Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File:                     SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier:          CW7UMuKSH0LYb8kIqafWgah90pih4wB8MnoKZsUWrkY=
Subject key identifier:   4D:94:61:5C:CF:41:D5:AF:C4:CD:1F:82:FD:F6:46:6F:74:57:5A:9F
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer:       /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial:       018F885B52C40888FCB5F921BCCED1FFB6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number:          10B9
Signing time:             Fri 17 May 2024 21:00:37 +0000
Manifest this update:     Fri 17 May 2024 21:00:37 +0000
Manifest next update:     Sat 18 May 2024 21:00:37 +0000
Files and hashes:         1: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: 5gL2pvcrhxMv8llOghm9ZHgtLK3YqIuk/yDD76mriGA=)
                          2: W8VDKeAy2osQ0ZGL6fMahX-LEfY.roa (hash: FbgzQF6i0XaPz0OWaLZUUe/Jp4kc2WdYG4vu+rq/ijg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:52:c4:08:88:fc:b5:f9:21:bc:ce:d1:ff:b6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
        Validity
            Not Before: May 17 21:00:37 2024 GMT
            Not After : May 18 21:00:37 2024 GMT
        Subject: CN=4d94615ccf41d5afc4cd1f82fdf6466f74575a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:8c:49:cf:5c:bc:72:95:bd:2a:fe:b9:ab:
                    53:ff:22:9c:7b:75:af:43:bf:15:e9:d0:9e:31:f0:
                    64:7c:64:40:24:18:f9:4c:e6:af:73:c6:84:b3:97:
                    88:b0:57:ea:de:36:a1:36:bf:5d:15:0e:62:91:c2:
                    9d:45:8e:ca:5b:95:7b:5c:74:2f:28:80:6f:a3:e6:
                    f8:2d:42:f3:e1:37:2e:a2:cf:0b:9f:5d:57:54:b2:
                    eb:23:a0:aa:b3:e7:be:7e:14:27:89:df:08:15:6f:
                    13:d2:c9:b4:63:59:64:c8:b3:c9:b9:97:7a:7a:7b:
                    24:29:0a:78:87:7a:70:88:f5:c5:f1:83:80:62:ab:
                    53:b0:9f:bc:52:fe:f8:51:4b:3f:d2:76:08:11:8e:
                    39:dd:03:e6:86:ed:b7:e2:53:1a:04:52:9a:62:2f:
                    06:9b:51:13:e3:e4:78:29:60:4e:1f:1c:a4:39:91:
                    aa:a6:86:c4:60:3a:99:6d:c9:e1:dc:c1:58:63:f1:
                    8c:ee:77:b9:10:e1:8e:77:80:31:cf:53:db:4c:b4:
                    82:ba:fe:4b:0d:77:e4:60:93:96:d1:fa:f3:5b:35:
                    cb:f1:fb:43:3a:a2:0a:62:c7:57:78:c5:5c:a8:57:
                    b2:aa:ae:2a:85:5e:27:27:b3:ab:ae:f7:5c:91:86:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:61:5C:CF:41:D5:AF:C4:CD:1F:82:FD:F6:46:6F:74:57:5A:9F
            X509v3 Authority Key Identifier:
                keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:b3:ba:e2:2c:7c:fb:54:e8:29:25:b5:d2:c2:2d:4c:db:
         f0:27:9f:b8:b3:3a:5a:0a:a4:28:60:19:2f:6c:3f:ca:87:b8:
         7d:41:d9:0d:7f:e7:0b:3a:11:06:17:e8:7e:ca:53:c4:e7:4c:
         8b:48:f2:45:76:72:c7:99:59:3e:11:6c:6f:4b:14:7c:27:46:
         19:bf:f3:10:e9:a0:bf:07:a6:b5:01:66:ae:41:f7:f2:83:a0:
         77:af:54:b7:dc:e0:ca:38:72:47:2c:45:40:4e:33:43:12:c0:
         2a:3e:c2:cd:d5:77:4a:20:d1:fb:bc:ba:77:81:fc:8d:8e:1a:
         c0:a7:bf:5f:3c:77:72:2a:18:8f:d7:60:33:3b:6e:0b:19:81:
         ca:a2:ef:5e:2d:91:34:74:d1:71:2a:d5:e3:fe:c4:01:8e:cd:
         f5:7d:3a:4c:89:70:7b:8c:4f:87:eb:79:d7:4f:05:ad:4e:9a:
         6d:39:f8:7a:07:1e:83:9c:d9:a7:88:67:ba:6f:7b:b2:3e:77:
         66:18:30:b1:1a:1b:92:c9:65:1e:80:88:67:43:dd:e0:31:c7:
         eb:ba:4d:52:85:8d:e1:84:5a:24:8d:40:4e:49:11:89:ec:60:
         95:97:b5:1a:ce:a8:ed:1f:81:92:df:b8:04:6b:4b:59:64:a5:
         36:00:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:01 2024 by rpki-client on console-fra.rpki-client.org