Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File:                     SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier:          qAZKml3i97gws/PSUvBSCO8e7mVkBObCcA/Of2lhpZ8=
Subject key identifier:   60:71:DB:82:22:31:7D:BE:1D:1E:9D:00:8F:C6:4D:C5:8D:D8:23:79
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer:       /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial:       0193598A4C2C33029658F7628F33245CF349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number:          0E67
Signing time:             Sat 23 Nov 2024 15:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:55 +0000
Files and hashes:         1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: 97rhE0b8w8mpFVqR+lXO4HgNVtyJlW/6fiH25YUn3oY=)
                          2: dv5TH-weOvI7hsj666vvtt1X5cI.roa (hash: KEo5Co5NLldjnm9WtrjSd0ccYNvfD6oD0A95rnfEYow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:4c:2c:33:02:96:58:f7:62:8f:33:24:5c:f3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
        Validity
            Not Before: Nov 23 15:00:55 2024 GMT
            Not After : Nov 24 15:00:55 2024 GMT
        Subject: CN=6071db8222317dbe1d1e9d008fc64dc58dd82379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:da:f0:50:b2:0a:5c:67:ba:a5:2a:4a:47:
                    e0:96:c5:ee:4e:7d:09:27:a9:be:e3:38:d6:b2:06:
                    cd:a7:6b:68:8e:6f:73:70:24:73:6f:45:6b:23:46:
                    a8:8e:41:97:79:f3:42:ef:53:23:7b:ae:4c:e8:89:
                    87:25:7d:f9:15:2d:a7:1b:7c:83:5e:3e:51:f5:3d:
                    6e:f4:74:f5:7a:fc:ca:6a:86:77:f1:fa:d6:b1:23:
                    29:8f:38:38:fa:de:80:99:41:b3:ba:42:9e:50:48:
                    35:a5:0c:28:ec:e9:80:24:97:9e:4d:58:7e:fd:06:
                    59:96:35:c5:d8:21:23:15:d0:06:6d:37:4b:f4:e1:
                    56:3f:1e:06:3c:d5:ed:bc:eb:38:f3:29:b4:c7:06:
                    83:50:a2:98:bc:a8:7b:12:fa:d8:cf:8a:a7:10:76:
                    b4:ac:0e:47:ad:ae:b3:4b:51:0c:07:b6:95:2f:cf:
                    95:ad:1a:23:cd:cf:67:43:61:9f:b3:2b:8c:34:10:
                    45:79:51:64:07:9f:ba:a4:e3:9a:91:1e:a5:8b:11:
                    6b:13:91:db:11:af:dd:45:b9:28:93:d7:8d:26:2b:
                    a4:da:fa:e0:7e:2d:01:46:d4:d0:e9:4b:33:14:b7:
                    1a:91:81:f3:79:8c:76:c9:81:c9:b1:b1:67:98:5e:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:DB:82:22:31:7D:BE:1D:1E:9D:00:8F:C6:4D:C5:8D:D8:23:79
            X509v3 Authority Key Identifier:
                keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:4d:33:ea:5d:0e:8a:b2:a1:dc:27:75:b4:b8:23:02:f3:
         eb:bf:b9:83:b4:ab:54:c2:e7:f2:bb:93:49:05:51:4a:af:a1:
         29:ee:40:be:30:7e:b2:f9:2e:a5:f1:b6:2a:d7:4a:5c:80:6b:
         be:dc:e5:58:a0:4c:16:9e:db:2c:b4:bc:6c:53:0c:4c:99:43:
         06:db:39:00:c8:ab:e8:ad:ba:b6:54:4f:84:de:ab:08:3c:b2:
         65:fa:9a:52:3d:72:fc:75:49:84:36:4c:8b:23:10:a0:84:fa:
         e1:92:f1:8b:e1:33:be:e5:3f:be:a2:a5:55:05:66:b1:92:bb:
         c6:8d:67:f9:09:a0:27:20:46:12:bb:67:de:9f:e8:39:74:50:
         0b:12:43:ed:b0:17:81:6a:cd:38:b2:65:d8:b2:9b:96:1d:97:
         70:74:dd:d0:a6:66:c1:c3:e7:43:8b:60:2b:10:6b:cb:40:13:
         35:ec:88:97:bb:30:d0:f9:38:00:70:b4:03:42:01:27:74:6c:
         34:ba:bd:94:68:22:66:34:d4:65:00:ce:2a:02:a2:7e:43:ec:
         8e:02:58:14:e3:03:24:77:cd:37:52:49:3d:41:b1:0d:c9:51:
         54:bc:bd:4e:f5:d5:a4:71:da:ba:95:d5:27:a9:69:84:6b:bf:
         c4:fb:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:00:09 2024 by rpki-client on console-fra.rpki-client.org