Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File:                     PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier:          8web7lvuEv9M6iQKATBT/mA6Tv3BWqe69bZOiJwrL8g=
Subject key identifier:   89:11:A7:7C:30:49:38:05:B8:0F:E5:7C:F7:16:CD:7D:E8:B8:50:60
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer:       /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial:       01901DECCF58658EE6B156EC4B672752F310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number:          0AC8
Signing time:             Sat 15 Jun 2024 22:02:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:57 +0000
Files and hashes:         1: EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa (hash: 8kyRh098i1I61V3Aw1r/ja6BlssTov2/wsOFOTfXc4U=)
                          2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: /OWPp8GGhp95TIl/uIXEnrNdGT1rpDc4w4/YSeHxbpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:cf:58:65:8e:e6:b1:56:ec:4b:67:27:52:f3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
        Validity
            Not Before: Jun 15 22:02:57 2024 GMT
            Not After : Jun 16 22:02:57 2024 GMT
        Subject: CN=8911a77c30493805b80fe57cf716cd7de8b85060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:7f:c0:f8:54:2a:21:5b:1d:65:5f:79:1a:
                    41:02:7c:b5:d7:bd:e5:fa:cb:37:f0:db:9d:0a:80:
                    64:48:9b:63:7c:a4:0a:c6:69:48:f8:66:6b:b2:94:
                    24:94:3a:4e:3b:82:30:ef:95:b4:d0:00:c6:17:2e:
                    bc:0a:df:44:30:f0:ce:86:17:e1:50:13:a9:3a:51:
                    10:8b:28:b5:f8:ad:0d:ad:1a:cd:70:f9:e3:1b:11:
                    da:8e:fd:e8:56:f2:8c:2c:d7:7e:21:b2:4f:72:06:
                    e3:58:0b:e0:80:7f:d6:50:cb:ab:eb:78:c1:71:b9:
                    0d:17:f3:08:92:3b:ae:23:04:0b:ff:99:44:0e:37:
                    7f:c5:21:44:39:08:8f:98:09:75:f5:8d:cd:ef:39:
                    ba:5a:f8:85:ba:1b:bb:83:74:03:5a:8b:8d:d2:e8:
                    f3:18:25:15:37:62:79:6a:e0:7d:56:4e:d0:2b:16:
                    e7:55:28:0f:03:e9:03:21:29:ba:36:1c:5c:b2:de:
                    82:78:c5:ec:92:e9:60:9e:6d:39:b3:cb:b6:06:3d:
                    37:6e:e5:ff:25:cc:ab:fe:35:e1:82:14:3e:80:37:
                    5d:5d:ba:2b:c3:09:ca:67:4a:b8:7e:a8:00:dd:74:
                    6e:a4:08:92:f9:11:35:eb:2f:cf:67:49:ce:61:13:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:A7:7C:30:49:38:05:B8:0F:E5:7C:F7:16:CD:7D:E8:B8:50:60
            X509v3 Authority Key Identifier:
                keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:aa:4b:f9:90:4d:a2:91:44:b0:3b:4a:ea:22:c4:8e:99:
         f9:2a:73:f6:4e:9e:06:3a:67:04:4f:68:ad:87:5b:df:98:0c:
         1b:47:4c:d5:4d:ac:d1:a9:34:04:32:03:25:60:37:db:87:35:
         67:51:cb:99:46:0e:3a:2b:a9:63:c1:8f:d5:5f:b2:85:1b:06:
         ea:b6:d4:c1:65:31:25:5f:ae:af:bd:b1:49:62:0c:2b:70:13:
         0e:e3:1e:d0:69:02:9d:87:58:cd:db:54:a6:05:2d:5f:a2:f2:
         70:10:8c:2a:7c:75:c8:c8:4d:2a:98:83:94:69:ab:74:62:01:
         e5:6a:0a:46:46:4d:3a:df:3a:8a:74:0a:64:b6:6b:d1:8d:e3:
         86:e1:16:ff:a7:8f:ce:fd:59:e7:eb:ab:44:1a:89:26:02:61:
         40:c9:0a:62:64:5d:b2:73:e2:ce:f3:e6:c6:5f:df:07:50:ff:
         44:00:a8:99:73:4e:82:8e:2e:5e:24:c4:f8:db:d6:b7:b2:6f:
         45:c4:a1:da:6a:18:55:98:1b:13:7d:2d:5c:fb:4a:51:05:13:
         fc:97:f4:e7:12:74:fe:f9:c7:38:5c:93:0e:50:2a:7d:25:f9:
         e1:25:1d:45:24:a1:25:b0:d2:e7:89:4f:5b:fd:b7:16:01:8b:
         b7:f9:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:57:21 2024 by rpki-client on console-ams.rpki-client.org