
         b5:f5:ae:cc:fa:85:21:7a:c4:b8:c6:5c:10:37:e6:ae:49:c7:
         46:56:ad:10:fe:f4:20:15:07:c4:27:82:84:0d:1c:8c:b8:f5:
         66:f9:72:31:63:51:d8:49:ff:86:8e:1d:52:87:b7:aa:55:34:
         b5:1c:cb:43:73:53:19:fc:3d:33:1a:74:c7:75:6c:f0:10:c6:
         67:87:5a:b5:ef:fa:dc:b6:28:35:54:e8:59:da:6e:a9:d6:2e:
         b8:03:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:23 2024 by rpki-client on console-ams.rpki-client.org