Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          XlbYjdxW6efMz7KnpUjdS0LoI+bkIoSiq4iJMMvh/ZA=
Subject key identifier:   52:67:B3:38:F3:BA:84:84:A9:6F:69:EA:14:41:58:4A:8B:5F:2E:D3
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019041F73D421A6F4A35AA1354F268992D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          0AC6
Signing time:             Sat 22 Jun 2024 22:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:40 +0000
Files and hashes:         1: 2fGkZt3FKN6UVte92B72bTLxyLo.roa (hash: +Z7+mMDc04LTJ9DeIPGjiUNwMS0Z1jjEZOt8ZGT3CDc=)
                          2: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: XfEOjpUyo7zU2FcFmYIrGsm5McyXYPMpFn3Cc2v3L/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:3d:42:1a:6f:4a:35:aa:13:54:f2:68:99:2d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jun 22 22:00:40 2024 GMT
            Not After : Jun 23 22:00:40 2024 GMT
        Subject: CN=5267b338f3ba8484a96f69ea1441584a8b5f2ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:6f:ba:ad:74:69:6e:b5:06:bc:02:b1:1e:
                    73:77:4f:90:25:07:0f:cb:35:bf:23:b1:4e:5c:25:
                    6c:8d:d0:72:ef:2d:6d:55:f2:8d:b0:0b:25:b2:1f:
                    7f:ab:c1:f4:b0:db:ac:52:8e:84:e9:e8:88:3e:bc:
                    2d:1f:83:bb:7d:50:74:d9:0d:3e:88:67:54:6c:e7:
                    08:ae:23:d2:c0:52:2d:3a:f2:aa:38:1b:2f:ac:d8:
                    5b:9b:7f:73:02:ee:81:fa:90:85:28:22:f0:29:6b:
                    27:1f:60:3f:3a:ff:84:42:55:64:97:70:f6:c5:78:
                    2c:af:c8:3b:3a:32:91:65:3f:af:25:37:c3:61:54:
                    cf:8a:bd:35:4e:94:ce:21:2a:64:d8:c2:16:ea:52:
                    95:9c:75:dd:8b:ca:2c:3d:ef:7c:e8:25:0d:53:59:
                    fa:96:ef:e9:38:6d:89:1e:52:ed:54:18:bc:84:80:
                    e0:60:ef:1f:c1:d9:54:86:9a:66:49:e6:f6:5b:01:
                    c1:5c:cf:20:db:ea:7c:bd:9d:43:e0:a7:bb:1f:8f:
                    6c:47:e6:e6:d2:30:18:90:df:d3:64:a0:d2:1c:ba:
                    6a:34:56:4f:5c:c4:9c:85:00:bf:15:a5:17:c5:67:
                    7d:2c:87:0d:cb:50:c1:37:64:76:7c:36:f5:f1:d1:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:B3:38:F3:BA:84:84:A9:6F:69:EA:14:41:58:4A:8B:5F:2E:D3
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:10:9c:e0:d7:3b:d0:b9:f7:4e:63:cf:0c:51:3c:01:e9:99:
         b1:f5:c9:08:50:d1:a8:e8:f4:04:74:f0:bd:55:07:4a:fc:b5:
         d4:ae:10:78:33:43:4f:32:f6:1a:17:bc:8b:ec:97:2d:9f:27:
         9d:52:eb:2c:2a:92:d8:cb:ac:36:87:2a:43:7a:7d:70:22:fd:
         d7:af:fc:e8:bf:c5:5d:07:9f:48:c3:9a:48:d5:a5:5f:88:bf:
         25:bb:cd:e5:d7:16:25:3d:6f:ac:d8:ac:4f:f5:7d:22:08:ab:
         f6:61:2d:de:3e:2b:46:aa:26:8d:3a:0d:a9:12:56:4c:6f:d8:
         d6:71:59:38:64:e0:90:3f:c3:7b:56:5a:c0:ad:a6:27:7f:52:
         86:04:90:8e:0d:23:d4:2b:44:16:6a:b8:44:9e:c0:5e:63:c7:
         70:0e:bb:d7:20:fb:f8:03:f5:95:2d:76:89:52:20:29:4f:99:
         de:84:29:d1:5f:2d:4c:ca:77:1f:b1:17:ce:57:0e:6f:ac:13:
         f8:8c:8e:20:69:9d:d1:f4:09:38:21:51:e6:5a:d3:c8:48:e7:
         b3:7d:c6:74:f1:c6:8c:39:bd:0a:f0:76:ad:75:56:4b:c9:09:
         2c:ad:13:55:fd:a3:f6:dd:21:dd:ec:c3:20:5f:bf:76:27:bc:
         1e:57:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:21 2024 by rpki-client on console-ams.rpki-client.org