Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File:                     SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier:          3KEy26g4wIB1XRewz1Ejv9HbiK1l1jAZz0Bg42HDA2k=
Subject key identifier:   26:DB:CC:75:B3:A1:31:B6:B9:25:01:9D:C6:EA:A3:F5:FA:4C:1B:EC
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer:       /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial:       018F86A4135C29FF2051DB331BA07F050CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number:          68
Signing time:             Fri 17 May 2024 13:00:50 +0000
Manifest this update:     Fri 17 May 2024 13:00:50 +0000
Manifest next update:     Sat 18 May 2024 13:00:50 +0000
Files and hashes:         1: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: ioxAljo/4n49H6Dw7kfGTsTOEJB8c9yoPqnNBbOgTDE=)
                          2: ruk1mu19cKFh4_js5tunBVf4zug.roa (hash: QvkJroAbxxn3LSWH9WUUTTshNCqrEZ/x6uMn2UqQqj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:13:5c:29:ff:20:51:db:33:1b:a0:7f:05:0c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
        Validity
            Not Before: May 17 13:00:50 2024 GMT
            Not After : May 18 13:00:50 2024 GMT
        Subject: CN=26dbcc75b3a131b6b925019dc6eaa3f5fa4c1bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:68:83:8a:e4:8b:2e:da:f7:7c:4d:d2:37:
                    97:16:71:32:a2:cf:51:88:e5:15:4c:54:f8:7a:ed:
                    77:06:1d:c6:62:23:c5:37:b8:c2:d3:4b:60:b2:4f:
                    75:5c:da:55:5c:f7:ee:3b:74:bd:11:9b:a9:2c:84:
                    04:27:8c:91:31:df:57:ad:4f:e1:30:c8:1f:38:aa:
                    fb:0f:61:67:25:56:3a:71:61:1f:55:09:5c:14:20:
                    f1:7f:cf:7c:d8:6b:93:34:c8:81:7d:d9:83:a9:ae:
                    82:e2:eb:bc:42:75:7b:66:88:78:71:e0:6c:56:81:
                    6e:ba:01:b7:1a:60:46:ac:fb:08:dc:b5:63:0f:ce:
                    12:f4:53:b7:cc:e6:a4:eb:fb:00:7c:2d:02:b0:5a:
                    20:10:04:21:7d:7f:a2:a5:98:e1:fc:12:2c:79:43:
                    3c:54:52:da:af:36:20:fb:f2:18:0d:d4:26:73:b7:
                    58:06:ba:9e:ca:31:16:ab:8c:97:76:15:40:76:4c:
                    c9:1c:dd:16:a8:ab:15:2f:88:50:06:f5:9e:77:7a:
                    22:22:12:86:e0:73:d4:f9:f2:ba:d0:7b:d1:8b:8b:
                    35:f3:df:7e:0b:62:4a:3c:d4:11:f2:61:6b:e6:33:
                    8d:d1:71:fd:70:49:6c:88:90:d8:a3:0d:e9:07:ed:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DB:CC:75:B3:A1:31:B6:B9:25:01:9D:C6:EA:A3:F5:FA:4C:1B:EC
            X509v3 Authority Key Identifier:
                keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a0:6d:7f:0e:ee:67:99:70:a0:d5:11:03:dd:f4:5e:c7:67:
         04:af:f1:b8:a2:c2:ac:9e:ea:76:c6:4a:a4:52:24:8b:08:1d:
         d0:f8:10:81:14:43:3a:79:e6:bc:1f:71:4a:bb:2b:6d:8d:1a:
         8d:92:13:76:b1:35:f4:e1:25:23:a2:2d:d8:f2:7e:33:65:5a:
         dd:65:2a:c5:b0:2b:5e:60:a7:5d:2e:e6:7e:5f:fe:75:bd:5a:
         13:33:5f:57:31:49:0a:bc:1c:e5:80:36:5f:b8:44:aa:a7:17:
         73:72:3d:dd:19:00:b7:a6:36:6e:d9:f4:4d:52:f1:6e:7d:4e:
         45:97:88:69:bd:db:dc:bf:3b:47:d2:01:70:34:c0:b8:28:39:
         20:f6:24:2d:7d:76:14:fc:77:50:bc:7a:f7:9a:39:79:c8:e1:
         a7:da:a4:e2:23:62:11:38:74:3d:da:3d:ea:74:9a:f8:8b:8f:
         8b:4c:ef:17:76:07:0f:60:08:d2:ca:3b:ea:8d:63:a8:95:03:
         46:74:c1:68:52:da:a1:d2:20:b5:db:1e:4a:38:83:29:00:16:
         4b:b4:bc:63:3e:43:a6:ce:8c:3e:b2:12:3e:26:6e:a3:66:c1:
         32:40:6a:0b:b0:24:c0:ba:4c:21:d2:a7:4e:4a:7c:7a:30:a3:
         d7:25:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:01 2024 by rpki-client on console-ams.rpki-client.org