Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File:                     SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier:          51CwtVcqqZFGc7vhLrmpp395jO5GMz3AivjSjyoFj3Q=
Subject key identifier:   97:9D:06:CC:A9:EB:41:5A:3D:AC:E8:95:BC:49:3A:F9:B4:6F:9B:98
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer:       /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial:       01906D8655F859F363D135D409F0332DBEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number:          02D9
Signing time:             Mon 01 Jul 2024 09:00:38 +0000
Manifest this update:     Mon 01 Jul 2024 09:00:38 +0000
Manifest next update:     Tue 02 Jul 2024 09:00:38 +0000
Files and hashes:         1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: SOpzQ/cW6ROsgIcpIi9nGKEqM8YHuZrp8P4voJAigwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:86:55:f8:59:f3:63:d1:35:d4:09:f0:33:2d:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
        Validity
            Not Before: Jul  1 09:00:38 2024 GMT
            Not After : Jul  2 09:00:38 2024 GMT
        Subject: CN=979d06cca9eb415a3dace895bc493af9b46f9b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:55:29:63:b9:ba:f9:7e:a0:eb:6c:32:c5:
                    a7:d3:47:75:68:31:58:e4:40:c6:a8:43:4f:47:66:
                    5e:87:40:38:da:5f:0d:dd:cb:73:47:29:ab:05:0c:
                    a5:bc:bd:1e:14:33:b4:57:0b:87:e7:6d:10:da:75:
                    7f:26:bf:66:0d:90:19:12:6c:cc:5f:9e:91:6a:e3:
                    4c:87:bf:da:6c:88:fe:ba:68:03:b6:a7:b9:4b:d2:
                    ee:d3:05:e3:5a:bb:64:14:a4:28:f6:7c:3a:b0:1e:
                    42:7e:1d:d4:04:9f:11:68:36:0e:29:7a:cf:09:99:
                    f1:f0:04:61:b6:dc:03:92:3f:3c:76:47:18:2b:a8:
                    fc:92:0e:58:7f:b0:b4:54:29:4a:5e:a0:dc:db:22:
                    df:bc:cf:eb:2f:52:71:43:76:e4:58:78:4d:1f:a5:
                    5e:30:e8:77:12:08:94:f6:20:93:69:67:35:a1:2f:
                    9b:6c:bf:d5:86:75:5b:04:11:08:2c:ee:b9:61:df:
                    5c:a9:8f:95:e5:57:b6:c5:2c:06:2b:44:2c:91:df:
                    39:da:2a:9e:c4:74:ae:28:7a:d1:cc:41:ae:4b:25:
                    e5:94:0c:e5:58:b2:6f:1b:f8:2e:54:b1:5e:a5:8d:
                    c4:40:ac:53:93:fc:06:7a:95:bb:87:a3:ae:1b:52:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:06:CC:A9:EB:41:5A:3D:AC:E8:95:BC:49:3A:F9:B4:6F:9B:98
            X509v3 Authority Key Identifier:
                keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:7d:e2:51:f9:c0:35:8c:02:37:23:17:b1:dd:98:1e:08:
         dc:e3:30:50:f9:2a:84:a0:81:d9:11:be:09:61:08:17:0a:12:
         6c:1b:10:45:83:49:cc:be:18:5b:bb:f9:f6:03:17:bd:16:cb:
         50:a9:25:fd:1d:e2:2c:e5:38:d8:6b:8f:73:2e:2e:e8:15:22:
         e2:0b:c1:3f:91:b9:51:44:49:f9:72:53:59:c2:ac:5f:4f:32:
         ed:b3:fd:09:36:48:ba:ab:b0:47:b2:58:c0:34:34:6e:25:be:
         e6:27:f2:d3:77:a4:11:3d:f8:ce:63:c5:e7:27:c2:7c:df:7f:
         bd:8f:d4:36:7d:70:0e:2f:37:7f:25:56:a1:9f:3e:70:04:11:
         70:d4:82:01:a3:4e:83:d4:a6:f8:c3:bc:f8:9c:71:63:b5:07:
         c1:2b:62:62:b9:da:df:18:f0:1d:d3:30:9b:d0:5d:f0:f0:e0:
         18:77:29:83:52:45:a7:d8:5d:5b:54:17:a9:e1:f9:3a:39:8d:
         75:fd:34:7a:22:89:fc:0c:26:41:15:5f:23:40:8f:49:41:bf:
         fa:a6:f7:89:ad:7e:d8:59:08:d9:d5:3c:6e:db:cc:ad:4a:76:
         be:ec:3c:9e:b8:66:c9:bf:d1:2b:15:97:7c:35:cb:49:d0:53:
         31:16:17:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:18:06 2024 by rpki-client on console-fra.rpki-client.org