Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File:                     PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier:          Z4Gk1FolRp9LRfLMiUAC59YjO9ShdetobqK+6K2039k=
Subject key identifier:   A0:84:8D:45:7F:57:81:28:E7:A3:14:E9:DC:8C:21:80:33:34:9E:03
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer:       /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial:       0190448B26B0C1427D777D48B1B68CF749A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number:          0ADC
Signing time:             Sun 23 Jun 2024 10:01:28 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:28 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:28 +0000
Files and hashes:         1: EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa (hash: 8kyRh098i1I61V3Aw1r/ja6BlssTov2/wsOFOTfXc4U=)
                          2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: ZdbRF03wwmzCAyOPFLjOp1YvyG1hR+f6Q3Lpffjbw4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:26:b0:c1:42:7d:77:7d:48:b1:b6:8c:f7:49:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
        Validity
            Not Before: Jun 23 10:01:28 2024 GMT
            Not After : Jun 24 10:01:28 2024 GMT
        Subject: CN=a0848d457f578128e7a314e9dc8c218033349e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:aa:3d:a5:0c:58:40:64:d0:c0:e8:1a:d0:
                    29:5f:9d:8a:ed:98:e2:67:7e:0a:e0:55:bd:9f:48:
                    60:40:0e:8a:d0:cd:68:3d:16:05:49:01:a5:39:74:
                    b9:e6:e5:b0:09:31:0f:47:b6:ef:43:53:13:fa:e8:
                    e6:0a:70:f7:52:ac:25:70:ae:23:86:09:3f:96:b2:
                    26:13:b6:c4:13:e8:16:00:d3:9d:89:37:37:12:08:
                    f1:f8:9d:d2:d0:5f:65:93:84:7f:7c:24:23:69:dd:
                    b4:48:a7:88:51:b9:d5:09:6a:34:1f:ab:7f:62:af:
                    57:40:82:e0:1d:c7:1d:31:13:ae:d8:b7:d7:3b:42:
                    be:ef:18:42:c0:80:8a:35:1c:ae:f4:73:71:64:ad:
                    0e:80:fb:2e:0a:8f:76:37:72:b8:5a:ed:e4:63:79:
                    b0:e8:b4:fd:39:3c:53:a0:99:dc:03:16:e0:5a:58:
                    3c:94:94:65:b1:5a:e9:d2:5b:7e:fb:df:d7:cb:ae:
                    46:e4:7c:9a:f7:d2:b2:48:9a:cd:b0:86:e1:68:0e:
                    62:48:65:aa:cd:a5:74:af:f6:ba:c3:65:5e:04:d2:
                    dd:1b:5c:f7:27:59:6f:1f:94:dd:bc:90:46:a6:ae:
                    a5:12:07:44:5a:d2:bc:1f:d0:3e:fe:81:2f:7f:2a:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:8D:45:7F:57:81:28:E7:A3:14:E9:DC:8C:21:80:33:34:9E:03
            X509v3 Authority Key Identifier:
                keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:50:a8:b7:be:ad:a4:bc:ae:cb:71:9e:b0:8f:d8:7d:d9:
         5a:ea:95:9b:48:6e:ef:ea:59:71:23:66:2f:67:c5:ac:a2:70:
         15:44:48:73:66:35:39:eb:ff:d8:57:a2:cc:e2:7d:2f:03:d2:
         ec:de:cd:06:b2:c4:21:0b:09:b7:14:3d:41:23:81:44:32:e4:
         d8:8f:23:5a:8f:71:5a:de:9b:e5:b3:8b:06:1d:62:3c:e7:fc:
         3e:9f:29:87:ae:37:98:88:6e:c6:51:4d:a7:15:52:ac:cd:d2:
         19:de:00:b2:3e:c1:86:9a:2b:26:be:37:4b:17:07:23:10:94:
         da:4b:5e:87:27:c5:32:b6:f8:7c:00:8a:7b:6f:25:00:db:ac:
         42:f8:8a:18:c0:8b:6e:c7:ed:56:b4:a5:71:6a:3e:12:26:b0:
         f2:ef:d3:12:06:e3:5c:7c:be:1c:e9:51:ef:f4:25:36:db:3b:
         4f:10:c2:8c:08:43:1d:82:3c:eb:b8:79:67:8e:96:f1:95:4e:
         5f:00:53:51:f6:27:68:1f:1b:15:42:ee:cb:dd:cf:b2:5b:04:
         00:d1:9e:0d:3c:98:c5:9c:34:08:7a:fa:e1:b5:10:69:d2:1b:
         5f:26:34:70:b6:79:4d:06:46:3b:b7:55:73:04:36:ea:07:10:
         1f:9c:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:17:28 2024 by rpki-client on console-fra.rpki-client.org