Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File:                     scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier:          AqVbcVL9YRphFYY14MlYM2ESI1+mSkNIXqNK5qvROfQ=
Subject key identifier:   B8:15:55:79:D3:15:CB:B5:F8:70:4B:41:8B:18:53:98:D3:1C:59:67
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer:       /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial:       01903AE37DFFA2D060B5A099103F061E7EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number:          0490
Signing time:             Fri 21 Jun 2024 13:01:45 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:45 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:45 +0000
Files and hashes:         1: 0QXJBLKyOd-ZI0g8nHb7U-kpdrQ.roa (hash: 7gpAlSfanZv57qjD3+hyqBtgfGo/+Y0oIk0BcysEQEw=)
                          2: BAYMWjNPc4aT81JQhPjrXO_Der8.roa (hash: YsTym/cQQpBW+FW29Hxq1d2mklEHgl7mYTZMzFsEcn0=)
                          3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: ojpU1nWuBn3HdhJe82njAEYUuy8Nfxq1yPsx4GnLrsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:7d:ff:a2:d0:60:b5:a0:99:10:3f:06:1e:7e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
        Validity
            Not Before: Jun 21 13:01:45 2024 GMT
            Not After : Jun 22 13:01:45 2024 GMT
        Subject: CN=b8155579d315cbb5f8704b418b185398d31c5967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:7b:1e:6b:18:b4:92:42:ef:d3:07:8f:0c:
                    47:d2:92:61:ee:d7:6d:4e:2a:cf:f0:98:b6:d1:7a:
                    a1:d6:05:26:e0:17:cb:08:e0:1e:25:31:f5:c4:5b:
                    31:7b:8d:b4:88:c9:13:5d:c6:cb:b6:f3:09:48:d5:
                    36:f5:19:28:cc:3b:48:17:f5:4c:6f:65:6d:61:8b:
                    1a:0e:bc:43:46:ba:3d:a4:36:4c:9d:71:34:fd:29:
                    cd:dd:a1:8c:98:62:06:13:e7:46:48:06:87:e8:5e:
                    c4:92:1b:f3:ab:d0:b5:9d:d1:bc:b5:4b:e9:64:fa:
                    41:e1:06:df:b6:b0:d8:af:e5:29:d8:9d:09:24:3b:
                    3c:c1:fe:f2:e7:a8:f4:eb:82:96:48:12:4a:d5:b2:
                    08:26:58:30:5c:17:34:38:ea:97:70:04:78:e8:0d:
                    b9:bb:f2:1a:bb:1c:71:94:fa:8f:bb:66:65:e4:5d:
                    0d:fb:de:28:54:2a:17:82:2e:09:32:f6:8a:aa:e2:
                    09:12:ba:c1:f2:79:8c:1c:55:e3:a4:b4:56:55:43:
                    2a:c2:d1:a8:6e:b2:1b:04:30:c7:79:50:e2:f3:26:
                    d1:89:8c:b1:f5:e0:1c:5a:e8:62:cd:9e:4e:69:3b:
                    21:50:fb:3b:93:ed:d9:08:54:d1:49:bd:b9:32:08:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:15:55:79:D3:15:CB:B5:F8:70:4B:41:8B:18:53:98:D3:1C:59:67
            X509v3 Authority Key Identifier:
                keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:43:31:cb:8d:1d:b4:82:72:0d:20:90:73:1a:ac:1c:1e:
         41:a0:9a:90:1a:15:e9:9e:69:2f:31:06:20:86:bd:04:70:bc:
         d6:e4:44:33:dd:e2:51:6c:e9:51:95:83:ed:0c:ba:fa:3b:d1:
         0d:14:1c:39:bc:69:29:b5:27:23:e5:68:5a:40:b5:44:2a:9f:
         74:d1:a4:42:6b:58:ea:20:af:80:09:75:ef:82:b0:de:cc:a0:
         06:e2:3e:f5:6f:ef:cd:91:58:5d:16:a1:5e:01:6d:25:d9:10:
         16:e4:dc:82:55:68:1f:60:4d:23:b4:5d:75:bf:d1:92:ee:df:
         8a:b7:ed:f6:cd:fa:fe:27:6a:3a:fd:3f:03:97:f3:e3:43:a7:
         c3:5b:0e:94:01:8e:96:47:ac:d9:7c:41:da:1a:87:05:d0:00:
         fd:f9:43:4b:59:62:9d:32:4f:34:3d:09:ff:aa:e8:40:8e:5e:
         f2:a0:5c:bc:9e:9d:31:67:2b:1f:24:78:40:f7:4d:06:72:69:
         f8:6a:81:1b:ff:dc:bb:b4:e4:0c:69:55:02:b3:09:eb:43:30:
         49:3d:3a:20:3f:01:af:06:8e:a5:9d:f6:52:ba:26:64:c9:b0:
         9c:4e:6b:6e:7e:a1:95:17:f3:21:b4:35:c2:3d:7a:a1:4d:c2:
         1a:e7:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:31:13 2024 by rpki-client on console-ams.rpki-client.org