Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File:                     SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier:          M+nwb6OHgymxSXj+LvVXUfUz5UAK3Ms7bPDKGJ3CtJE=
Subject key identifier:   06:16:3F:10:89:4D:44:91:6A:76:1D:62:32:FF:0F:AC:F4:70:86:96
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer:       /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial:       018F87ED327694FEA702C7FE49EC75377744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number:          0122
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: 8wkc_4PlFpbsASFyLAclvba4EMo.roa (hash: NEGVHuS/n5Tg+4OjQN+ExwlcW7lMMgRYIx20aU1ZwF0=)
                          2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: BMrJBSKHTZzxz5FrE5WN3KzdJua6bdxSmUgdhaeeDtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:32:76:94:fe:a7:02:c7:fe:49:ec:75:37:77:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=06163f10894d44916a761d6232ff0facf4708696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:98:96:1a:77:ed:b9:ce:10:28:eb:10:c3:
                    7d:2a:29:01:ed:aa:cf:08:2f:d4:12:60:e8:6b:89:
                    bd:18:5c:72:d6:2d:85:b3:d8:2a:3a:90:b7:6a:00:
                    b3:67:26:30:df:91:9b:94:9d:78:6e:27:e2:3e:34:
                    3f:58:e8:56:d0:f6:fa:6f:c8:fe:01:e2:94:71:29:
                    cd:3f:78:e6:cf:10:26:03:1e:e7:cb:db:2f:eb:6d:
                    55:fd:db:df:50:2c:89:93:77:d7:82:0e:ba:61:a8:
                    0a:a8:59:2e:ea:38:17:cb:5d:b8:0c:07:a2:5b:23:
                    ec:e2:5e:e0:72:85:51:81:40:3c:0f:06:e1:ed:09:
                    fe:f7:8b:3b:a6:b0:83:e1:3d:87:d3:c5:b3:aa:81:
                    ac:fa:d6:a5:37:01:b5:95:7c:97:99:af:55:aa:61:
                    ae:29:20:97:80:16:5b:26:5d:b6:4e:96:a6:a3:2a:
                    33:2a:9e:f6:a7:c8:2b:0a:8c:c7:4b:fa:55:26:29:
                    24:ac:3c:96:92:1c:78:5c:b1:cb:49:a5:27:63:ce:
                    c9:77:3c:a6:33:e8:83:6c:1d:61:f4:6a:46:f1:67:
                    fb:9a:cb:fb:48:68:81:c2:b5:ee:4f:dd:b9:bf:3e:
                    ed:47:ca:52:bf:90:35:b0:09:f7:8b:af:bf:4a:2d:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:3F:10:89:4D:44:91:6A:76:1D:62:32:FF:0F:AC:F4:70:86:96
            X509v3 Authority Key Identifier:
                keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:32:d7:eb:a7:7f:2d:79:51:69:2d:91:6c:f6:c3:27:5d:
         64:18:79:a2:aa:f5:ab:88:cc:b0:d5:eb:33:17:05:d6:af:29:
         4b:3a:00:e6:ab:1b:0b:f0:27:1e:1f:88:91:8c:0b:00:55:c7:
         45:a7:a0:89:f3:07:9a:c6:4c:3c:6a:ad:ad:b6:c1:9a:41:b0:
         bb:b8:3f:3e:1b:ec:e9:fb:be:09:45:bf:82:b2:63:5c:4f:74:
         ca:72:cc:b9:80:b4:ed:d3:e1:06:9b:97:3d:6d:9c:f2:7d:b4:
         67:b4:57:61:06:83:bf:d4:76:21:c9:6a:3e:30:67:25:3a:aa:
         84:94:84:12:1c:33:3c:38:2a:97:8c:67:aa:0a:bd:ed:6c:ab:
         77:11:ee:88:df:ea:a9:62:af:76:76:bc:f3:3a:c2:e9:44:ed:
         f5:5c:34:1e:73:19:c5:28:d6:d7:18:22:1a:bc:0b:41:7f:b1:
         a1:22:b3:da:e3:2e:ec:7b:fb:7e:14:cb:6c:b8:7c:0b:fd:58:
         ef:d3:7a:81:d8:1c:f3:42:f1:fc:70:de:9f:ca:01:d6:25:c5:
         88:2f:ac:17:6f:3f:26:23:cf:85:8c:05:ed:9e:aa:a0:ae:f9:
         1d:f8:2e:e4:58:fc:eb:a1:f7:b2:99:37:2f:d8:84:d3:08:0d:
         9c:0e:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:01 2024 by rpki-client on console-ams.rpki-client.org