Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File:                     SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier:          7l/tc6ag0sxN3VdrvOSzjACGnaxpW1pgyWI80oNBl/4=
Subject key identifier:   95:7D:4D:53:00:06:44:14:F9:FC:8C:BE:12:25:01:61:D9:29:A5:CA
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer:       /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial:       0193696A9F6D9B09C4389B9BF129A1EB0498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number:          1381
Signing time:             Tue 26 Nov 2024 17:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:15 +0000
Files and hashes:         1: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: 3mLq2w+ziYwsmUkTldX/TUWdia5YrLChDAT63fAX4XM=)
                          2: Xe_W_HHcfVENPkIQvL_W0bOp3r8.roa (hash: D0PgT5ZbSFFso9sGbxBCIgNamuDKOcOC7vqmPcLG22g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:9f:6d:9b:09:c4:38:9b:9b:f1:29:a1:eb:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
        Validity
            Not Before: Nov 26 17:00:15 2024 GMT
            Not After : Nov 27 17:00:15 2024 GMT
        Subject: CN=957d4d5300064414f9fc8cbe12250161d929a5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:7a:61:bf:ab:3b:00:a5:21:cf:52:d4:96:
                    42:42:90:90:01:ba:be:38:fc:7b:4b:1b:d6:35:22:
                    2d:e4:3a:99:13:f5:1b:2c:7b:e9:b3:d4:1b:f8:54:
                    85:d5:ee:50:32:9a:87:d4:00:7e:07:fb:93:17:85:
                    1d:d5:83:4f:7b:ae:a6:ba:72:ab:9d:f8:4b:0d:01:
                    bc:23:7b:d2:b2:4e:cd:74:26:90:30:9b:aa:8d:60:
                    48:7a:66:93:c8:1d:73:71:17:b6:d6:1e:2c:ad:93:
                    46:15:0c:6d:a4:d8:ec:5c:80:85:94:fa:37:92:5f:
                    18:53:72:af:55:fe:8e:e5:18:52:6f:4a:db:d8:92:
                    17:b3:d9:97:ac:a8:94:0f:6f:71:bd:2b:c7:32:51:
                    e4:c9:cd:8c:a8:65:15:78:95:97:0e:41:a5:a6:c8:
                    c6:c0:85:b2:9b:55:45:5e:6a:a3:81:8d:0f:53:64:
                    d5:60:af:7d:3c:d0:bb:95:42:c6:62:44:16:4c:3a:
                    64:4c:24:11:fe:7c:47:b2:3e:54:bb:ec:5c:09:8e:
                    ce:22:fd:35:d4:7a:6b:ec:18:4d:14:72:e0:9e:b0:
                    ae:a1:4b:da:8f:33:ad:cd:fa:be:22:11:9f:62:1b:
                    00:d1:a0:26:38:c4:11:7c:b6:c5:43:e6:a4:d8:9e:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:4D:53:00:06:44:14:F9:FC:8C:BE:12:25:01:61:D9:29:A5:CA
            X509v3 Authority Key Identifier:
                keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:65:b7:ec:ec:25:bb:ae:18:bc:58:0b:43:70:5b:4f:c8:
         a6:b2:e4:41:a0:1a:dc:7b:54:fc:86:38:3e:0a:a3:3e:c0:52:
         28:91:41:dc:d0:23:48:c2:b6:e5:8b:d4:7b:7e:c1:1a:e0:96:
         79:a4:dc:a0:16:3d:10:74:0c:9a:34:7b:b5:a8:11:10:be:8c:
         48:1e:fb:38:a5:c1:99:1f:20:d9:d0:4b:25:cd:86:8e:34:26:
         b5:b1:9c:77:66:55:79:06:ab:f7:97:a2:60:16:dd:3c:0e:0e:
         8f:9c:30:91:e8:1d:3b:ef:86:36:bd:98:db:dc:ef:1e:45:f7:
         3b:19:23:7a:9b:d1:a6:ac:42:d5:63:b3:86:cb:e8:39:61:58:
         88:1e:c2:13:3b:15:0e:65:d1:76:0b:21:39:68:67:45:44:ba:
         d7:15:df:da:45:2e:8f:75:d5:76:90:5a:ab:52:dd:6d:c0:ae:
         2a:98:31:50:51:93:c3:2c:17:6a:08:4b:20:72:f2:3b:a8:cf:
         1a:25:f9:0e:68:60:e8:c8:1c:35:db:8f:4d:27:67:7a:6c:9e:
         15:c9:0f:57:4f:c9:7d:da:fc:a6:66:f1:d6:95:38:a6:bc:15:
         43:7d:10:47:6c:df:ab:f5:6d:c1:47:41:35:6e:7c:91:c7:ee:
         94:b4:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:56 2024 by rpki-client on console-fra.rpki-client.org