Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File:                     PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier:          oY5WucG0n3vwygLXHdrkRaIoQHjS3RxqwbQQ6EfYXek=
Subject key identifier:   EE:98:63:B5:69:40:5C:8D:FB:9B:E4:82:81:DC:4F:16:2A:62:54:2B
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer:       /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial:       01902982B81A5864B2D53835CC4BC29E1F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number:          0878
Signing time:             Tue 18 Jun 2024 04:02:30 +0000
Manifest this update:     Tue 18 Jun 2024 04:02:30 +0000
Manifest next update:     Wed 19 Jun 2024 04:02:30 +0000
Files and hashes:         1: 9Rltt9XgOImZch_SdNWkh1a-y3M.roa (hash: jClHBohqiJC7gN+lCFwklXpNhL28fkejfvC91vrtkxs=)
                          2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 8Nz4vhrDbJCG9djVzu5YIL4onEqsLQTnaAGxFwcsoAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:82:b8:1a:58:64:b2:d5:38:35:cc:4b:c2:9e:1f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
        Validity
            Not Before: Jun 18 04:02:30 2024 GMT
            Not After : Jun 19 04:02:30 2024 GMT
        Subject: CN=ee9863b569405c8dfb9be48281dc4f162a62542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:35:ca:42:4b:18:89:19:0b:78:a7:02:5c:
                    13:54:3d:90:58:cc:c6:d3:3d:f0:cf:86:37:a5:7a:
                    2f:40:7f:a5:5b:88:7f:2f:20:23:a5:9e:68:12:ee:
                    42:8e:e8:1e:5c:07:b8:2e:d6:8d:2b:07:28:ca:af:
                    d5:0f:ec:69:a5:21:07:e7:c9:d3:e4:98:83:78:b3:
                    8b:e2:b2:b8:fd:13:10:6f:af:86:a0:67:e6:1e:03:
                    4e:e9:e7:97:b0:72:af:79:76:b1:59:95:80:b8:c7:
                    4a:77:da:cc:9f:62:f1:3f:9f:8d:30:de:1b:19:59:
                    8b:aa:44:5d:af:ed:c9:b0:56:fc:25:e1:79:e6:a1:
                    18:f7:d7:8f:01:2f:78:b3:20:5b:88:a7:1e:96:ae:
                    8f:18:a1:1f:27:58:d6:41:50:ec:a5:da:ed:55:a5:
                    fc:d5:7e:d5:71:4a:8c:12:24:25:3d:a4:59:80:8b:
                    c3:6a:e2:71:3e:b9:1e:7c:af:41:b2:4b:ab:fa:b1:
                    10:a6:c4:fe:09:03:21:e3:03:be:64:85:75:62:d4:
                    ac:26:29:12:31:36:ca:78:56:ec:db:71:b3:b5:f5:
                    86:1e:c3:38:88:c8:50:dc:a9:f2:91:4b:db:63:ec:
                    c8:ae:58:e5:e3:06:71:83:58:a2:08:36:3d:59:50:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:98:63:B5:69:40:5C:8D:FB:9B:E4:82:81:DC:4F:16:2A:62:54:2B
            X509v3 Authority Key Identifier:
                keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:ac:c7:63:fd:8c:2f:ae:71:84:be:34:ce:58:19:69:a9:
         be:a9:e4:f1:3b:a6:d6:bd:a9:3c:2c:82:9a:a6:ee:e2:f6:68:
         a3:ec:ec:26:77:b3:19:ec:a8:19:01:5c:8f:e3:73:f2:a1:b1:
         30:dc:38:6e:c5:80:a9:28:59:9c:08:e0:17:c3:53:2f:90:b1:
         e5:82:4b:76:26:7f:9f:60:0c:fb:73:04:1f:cb:2f:81:16:f1:
         a1:27:37:85:ce:12:54:e3:98:1e:b6:13:92:14:f4:87:7e:a0:
         0a:12:53:cc:d9:f8:b0:06:b4:76:19:16:4f:ec:c6:67:cb:37:
         ac:e7:53:2d:cc:eb:6c:67:22:ba:e7:f6:93:92:f7:22:eb:ed:
         a5:ad:ff:8c:e7:2f:41:55:73:92:7c:e1:ed:c9:02:4a:65:fe:
         a9:1e:60:fb:c6:d0:0b:9d:28:46:64:d9:b3:78:0e:d5:77:1c:
         62:c1:22:b1:d5:6f:2b:f9:0d:35:ad:3c:90:a1:30:38:ed:8c:
         c9:d0:39:d6:58:bf:50:f3:64:84:c9:15:0e:a7:b0:fd:77:dc:
         46:c9:fd:68:6f:f5:d2:b9:57:4d:db:c8:e4:b9:09:d3:c4:63:
         2f:f0:04:bf:cf:a3:da:83:a2:63:36:7d:cd:74:64:dc:f6:60:
         8b:fd:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:11:13 2024 by rpki-client on console-ams.rpki-client.org