Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
File:                     PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft (raw, json)
Hash identifier:          3jv2YPrIwkA5RyLrNbI2U4YNT9UDioI4csJ7GiBBnBo=
Subject key identifier:   53:66:43:08:AA:55:0E:92:30:40:75:14:2F:3B:BD:63:F6:16:71:AF
Authority key identifier: 3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
Certificate issuer:       /CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Certificate serial:       019040AFFF84FA0FBF7D927C07063FA2F470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
Manifest number:          10AF
Signing time:             Sat 22 Jun 2024 16:03:14 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:14 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:14 +0000
Files and hashes:         1: Mq-rHIKdmkoZTDI5BTlh-xAv8Ig.roa (hash: /j3sjRjCERKN0/M3ASLFEvhVY1frlHIJtmIFLBR4s+0=)
                          2: PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl (hash: xq4uCVH1JJBfa0tdJvY1EfvjI1JKmNc2mUQ+im8XhQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:ff:84:fa:0f:bf:7d:92:7c:07:06:3f:a2:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
        Validity
            Not Before: Jun 22 16:03:14 2024 GMT
            Not After : Jun 23 16:03:14 2024 GMT
        Subject: CN=53664308aa550e92304075142f3bbd63f61671af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:b0:ea:92:23:12:7b:3b:a5:27:23:cd:20:
                    36:39:24:9d:ab:38:f9:e3:1c:7b:4e:45:55:ae:d0:
                    de:24:64:46:06:f5:17:14:a2:ad:70:3e:b1:dc:b0:
                    ca:3b:84:5e:93:dd:45:3a:56:0d:11:5c:b3:9d:c3:
                    fa:7d:19:5c:c1:b8:66:b0:b3:f7:ff:52:ae:dc:07:
                    b3:c9:56:14:e6:2a:c7:12:bc:87:34:f2:03:df:7d:
                    12:31:b0:b6:a0:ec:14:dd:a9:26:08:a7:8d:06:8d:
                    5c:96:63:5f:fe:7c:60:24:77:96:c9:bd:68:20:55:
                    93:b2:35:35:02:95:b2:fc:86:5c:f9:d2:1b:8b:87:
                    2c:3c:58:0f:17:44:46:b6:4d:88:ae:06:18:74:5f:
                    9a:1d:6d:a7:54:69:53:3a:d9:d5:4d:5f:97:5c:90:
                    89:03:be:5e:46:5d:6e:0f:5f:2a:c4:8a:41:70:cb:
                    a2:f9:04:9f:7e:27:70:c4:88:01:5e:a5:54:cd:4f:
                    fe:80:2a:29:4f:ca:9e:74:02:11:d2:e2:f7:5a:52:
                    a3:5a:bb:20:a3:87:2f:18:82:28:f5:8e:60:12:68:
                    4f:dc:e0:a2:e0:4a:d1:e0:a7:5d:ef:6f:d9:95:0e:
                    08:31:4c:b9:d6:4b:8d:5f:c6:56:bf:18:e3:0a:bc:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:43:08:AA:55:0E:92:30:40:75:14:2F:3B:BD:63:F6:16:71:AF
            X509v3 Authority Key Identifier:
