Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File:                     SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier:          JCgrFZAO8WRdAfHTBa3ta/uDkhouJww2qKyiRpYjOSk=
Subject key identifier:   50:E0:5C:35:AD:54:3F:A7:49:0A:43:B9:BE:C5:C9:00:F7:C1:33:99
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer:       /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial:       018F874929D468AF44657172777826ACD22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number:          0512
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: fV18BKCdnFcwDnUJFq9SUYnGkdh/cJCMltF4uNMsCqw=)
                          2: t2KLQdHWFqpCqldZ2tpa9QRrDYU.roa (hash: FHaDuyA7Ceb82OIZ7EBkxy4VBnhjTpbPPAfBquRrPgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:29:d4:68:af:44:65:71:72:77:78:26:ac:d2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=50e05c35ad543fa7490a43b9bec5c900f7c13399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:62:b6:8e:31:73:2c:40:a9:73:9c:e2:ab:
                    0b:83:56:53:60:7c:b6:93:2a:3c:ee:9f:bd:18:0c:
                    54:81:b6:a8:44:53:e1:6b:b7:36:93:8d:f9:90:33:
                    20:dc:69:63:a0:bf:a6:c6:61:c6:ad:ec:48:60:d4:
                    70:88:7d:73:f1:9d:4c:c8:35:75:1e:5a:08:34:12:
                    af:42:5e:53:99:d4:d9:6e:f4:38:ae:73:67:34:a9:
                    e5:f5:bd:8a:d7:9c:2d:c4:95:9c:10:05:01:5d:85:
                    39:66:9d:c9:19:2f:b1:3e:b5:b1:84:20:ba:f9:29:
                    81:04:a3:15:d1:ad:16:a9:86:38:4d:ef:77:34:0d:
                    0e:6e:4e:72:42:71:c1:99:a9:db:86:d7:86:d1:40:
                    73:d7:1a:5d:cd:93:55:6a:77:49:ec:f0:d4:d0:7d:
                    ad:56:47:63:12:ee:9e:c8:cc:d3:4d:f9:bb:d0:45:
                    fc:9d:1d:d0:a5:4c:75:af:2b:3e:8b:13:ee:a0:16:
                    be:e9:f2:32:10:68:84:cb:d7:77:98:83:07:f8:e9:
                    4d:41:82:68:9f:c5:12:45:d9:6f:66:89:b8:e4:65:
                    a2:1e:7b:7a:f6:9b:be:23:d8:3b:03:c1:32:9c:5b:
                    aa:91:bc:ca:0d:63:ce:d9:20:e1:f2:c5:33:bb:62:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E0:5C:35:AD:54:3F:A7:49:0A:43:B9:BE:C5:C9:00:F7:C1:33:99
            X509v3 Authority Key Identifier:
                keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:cc:75:1a:64:ee:50:c5:d0:4c:26:45:ba:c0:31:06:31:
         15:44:71:d5:2e:5a:67:05:a4:1c:db:bd:b5:b1:de:32:7e:03:
         09:7e:d1:2d:fa:78:02:d6:b5:bd:ef:e8:fb:cc:42:74:be:82:
         98:19:ba:f0:3e:b9:d8:49:d0:e2:86:6d:48:c2:da:fb:f5:7d:
         c7:6d:06:97:7e:0f:6b:28:b4:e5:29:3f:46:ad:25:16:5d:88:
         a6:77:8d:6d:0e:9f:41:45:72:2d:df:b1:6a:06:40:34:64:58:
         5b:1c:d7:ac:04:82:79:1a:99:7b:0b:40:7f:54:a7:40:b0:11:
         c2:d4:a6:a9:f7:13:54:de:cd:bc:17:1d:85:bc:66:0f:b2:ef:
         fa:73:4a:4c:a3:7e:36:0f:23:e7:c1:3f:f8:d6:6a:d0:c0:a3:
         e6:c4:70:2e:9e:af:b2:36:43:ad:b6:56:d4:5c:bf:e3:a1:82:
         f3:fc:1a:a2:6b:90:d9:e0:b3:6e:06:88:d4:3a:34:b2:a3:4c:
         b4:0d:b1:ca:80:e6:af:44:28:6a:0f:df:67:5c:33:52:a6:e3:
         93:8f:4b:22:7d:a7:de:ef:9f:02:52:62:a5:b3:b6:f8:58:d5:
         0a:1c:e3:b0:70:59:75:a6:10:5e:d3:74:9c:df:bc:f8:07:2e:
         0f:99:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:24 2024 by rpki-client on console-fra.rpki-client.org