Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File:                     SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier:          k4kd3qEoP7ASHQaEyh6Hd6Jy8AhrWIPQ/4TjOvzmQrU=
Subject key identifier:   6E:EB:66:BC:38:16:33:DB:AC:44:1C:3D:12:41:85:13:4C:88:07:3C
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer:       /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial:       018F874B46879707D8B6488B34AA12638D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number:          07BB
Signing time:             Fri 17 May 2024 16:03:28 +0000
Manifest this update:     Fri 17 May 2024 16:03:28 +0000
Manifest next update:     Sat 18 May 2024 16:03:28 +0000
Files and hashes:         1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: beBvutAnAkIh1TKDpDI1VytOZVbfOciunjZTuXFNmXU=)
                          2: zJp3SNOr_8ddqMK5l2DferSbfas.roa (hash: X55i4VnhjONf1BomWCuFB3kGbemWBgrv5K0g+AdaITM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:46:87:97:07:d8:b6:48:8b:34:aa:12:63:8d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
        Validity
            Not Before: May 17 16:03:28 2024 GMT
            Not After : May 18 16:03:28 2024 GMT
        Subject: CN=6eeb66bc381633dbac441c3d124185134c88073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:64:17:4b:fd:f9:12:66:2b:65:2c:3d:d2:
                    55:de:60:d8:02:71:27:f9:ab:f5:f1:62:eb:be:88:
                    56:53:dd:1c:21:08:9c:38:1d:4f:d2:b3:f6:fa:b0:
                    4e:ca:cc:fd:39:24:be:01:2d:8a:c2:6e:1b:67:a7:
                    4c:30:5a:de:86:d0:43:5c:2e:b8:2f:12:16:f0:8e:
                    0e:85:77:e1:39:36:fa:e3:16:f7:66:e6:f7:36:45:
                    8e:c3:e1:06:8a:06:d5:f6:13:64:33:61:42:5f:12:
                    d1:b1:e0:e8:eb:7d:9f:41:1d:0f:82:b4:01:7e:4d:
                    b9:5f:2f:47:f6:d0:7f:9c:3d:47:90:de:38:35:a9:
                    0e:1b:9c:01:f3:4f:ee:3d:37:cc:95:c4:92:ea:cd:
                    87:3e:fd:09:d0:72:a7:05:f2:05:e3:ea:a8:ef:d2:
                    e3:9d:75:33:1d:9b:e4:38:b9:38:17:04:43:a1:c7:
                    ff:e1:4d:63:2e:aa:f9:76:22:bf:9b:13:5b:b3:d8:
                    87:30:5d:74:55:2d:cf:29:db:ef:12:b1:88:54:ac:
                    1d:39:61:dc:ef:10:00:5c:c3:42:36:c3:3c:95:b5:
                    79:cf:14:28:e3:15:85:7c:99:e4:61:ad:5d:49:a4:
                    93:7c:ad:3a:a4:bc:7c:7d:ca:9f:63:ad:cc:ae:ce:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:66:BC:38:16:33:DB:AC:44:1C:3D:12:41:85:13:4C:88:07:3C
            X509v3 Authority Key Identifier:
                keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:69:0a:39:ae:1f:e7:b3:71:f0:01:db:d2:f1:46:a0:43:90:
         d5:ce:18:a9:53:26:12:a8:3f:7a:8b:99:91:ee:5e:62:aa:61:
         b1:e6:72:ec:15:3d:6d:a2:f9:65:a6:71:ee:b2:a4:ac:7d:16:
         33:7d:db:a1:37:64:75:c3:f8:a4:e1:ad:ac:20:58:3e:19:d0:
         98:e8:79:25:fe:8e:6f:ea:82:d3:cd:3c:76:f3:18:61:14:53:
         10:68:0e:9f:ad:7b:58:46:8a:9c:e2:d9:be:3f:fb:83:b8:bc:
         71:98:9e:67:32:a3:2c:7d:4f:ad:98:51:6c:be:a3:29:67:73:
         c3:64:ad:31:1b:de:ef:dd:83:71:56:20:5b:03:98:c2:8f:cd:
         8e:44:60:8c:da:a5:5d:2e:e0:21:e9:06:1e:a2:a8:c4:58:7d:
         f5:92:ca:cb:21:7c:8b:5e:92:3b:20:94:3f:b0:90:34:e4:7f:
         02:63:88:4e:a2:c4:85:29:fb:64:ec:88:7c:b2:4b:db:5c:fd:
         b8:5d:59:b0:1d:a8:c1:d3:ad:78:12:e9:d5:6b:eb:8a:7d:c6:
         5d:fc:92:35:15:1c:4c:e6:4b:c3:fc:01:ad:b0:3d:cd:c5:58:
         8b:92:4c:0f:b5:1f:a3:e1:8d:7b:cf:6a:3b:ca:7e:07:81:7f:
         2d:cb:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:47 2024 by rpki-client on console-ams.rpki-client.org