Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File:                     PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier:          cI0sol7WCjYBbKCkxVf8d2jwU0dAynDBdEfa7ZMFSg0=
Subject key identifier:   7C:CA:1A:69:9A:62:A9:38:4B:B0:6A:8F:62:BD:97:37:E3:03:DE:49
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer:       /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial:       018F874B1BD4A1FC1960483617EF7E928E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:03:17 +0000
Manifest this update:     Fri 17 May 2024 16:03:17 +0000
Manifest next update:     Sat 18 May 2024 16:03:17 +0000
Files and hashes:         1: 0S_GqoTM0xxnZfxgIohxryGYSk8.roa (hash: sX30L1EG+WULlG1HahLfkRELKuxabDlPmso+87cMQlE=)
                          2: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: mrDHc81NC4I+phrABWuXvAKX99ameSCdgiIn88Sh7Sk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1b:d4:a1:fc:19:60:48:36:17:ef:7e:92:8e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
        Validity
            Not Before: May 17 16:03:17 2024 GMT
            Not After : May 18 16:03:17 2024 GMT
        Subject: CN=7cca1a699a62a9384bb06a8f62bd9737e303de49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:9f:b1:23:e6:1f:18:2f:aa:e3:41:7a:54:
                    46:41:74:42:64:23:b3:f9:0c:3f:3c:02:8f:5b:1f:
                    cc:63:43:46:5a:71:c0:51:7e:5d:bb:4b:64:ca:db:
                    f8:4a:00:3a:f1:76:31:d5:b6:a5:7d:da:33:c2:b7:
                    dd:ae:60:89:ae:69:e5:71:13:5e:36:f0:bc:81:94:
                    88:1a:0b:73:29:f8:1c:99:99:70:2c:64:3d:66:87:
                    e1:7a:9f:9e:7d:10:fb:96:08:58:7c:fd:03:1b:13:
                    f0:0d:64:1d:50:5a:90:d2:17:29:a6:a4:61:f4:4b:
                    e4:a5:e6:59:40:5f:8a:ac:03:50:8f:c3:1f:02:40:
                    1e:36:2c:dc:b4:98:f3:a6:71:1e:11:ea:80:7a:0c:
                    26:32:ba:43:33:e0:23:aa:7f:94:0a:21:b3:77:69:
                    3d:b4:2d:09:d0:fd:08:9a:07:b9:18:ed:a6:77:49:
                    11:b1:d1:a0:24:ed:c9:11:b8:a6:8d:9d:fc:e6:bd:
                    54:c3:3c:dd:89:6c:2d:61:2e:28:a9:3a:ce:38:bd:
                    e7:0e:82:95:ef:e0:2e:3a:7e:fd:c9:8f:2a:de:5a:
                    b5:11:31:8f:a0:5d:de:e3:65:1e:84:70:7a:a7:a2:
                    1c:bf:d7:71:3b:b9:d0:16:d0:3b:6d:6d:e8:7f:16:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:1A:69:9A:62:A9:38:4B:B0:6A:8F:62:BD:97:37:E3:03:DE:49
            X509v3 Authority Key Identifier:
                keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:60:a3:2f:78:85:72:e1:5f:db:0d:ce:ed:d0:1c:ef:0e:ee:
         a1:93:fc:cb:2d:35:98:66:55:8a:77:5a:65:0e:6f:af:46:60:
         7b:68:28:01:be:6a:71:2f:19:29:55:09:1e:1d:de:ef:c6:50:
         b6:f1:72:13:88:aa:42:7d:bc:9b:52:24:15:71:86:85:0d:48:
         b5:7f:52:e9:7d:f3:27:d9:4a:2d:ac:b3:f8:99:12:06:7f:df:
         40:00:ab:74:98:5d:48:d4:3f:96:63:4e:e1:7c:a4:25:bf:55:
         de:f3:c8:53:d6:ea:ed:0d:3a:55:99:0f:7b:73:1d:b8:be:4b:
         0f:11:45:e0:ca:0a:f6:f5:07:d2:21:53:51:82:a0:fa:70:8b:
         62:ce:a4:2b:65:0e:5f:42:b0:8d:e4:7c:58:d5:e6:3e:97:08:
         3d:96:1e:13:4c:e2:46:f0:10:88:6a:ee:fa:5d:13:46:06:23:
         a0:44:ca:ae:90:99:ad:40:5c:73:09:17:75:bf:d0:34:45:9c:
         8f:f1:25:75:e3:19:04:75:9b:28:9c:34:1e:88:55:66:56:05:
         de:fd:71:50:3a:2f:c4:8b:b3:c8:2b:3b:86:2c:16:40:ad:62:
         43:6a:f0:e4:13:fd:60:13:ad:89:66:85:d9:f2:de:95:35:90:
         a3:4b:a4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSxvUofwZYEg2F+9+ko5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1
MmM3ODEwHhcNMjQwNTE3MTYwMzE3WhcNMjQwNTE4MTYwMzE3WjAzMTEwLwYDVQQD
Eyg3Y2NhMWE2OTlhNjJhOTM4NGJiMDZhOGY2MmJkOTczN2UzMDNkZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSKfsSPmHxgvquNBelRGQXRCZCOz
+Qw/PAKPWx/MY0NGWnHAUX5du0tkytv4SgA68XYx1balfdozwrfdrmCJrmnlcRNe
NvC8gZSIGgtzKfgcmZlwLGQ9Zofhep+efRD7lghYfP0DGxPwDWQdUFqQ0hcppqRh
9EvkpeZZQF+KrANQj8MfAkAeNizctJjzpnEeEeqAegwmMrpDM+Ajqn+UCiGzd2k9
tC0J0P0Imge5GO2md0kRsdGgJO3JEbimjZ385r1UwzzdiWwtYS4oqTrOOL3nDoKV
7+AuOn79yY8q3lq1ETGPoF3e42UehHB6p6Icv9dxO7nQFtA7bW3ofxbtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzKGmmaYqk4S7Bqj2K9lzfjA95JMB8GA1UdIwQY
MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut
ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh
LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGCjL3iF
cuFf2w3O7dAc7w7uoZP8yy01mGZVindaZQ5vr0Zge2goAb5qcS8ZKVUJHh3e78ZQ
tvFyE4iqQn28m1IkFXGGhQ1ItX9S6X3zJ9lKLayz+JkSBn/fQACrdJhdSNQ/lmNO
4XykJb9V3vPIU9bq7Q06VZkPe3MduL5LDxFF4MoK9vUH0iFTUYKg+nCLYs6kK2UO
X0KwjeR8WNXmPpcIPZYeE0ziRvAQiGru+l0TRgYjoETKrpCZrUBccwkXdb/QNEWc
j/EldeMZBHWbKJw0HohVZlYF3v1xUDovxIuzyCs7hiwWQK1iQ2rw5BP9YBOtiWaF
2fLelTWQo0uksg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:50:42 2024 by rpki-client on console-ams.rpki-client.org