Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File:                     RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier:          Y/Wxpy4sxvgJiWsXviyGN7mBGfx7vO9h7dAJxedECD8=
Subject key identifier:   ED:5C:0E:64:EA:BC:2F:40:31:3C:A0:01:64:10:E1:06:50:F2:E3:1B
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer:       /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial:       019047F95C52CC0893A85208332D1401575B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number:          B3
Signing time:             Mon 24 Jun 2024 02:00:42 +0000
Manifest this update:     Mon 24 Jun 2024 02:00:42 +0000
Manifest next update:     Tue 25 Jun 2024 02:00:42 +0000
Files and hashes:         1: BffRGbnJ9ylCKSP8Zu7YFM9CTps.roa (hash: jRYMFdFuHo9OGKDgxdPoRcfLVjSQl6KgwCQb8vGsDiQ=)
                          2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: wRtkNlK6rIf2914Zyi6Gg2QHj9rwDdsobc6oClEru3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:f9:5c:52:cc:08:93:a8:52:08:33:2d:14:01:57:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
        Validity
            Not Before: Jun 24 02:00:42 2024 GMT
            Not After : Jun 25 02:00:42 2024 GMT
        Subject: CN=ed5c0e64eabc2f40313ca0016410e10650f2e31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:10:4c:dd:95:45:f8:4a:ac:af:6d:a8:e9:
                    78:04:ad:dc:e8:8e:b0:a9:fe:cc:56:40:0d:14:fe:
                    ee:85:97:d6:dd:2d:94:b3:29:17:2f:a6:3c:db:0c:
                    83:76:f3:1d:10:f2:28:55:f5:d3:93:10:61:c6:9f:
                    3f:ae:33:01:da:90:9e:90:99:29:fd:49:d0:e2:18:
                    6d:77:16:93:ba:1b:27:88:40:60:19:b5:a4:1f:a5:
                    bb:cf:c1:28:73:4a:0c:28:af:fe:46:ad:26:de:bc:
                    af:0a:8e:a7:25:11:be:cc:36:d6:c1:a3:16:21:5b:
                    bb:a6:63:e0:f1:e0:a5:ad:e8:d1:f8:7e:bd:ba:5c:
                    4d:2d:7b:48:3a:70:d4:81:dc:61:39:99:33:e5:a2:
                    fd:42:09:0e:ec:eb:ed:7a:82:cb:7d:eb:cf:68:43:
                    b6:72:bc:a2:07:68:14:72:2b:21:e5:b4:04:53:ae:
                    e8:92:b5:04:0f:28:ec:5a:c4:46:92:3d:76:dc:99:
                    10:27:e7:0e:6b:7f:a9:33:78:ef:ba:18:d1:ae:7b:
                    8c:51:72:db:e8:36:77:fe:15:8b:6d:c6:7c:17:a2:
                    1e:f5:ec:72:28:4e:d8:83:1e:67:cb:bf:45:f0:dc:
                    1b:d5:52:8a:ad:74:5e:e0:60:71:1a:cf:27:c2:5e:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:0E:64:EA:BC:2F:40:31:3C:A0:01:64:10:E1:06:50:F2:E3:1B
            X509v3 Authority Key Identifier:
                keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:09:fd:14:1e:44:c0:ea:c5:c5:3d:57:cf:e0:72:7f:85:
         5b:19:35:44:5d:65:35:dc:22:d6:9f:12:cb:d6:23:71:de:34:
         24:b9:73:aa:b1:4b:2d:b9:7d:7e:fb:2f:d2:a4:79:9d:3c:ac:
         9e:e2:27:99:fe:da:4e:55:a0:26:bf:fe:87:a8:e4:27:3a:54:
         b1:6b:82:d7:39:10:07:82:e9:56:c5:f2:d4:3f:9a:1c:d8:0c:
         b0:25:d9:8e:bd:0c:ff:ff:3a:ce:3a:2d:17:56:a5:08:16:0e:
         50:72:95:83:09:ff:6b:c4:3f:45:e0:bc:70:d0:c7:53:d4:e5:
         d0:cd:15:5b:1d:e8:cd:7c:ae:3a:55:13:aa:ae:b8:e1:29:6a:
         1a:bd:f3:43:4b:d6:6a:21:76:6e:27:7d:71:0a:88:8a:1c:02:
         78:49:ec:a2:bb:d4:cb:86:17:99:1e:ca:d2:15:f3:83:33:ca:
         b7:27:17:46:13:c7:17:d1:89:ba:d1:3b:5c:ea:7e:13:d4:b2:
         3d:cb:9d:4c:5d:1f:d3:f7:02:36:b1:ba:33:58:99:4e:05:5d:
         e2:70:88:d6:09:cf:59:20:a9:59:07:3c:a8:4e:85:81:82:45:
         94:c8:15:72:4c:b9:ee:32:b8:6b:9d:21:27:2c:c3:fb:39:db:
         6b:43:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:12:02 2024 by rpki-client on console-ams.rpki-client.org