Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File:                     SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier:          ZGsFe/HY0R2NOl33ucwVkEavdtD5NgfnTlR4ZdODFek=
Subject key identifier:   E9:54:4C:FF:0A:3C:17:1C:86:55:AD:AB:A6:E6:64:B0:E2:9F:A6:E1
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer:       /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial:       01901EC6F327AB517D8F1B585CA7AAA9BDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number:          0DCD
Signing time:             Sun 16 Jun 2024 02:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:13 +0000
Files and hashes:         1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: /SG92wiJqyC97b2iPiEMrmsJI/WXRN43v1fpz4I0Inc=)
                          2: pvkG__b3VOiYsbcSgy3you7V8es.roa (hash: QGXawp/g300QNLGy8h780GCJUzSC3GGjn+LGYvocEWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:f3:27:ab:51:7d:8f:1b:58:5c:a7:aa:a9:bd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
        Validity
            Not Before: Jun 16 02:01:13 2024 GMT
            Not After : Jun 17 02:01:13 2024 GMT
        Subject: CN=e9544cff0a3c171c8655adaba6e664b0e29fa6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:17:6d:be:df:cf:68:21:40:1d:cf:3e:5e:
                    42:36:13:3e:01:e9:b8:62:d7:e8:94:64:8c:90:f8:
                    8c:9a:17:d9:a6:f6:b5:ed:65:c0:7a:13:46:3b:f9:
                    d7:e9:89:a0:5e:7a:cb:22:3b:8d:96:4c:e7:31:4a:
                    26:cb:21:d6:db:43:28:46:9b:17:d0:ed:e3:5c:0d:
                    ea:ec:f3:60:1a:06:81:82:a8:89:ae:59:22:16:cd:
                    0b:34:0b:1a:cf:df:fb:e4:5e:be:e0:96:5a:60:6a:
                    bc:23:21:54:0c:c6:82:ec:fd:1f:66:d4:ac:cc:19:
                    d0:25:a5:4d:b6:22:3f:57:a2:5b:16:3e:3b:64:b4:
                    b0:f8:49:1f:9d:e8:40:0d:05:6d:2b:02:77:d1:68:
                    3c:9b:05:4a:af:12:66:cc:ec:a6:8a:4c:00:a7:24:
                    50:9b:35:62:61:6c:86:d8:45:0e:86:27:7f:8a:cd:
                    64:83:9b:b6:5f:61:e7:bf:55:3e:6c:77:f8:b9:27:
                    46:53:07:8d:d3:8d:30:ad:e7:89:e5:d8:16:09:2a:
                    7b:80:08:e4:a5:f1:2f:00:50:d6:7d:f8:dc:c5:33:
                    19:6d:6c:c2:11:f4:50:e8:37:92:53:d2:22:5e:64:
                    7d:55:ca:36:9e:ea:be:e5:15:63:0a:23:b6:8a:0f:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:4C:FF:0A:3C:17:1C:86:55:AD:AB:A6:E6:64:B0:E2:9F:A6:E1
            X509v3 Authority Key Identifier:
                keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:d4:56:af:51:80:4c:1a:77:99:8f:c6:41:9d:0d:94:6d:
         45:10:0c:eb:4f:07:5a:d3:78:e1:aa:8d:c4:51:73:d8:28:f7:
         8b:01:06:28:f3:dd:a6:27:b6:e8:5d:20:1c:0d:1c:25:e6:18:
         29:ff:45:9a:42:32:73:e1:75:af:82:53:96:df:5e:9d:ff:24:
         b5:72:68:8e:41:9c:3e:d3:93:1e:8c:78:49:ba:fd:37:9b:ab:
         7c:31:00:7f:4c:6c:8f:61:bf:9c:90:09:56:c8:d2:92:3a:2a:
         07:83:de:cb:78:ac:9e:a7:d7:c1:10:80:71:81:8d:99:2e:39:
         cd:5f:cf:a3:f6:f7:0b:00:e1:00:ee:25:5f:26:1e:6a:3a:11:
         2e:56:5b:c8:01:83:98:8f:ed:bf:40:b8:85:27:dc:91:d4:0b:
         30:38:84:53:c0:7b:e3:69:75:b6:53:0b:fc:1e:90:af:aa:8e:
         c4:04:7b:e1:53:8d:bf:88:14:da:44:6b:e7:dd:e2:fc:76:dc:
         c7:eb:69:29:21:ef:b3:48:a4:f7:1c:49:74:92:55:3d:e4:42:
         a2:e4:f4:a9:7d:44:7b:d1:a8:a2:f2:cc:34:35:e8:94:e5:fc:
         1c:9e:a3:d1:aa:9b:c8:e1:77:97:b4:2e:fa:cd:ae:18:69:87:
         d7:00:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:33 2024 by rpki-client on console-ams.rpki-client.org