Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft
File:                     PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft (raw, json)
Hash identifier:          a8YCY8WlS47zpRP/uKOkEEDWUEDDkEPXB/EPzgZ2rAg=
Subject key identifier:   85:4C:78:CC:83:F8:44:CD:3F:03:2C:78:A7:F0:BE:F2:C7:B6:EC:18
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Certificate issuer:       /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial:       018F8D157EE0CDDE8427F9094BF751E8DCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft
Manifest number:          0B39
Signing time:             Sat 18 May 2024 19:02:27 +0000
Manifest this update:     Sat 18 May 2024 19:02:27 +0000
Manifest next update:     Sun 19 May 2024 19:02:27 +0000
Files and hashes:         1: MijA26x46sfg5W3B-_BEVsvsnOE.roa (hash: hB+1fbY/Bdqx8zf12roJF6i4hrqgYjjSjmSWFF27zeA=)
                          2: PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl (hash: hb4hLHiLjTZGUSH0dXPsbKdX7ctDiQVzTSNadTIbPFY=)
                          3: aQk7kcQGY_WquWN7RFlJKHR6tdM.roa (hash: HK/C5EaCSirkE+3zud59vJDjaztAXaqfG9dMzu/SydY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:7e:e0:cd:de:84:27:f9:09:4b:f7:51:e8:dc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
        Validity
            Not Before: May 18 19:02:27 2024 GMT
            Not After : May 19 19:02:27 2024 GMT
        Subject: CN=854c78cc83f844cd3f032c78a7f0bef2c7b6ec18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:08:a7:70:5d:3f:a4:7d:6b:7c:a2:7f:0c:
                    77:02:3a:77:16:f8:db:97:00:20:0b:52:7e:45:2d:
                    de:7b:ca:fa:fd:a7:7f:97:15:02:6e:52:ef:3f:a9:
                    ce:41:35:ed:51:b8:6b:4a:ee:ce:1f:0b:fc:a4:a7:
                    f6:3e:c3:b7:e4:65:13:79:78:1f:ff:8a:60:df:73:
                    e3:0f:d5:4f:1b:c0:3d:ee:d8:28:e9:bb:f1:1d:8a:
                    1b:b9:63:68:11:d7:bb:09:e6:f0:b8:ac:89:23:2e:
                    b8:fa:5b:b6:03:b5:66:98:9d:20:b7:53:05:73:ac:
                    9b:ee:7f:ab:67:fb:c2:6e:36:59:96:d5:12:9b:2b:
                    31:4a:fe:7d:ee:30:da:0f:9b:59:8c:96:a5:5f:34:
                    d6:fa:43:81:34:42:ad:22:9c:a0:3e:30:af:ed:6b:
                    c0:d1:03:ee:fc:8f:aa:12:db:2e:0c:d4:6d:0a:79:
                    f4:c7:cd:5c:de:b1:81:07:cb:af:09:3c:be:73:b2:
                    07:79:4b:11:59:35:a7:7c:3a:aa:3a:bc:0c:f0:5f:
                    ea:6d:f8:66:56:80:74:6c:4d:d9:33:21:7b:3b:ef:
                    c6:98:81:86:08:2d:2a:28:18:3e:2e:94:15:a8:18:
                    a3:26:38:24:86:24:cc:0c:55:c6:7e:67:06:96:58:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:78:CC:83:F8:44:CD:3F:03:2C:78:A7:F0:BE:F2:C7:B6:EC:18