                keyid:3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6f:47:0d:29:bb:05:3d:e9:85:65:b8:b6:5d:0f:84:10:a9:
         5f:bd:17:4d:27:a4:03:56:59:af:41:bf:21:67:03:73:45:5c:
         b9:bc:01:9e:a8:16:fd:5e:eb:b1:00:d8:82:06:13:05:9c:40:
         f8:f0:51:7f:9b:5f:94:7a:d8:06:c9:be:f3:bd:81:33:3b:3c:
         eb:a2:29:e1:d8:8a:0d:c8:23:7e:3f:8b:43:cc:0e:f5:fe:f9:
         19:00:2e:af:5b:a7:f3:1a:df:65:d7:60:20:c9:cf:4c:b3:8d:
         a3:d1:98:82:4b:d9:ef:70:5c:16:b9:dd:93:a1:66:aa:c6:7d:
         38:80:42:4f:aa:47:1c:53:f5:6f:80:28:a0:2f:21:a4:bb:d3:
         fe:c9:71:c4:fa:c0:ea:97:89:e2:b6:b9:cc:31:0b:d5:4a:c0:
         b8:61:66:43:d8:e6:e2:c6:d0:ec:1e:57:d2:75:d2:ee:61:8f:
         ed:e8:30:25:69:2c:9f:15:96:e0:c3:e9:8a:b7:cc:ad:35:b6:
         11:c7:9f:67:1f:a4:2a:e0:c5:fc:d5:6b:be:09:6a:0e:4d:1e:
         90:5b:6c:46:fe:50:80:41:9c:4e:7a:46:b7:3e:56:43:9d:1f:
         c9:a0:f7:f9:5c:d6:16:ac:d9:e4:ce:9c:42:72:ad:f2:e1:c8:
         18:5e:22:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAr/+E+g+/fZJ8BwY/ovRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMDlhNTRjYzIyNGFkN2IzY2EwYzU3NTMxN2I4MTg0ZTJh
Y2UyMTYwHhcNMjQwNjIyMTYwMzE0WhcNMjQwNjIzMTYwMzE0WjAzMTEwLwYDVQQD
Eyg1MzY2NDMwOGFhNTUwZTkyMzA0MDc1MTQyZjNiYmQ2M2Y2MTY3MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCiw6pIjEns7pScjzSA2OSSdqzj5
4xx7TkVVrtDeJGRGBvUXFKKtcD6x3LDKO4Rek91FOlYNEVyzncP6fRlcwbhmsLP3
/1Ku3AezyVYU5irHEryHNPID330SMbC2oOwU3akmCKeNBo1clmNf/nxgJHeWyb1o
IFWTsjU1ApWy/IZc+dIbi4csPFgPF0RGtk2IrgYYdF+aHW2nVGlTOtnVTV+XXJCJ
A75eRl1uD18qxIpBcMui+QSffidwxIgBXqVUzU/+gCopT8qedAIR0uL3WlKjWrsg
o4cvGIIo9Y5gEmhP3OCi4ErR4Kdd72/ZlQ4IMUy51kuNX8ZWvxjjCrzNywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNmQwiqVQ6SMEB1FC87vWP2FnGvMB8GA1UdIwQY
MBaAFD4JpUzCJK17PKDFdTF7gYTirOIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdtbFRNSWtyWHM4b01WMU1YdUJoT0tzNGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81ZWYzZTItMDYwMy00NmZkLWFkOWYt
OGQ4YjZlMTE2MjE5LzEvUGdtbFRNSWtyWHM4b01WMU1YdUJoT0tzNGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81ZWYzZTItMDYwMy00NmZkLWFkOWYtOGQ4YjZlMTE2MjE5
LzEvUGdtbFRNSWtyWHM4b01WMU1YdUJoT0tzNGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG9HDSm7
BT3phWW4tl0PhBCpX70XTSekA1ZZr0G/IWcDc0VcubwBnqgW/V7rsQDYggYTBZxA
+PBRf5tflHrYBsm+872BMzs866Ip4diKDcgjfj+LQ8wO9f75GQAur1un8xrfZddg
IMnPTLONo9GYgkvZ73BcFrndk6FmqsZ9OIBCT6pHHFP1b4AooC8hpLvT/slxxPrA
6peJ4ra5zDEL1UrAuGFmQ9jm4sbQ7B5X0nXS7mGP7egwJWksnxWW4MPpirfMrTW2
EcefZx+kKuDF/NVrvglqDk0ekFtsRv5QgEGcTnpGtz5WQ50fyaD3+VzWFqzZ5M6c
QnKt8uHIGF4i7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:34:04 2024 by rpki-client on console-fra.rpki-client.org