Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File:                     SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier:          uP8aeztW6Et7a48M1ERDzSHo4NA/JC+4xuYRK+5tuoU=
Subject key identifier:   41:DA:0D:E6:9D:28:5E:4D:E1:0D:2B:F8:A8:8B:BB:19:B7:70:41:B5
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer:       /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial:       0191FB5A047484320CBAF4D7D37CA2AC3633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number:          013D
Signing time:             Mon 16 Sep 2024 15:01:06 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:06 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:06 +0000
Files and hashes:         1: DO35Wmt5KZnP0oo2gRKwTgIqsa4.roa (hash: /ejp8HGbPSmewD5gAFzqqbN+HQtpCC+pk6vncBZM3Jk=)
                          2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: Pu4tfSj0/WcuXks775W+MWXp//DcvwFMpAtOnqmbKw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:04:74:84:32:0c:ba:f4:d7:d3:7c:a2:ac:36:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
        Validity
            Not Before: Sep 16 15:01:06 2024 GMT
            Not After : Sep 17 15:01:06 2024 GMT
        Subject: CN=41da0de69d285e4de10d2bf8a88bbb19b77041b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:75:47:83:d6:3f:22:c8:ec:b2:a1:97:9d:38:
                    d0:d6:6c:43:04:1b:62:63:03:9d:2c:f8:29:6e:60:
                    00:a8:90:9a:83:c0:09:dc:c1:1f:12:2c:68:ed:4d:
                    1c:c5:d4:1e:fc:82:8b:6c:67:1b:6a:c6:dc:e2:31:
                    ad:a2:25:d1:e3:be:88:c5:2f:0f:89:a6:b0:53:ec:
                    75:61:e0:5e:2a:c8:15:6c:98:bc:d1:6e:a2:e4:3e:
                    f7:1c:ed:28:58:8a:5b:b4:53:01:a4:c5:de:f1:02:
                    5e:d6:90:88:8b:9a:90:6b:15:65:06:3c:29:f3:03:
                    38:60:e5:43:66:da:02:0c:65:34:b1:7d:09:70:f5:
                    38:b3:d1:63:c9:b8:5f:d5:06:a0:b1:98:e7:b8:48:
                    3d:84:41:2c:2a:e0:2c:c8:ea:10:e7:4a:da:e5:67:
                    16:3a:8e:8f:85:64:f6:36:16:e9:03:97:24:e3:94:
                    45:e2:44:db:27:e3:e7:10:43:bf:7a:20:4a:cb:95:
                    ec:01:c8:a0:84:e6:ee:92:a2:a3:8c:ff:f5:f4:d5:
                    62:03:fa:6f:63:56:d6:a6:f2:68:40:5d:73:9e:0a:
                    43:fc:55:64:78:9f:7a:28:9e:5c:3d:bc:fa:d2:78:
                    aa:40:5c:95:29:16:60:62:63:17:8c:77:9e:e6:1b:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DA:0D:E6:9D:28:5E:4D:E1:0D:2B:F8:A8:8B:BB:19:B7:70:41:B5
            X509v3 Authority Key Identifier:
                keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:1c:dd:43:96:8e:1f:47:37:f2:7c:0e:f3:30:45:16:83:
         12:90:7b:89:f9:8e:2f:f7:a6:fc:19:1f:8a:46:cc:b6:96:be:
         2c:d0:43:9d:55:ba:c6:0e:c1:f3:b6:df:84:d1:a1:7b:95:f9:
         fe:6e:99:05:03:a2:43:3c:2a:e6:d5:47:12:38:b5:8a:dc:4e:
         68:4b:eb:a2:14:0a:1e:3d:77:29:38:be:13:51:6f:36:ff:a7:
         3b:98:c9:fc:74:2c:3a:59:b9:36:2f:18:a3:d7:1d:f1:52:80:
         d3:ad:8f:46:94:ee:d1:2d:c7:e1:56:b3:af:64:7c:42:d5:2e:
         0a:80:bb:d5:03:bc:8c:2c:eb:5b:5d:5b:f7:78:4e:2d:78:22:
         14:c8:79:fb:61:72:d5:af:6d:99:1c:6b:4c:83:8b:f2:24:82:
         6f:c8:16:1b:0b:7b:c4:b4:49:88:4d:cd:aa:6f:a2:79:73:70:
         ba:7b:e1:90:69:f3:66:08:4d:08:ef:b1:06:19:fe:b1:04:78:
         13:ea:aa:30:19:f6:ea:68:d5:e0:37:d6:75:4c:93:de:0f:41:
         f1:76:5f:99:ee:aa:d6:27:e5:18:ef:6e:2e:ec:80:71:1b:3d:
         d7:af:8a:08:d7:34:ca:d7:ab:73:89:52:c2:ac:9f:38:cb:22:
         5d:c3:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:16:04 2024 by rpki-client on console-ams.rpki-client.org