            X509v3 Authority Key Identifier:
                keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:e5:82:67:8d:fa:bc:a7:33:8f:48:fa:a8:51:78:13:73:
         b1:50:69:e3:21:9a:86:94:4f:2c:82:95:e9:b2:6d:79:1e:f9:
         68:59:db:ce:e8:73:5e:14:31:7e:63:db:ca:51:2f:20:21:11:
         8c:91:11:9e:e0:d5:2b:39:d7:7c:2e:2f:e5:e6:81:18:76:c3:
         68:00:2e:72:5a:53:7b:53:1f:a5:d9:8a:94:dd:bf:61:33:43:
         4c:43:41:1c:2e:65:ce:9e:b5:62:ec:8d:2d:de:58:17:58:10:
         a1:66:ff:d3:12:a4:f8:e6:7a:d4:ab:47:da:41:ab:83:3d:00:
         b5:2b:c1:d0:b9:13:81:1a:37:75:47:32:3f:08:f4:e7:9b:01:
         a8:84:ce:89:32:60:bd:3f:90:0d:71:85:c7:05:35:a0:2b:02:
         4a:d8:80:76:4c:80:64:48:78:3c:cd:5b:e4:93:7d:77:7b:6e:
         b2:df:f1:01:05:56:65:f5:16:e7:39:9e:f6:e9:a4:40:76:62:
         aa:f8:36:da:53:de:b9:d0:ef:5d:02:3e:15:51:c2:0e:0b:f6:
         98:cd:bb:21:6c:17:2d:00:45:3e:c7:2f:ee:82:17:90:76:d5:
         d0:92:c3:f5:5a:f1:c0:e3:f0:a5:74:97:c6:85:7d:b9:be:0f:
         08:2f:10:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFX7gzd6EJ/kJS/dR6NyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTJiYzA0NWFiOWNjOWYwMTdlOGJmN2ZmZTQyM2RhODA0
YTYxNGYwHhcNMjQwNTE4MTkwMjI3WhcNMjQwNTE5MTkwMjI3WjAzMTEwLwYDVQQD
Eyg4NTRjNzhjYzgzZjg0NGNkM2YwMzJjNzhhN2YwYmVmMmM3YjZlYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXwIp3BdP6R9a3yifwx3Ajp3Fvjb
lwAgC1J+RS3ee8r6/ad/lxUCblLvP6nOQTXtUbhrSu7OHwv8pKf2PsO35GUTeXgf
/4pg33PjD9VPG8A97tgo6bvxHYobuWNoEde7CebwuKyJIy64+lu2A7VmmJ0gt1MF
c6yb7n+rZ/vCbjZZltUSmysxSv597jDaD5tZjJalXzTW+kOBNEKtIpygPjCv7WvA
0QPu/I+qEtsuDNRtCnn0x81c3rGBB8uvCTy+c7IHeUsRWTWnfDqqOrwM8F/qbfhm
VoB0bE3ZMyF7O+/GmIGGCC0qKBg+LpQVqBijJjgkhiTMDFXGfmcGllgL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVMeMyD+ETNPwMseKfwvvLHtuwYMB8GA1UdIwQY
MBaAFD2SvARaucyfAX6L9//kI9qASmFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpLOEJGcTV6SjhCZm92M18tUWoyb0JLWVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNjI2ZGMtMjIxZi00YjlhLWJiNjgt
M2UzODEyZmZhMTQ3LzEvUFpLOEJGcTV6SjhCZm92M18tUWoyb0JLWVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNjI2ZGMtMjIxZi00YjlhLWJiNjgtM2UzODEyZmZhMTQ3
LzEvUFpLOEJGcTV6SjhCZm92M18tUWoyb0JLWVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfznlgmeN
+rynM49I+qhReBNzsVBp4yGahpRPLIKV6bJteR75aFnbzuhzXhQxfmPbylEvICER
jJERnuDVKznXfC4v5eaBGHbDaAAuclpTe1MfpdmKlN2/YTNDTENBHC5lzp61YuyN
Ld5YF1gQoWb/0xKk+OZ61KtH2kGrgz0AtSvB0LkTgRo3dUcyPwj055sBqITOiTJg
vT+QDXGFxwU1oCsCStiAdkyAZEh4PM1b5JN9d3tust/xAQVWZfUW5zme9umkQHZi
qvg22lPeudDvXQI+FVHCDgv2mM27IWwXLQBFPscv7oIXkHbV0JLD9VrxwOPwpXSX
xoV9ub4PCC8QCg==
-----END CERTIFICATE-----
Generated at Sat May 18 23:10:01 2024 by rpki-client on console-fra.rpki-client.org