Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          kpG2doP5LHg82ggqQrbjzrGbJEzAJhjvgN3bI/XF69U=
Subject key identifier:   D5:18:A0:1E:73:1D:95:32:B1:0B:61:14:81:57:A8:C1:5A:DA:7A:C0
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       019644B1EE2870284C27558DF94AE03B1762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 17:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:33 +0000
Files and hashes:         1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
                          2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: kNFbO/t8md06bJUtBEe7MsIKSkWH0jiD0sOw5HnNtxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b1:ee:28:70:28:4c:27:55:8d:f9:4a:e0:3b:17:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Apr 17 17:00:33 2025 GMT
            Not After : Apr 18 17:00:33 2025 GMT
        Subject: CN=d518a01e731d9532b10b61148157a8c15ada7ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:6f:74:69:3b:02:19:6a:a6:f9:da:76:cd:
                    96:2c:3d:46:6a:8e:81:50:c2:3d:f1:7b:e9:c6:92:
                    d9:e8:c6:fc:f1:b4:45:d1:a9:2f:d5:fa:07:ca:68:
                    86:85:53:5b:2b:c2:2e:28:36:3d:f8:4b:ba:75:ce:
                    e0:74:d6:44:86:bf:3a:79:5d:95:26:1c:1e:aa:09:
                    20:34:93:93:2d:48:bf:28:07:ee:b7:03:d9:9a:5d:
                    8f:b0:72:99:88:01:ed:0c:f7:8c:4a:29:98:0c:c5:
                    51:8a:b2:42:e5:dd:62:ff:41:dc:1c:7a:2f:96:d5:
                    08:af:af:e4:9e:0e:00:eb:fb:a8:6f:ed:24:c9:5d:
                    b7:32:42:f6:1d:5c:62:31:e1:a5:24:35:02:7e:09:
                    6b:67:b8:fb:0b:26:38:16:de:20:3c:ba:61:7d:21:
                    81:0f:e0:af:2a:9a:ad:3d:75:3b:b1:84:ca:b1:3a:
                    96:b2:a6:87:d1:68:ea:b1:46:15:58:9e:89:49:71:
                    dd:4b:38:47:cd:00:ee:29:06:70:e9:17:f3:0b:29:
                    72:49:13:b2:c6:28:e0:99:b8:67:1b:89:76:bf:a9:
                    de:bc:d2:84:65:7e:cb:72:4d:4b:62:db:f3:62:b1:
                    e9:b2:43:a8:c1:46:df:18:45:af:ea:7a:21:a9:2e:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:18:A0:1E:73:1D:95:32:B1:0B:61:14:81:57:A8:C1:5A:DA:7A:C0
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:ca:fd:9a:fb:0a:0e:32:c5:60:75:14:f7:af:e6:af:b3:
         ee:10:16:82:79:a3:d5:bd:69:07:ea:00:44:85:eb:7e:8e:fd:
         c2:18:01:86:58:a5:a8:87:71:ff:f1:b1:77:35:36:e3:c7:b5:
         e8:cf:8c:ab:6a:3d:d7:8a:6a:b4:86:ec:4a:66:3d:13:62:f0:
         a0:71:c7:23:af:41:a2:38:fb:e9:97:2b:cc:33:13:ba:f3:16:
         77:67:7a:7a:62:1a:b2:36:cf:72:fc:f4:4a:f1:9d:8a:9f:c2:
         ac:65:1a:21:15:f6:f7:f9:cb:65:10:a2:90:f2:22:95:e6:6f:
         27:87:6b:c8:f8:37:cd:37:57:f5:f8:05:68:4d:68:fb:b2:34:
         32:b8:ec:ea:af:ba:bd:52:37:da:02:6e:ca:27:9d:3e:a6:6d:
         bd:50:84:83:b4:73:e2:e0:c9:43:56:8e:0b:6d:0a:33:b0:c1:
         78:1f:90:3b:23:b3:0b:32:0e:be:ce:64:e5:7b:c3:20:11:b0:
         1a:a5:ad:20:3a:dd:27:81:cb:51:50:fe:bf:c0:cd:81:b9:35:
         71:f2:20:11:27:08:ab:5b:86:5d:ce:cf:22:87:68:2a:34:bf:
         41:6e:01:86:ae:06:eb:75:2d:2d:49:e9:3a:ec:42:83:9f:31:
         5a:47:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:01 2025 by rpki-client