Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft
File:                     SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft (raw, json)
Hash identifier:          +lIJJpOcGdth7S+4RtB8Ie9rxL8RBNJstieeQWS8xjg=
Subject key identifier:   61:B8:F7:C9:C6:A1:F1:F8:DB:13:56:06:A1:AC:AE:32:FA:93:62:CE
Authority key identifier: 48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6
Certificate issuer:       /CN=48a2700204c8e7820927bbe0bcd120c0c2410cf6
Certificate serial:       018F87B6B37DEF095C348C4F8CC2C6F8AEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft
Manifest number:          67
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: SKJwAgTI54IJJ7vgvNEgwMJBDPY.crl (hash: CRBW6g4drdVCLeLu21FGuxMiFvSiaKKmRUlNAsHIDls=)
                          2: q34zG9qVtCY8C3wIf9ymq-XLQxg.roa (hash: F/1MYUF0EH0Pq3Rhy3FecbiXrQFGDqS0/cQiDyWjSA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b3:7d:ef:09:5c:34:8c:4f:8c:c2:c6:f8:ae:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a2700204c8e7820927bbe0bcd120c0c2410cf6
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=61b8f7c9c6a1f1f8db135606a1acae32fa9362ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:42:38:e3:85:67:3c:d3:ba:fb:af:b0:7b:
                    1e:39:4a:84:64:f7:e4:28:c6:b8:7c:d9:21:93:58:
                    a4:0b:17:1d:f9:59:c2:e0:23:50:d2:70:e7:62:1e:
                    52:a0:ee:42:b4:8a:b1:e5:11:95:7b:d4:f4:46:db:
                    0e:30:ad:7f:79:dd:81:40:c6:38:ba:fc:19:80:4a:
                    40:f1:71:d3:6a:5e:ee:b2:9e:ce:24:44:c8:a0:ff:
                    16:7c:56:a2:c7:43:e1:3b:66:4c:58:cc:6b:a8:f0:
                    b6:5c:a1:e9:e8:ca:6a:c6:0a:eb:a5:70:d4:79:ed:
                    bf:a8:19:b8:83:62:bd:b3:bd:d4:e0:a9:1b:77:dd:
                    1c:00:49:99:3b:8a:8f:c6:d2:a8:4f:0c:b6:73:c5:
                    6d:8b:2f:40:36:42:d4:4b:09:0b:51:27:b0:24:55:
                    fe:cf:28:29:a0:1d:d1:ff:82:12:79:d5:a5:f3:19:
                    17:79:4c:08:df:43:74:ec:e4:ed:ac:ac:6c:32:1b:
                    15:a7:ca:0d:f4:df:06:ac:8a:4f:4b:7e:5f:73:53:
                    c2:c6:3c:a0:aa:42:c2:d2:d1:a9:96:83:cd:90:d7:
                    85:a5:cd:29:83:b7:8c:01:69:c4:33:0b:14:a3:3f:
                    65:4a:76:02:e2:72:4d:29:fd:03:dd:c2:94:82:fc:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:F7:C9:C6:A1:F1:F8:DB:13:56:06:A1:AC:AE:32:FA:93:62:CE
            X509v3 Authority Key Identifier:
                keyid:48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:46:eb:d8:0c:9a:4c:0b:cc:75:28:93:6b:c5:1f:45:c7:0d:
         a3:a3:6b:00:16:f4:c5:0f:35:43:cc:2e:9b:35:c1:bf:0b:d7:
         8d:64:2a:a3:a8:04:e7:ef:bc:e2:f9:c7:c7:fe:57:fe:55:5b:
         2d:c3:8e:0c:ed:9c:19:73:c7:e8:e8:5f:ab:f2:42:b2:de:ba:
         87:d4:08:e8:78:3c:b3:67:77:0b:41:ae:c3:f7:bc:0d:68:f8:
         29:b2:a0:03:a5:21:6f:08:4b:54:6e:1f:47:76:d5:07:05:0b:
         4a:0f:6a:2f:92:2f:57:e9:6f:77:db:d6:6b:81:a6:2f:3b:a1:
         b2:45:30:4e:2f:dc:fe:58:83:b6:88:59:6d:77:76:01:34:3a:
         48:c9:6b:d4:7e:83:81:59:34:0a:46:46:64:d5:a9:87:ae:7a:
         63:aa:d9:7d:a7:37:be:1e:ef:40:1c:6e:23:cf:d4:d9:1e:be:
         6a:04:a5:3e:1e:59:94:30:37:03:58:98:eb:32:d2:b5:e0:d1:
         f0:4e:70:4c:c3:c3:29:00:17:fd:07:ca:13:1d:91:2d:22:de:
         1d:78:83:fb:b0:36:7d:c4:bb:48:21:ce:c8:09:3a:ce:17:c7:
         18:83:9d:40:1d:92:3c:fc:dc:a4:f3:23:89:0f:5c:15:5d:57:
         12:0e:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:53 2024 by rpki-client on console-fra.rpki-client.org