Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          JmFr6OBfllIZhjunv0qOB8kI85j+iJfA22U8lpr5PVg=
Subject key identifier:   42:83:DC:D7:87:CB:AB:86:D9:16:29:14:2F:22:5A:7B:53:D7:DC:4F
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       019040B06AB5FC99B5BF0B60EA381925FBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 16:03:41 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:41 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:41 +0000
Files and hashes:         1: 3G8peIU3cjobtb7YxzSAmUA2pWM.roa (hash: eEHXHF4j2fjn7QGLzu1rtEHjDmcKZIyx3XQfGA5fNdI=)
                          2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: x9eeWrzwu8GewJl8l6KfKLN2QY73h7ixt7tDjcfDvtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:6a:b5:fc:99:b5:bf:0b:60:ea:38:19:25:fb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Jun 22 16:03:41 2024 GMT
            Not After : Jun 23 16:03:41 2024 GMT
        Subject: CN=4283dcd787cbab86d91629142f225a7b53d7dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:11:99:5f:bb:3d:21:98:6c:ac:ad:96:57:
                    8a:56:fd:82:e3:6f:d4:65:11:0e:b9:5b:9b:78:ff:
                    ba:04:d8:89:d0:0a:32:26:3b:dd:31:57:39:dd:a7:
                    84:1d:d5:c4:e3:b7:12:26:fd:64:f8:63:49:34:f1:
                    89:04:92:7f:9e:e2:9a:33:5b:ec:f0:89:3e:ba:81:
                    06:13:ca:f4:c3:6f:0b:ae:f4:d9:3d:b6:e2:ac:3f:
                    c0:ec:ec:4b:10:f6:f8:79:7f:38:22:3c:79:a4:f9:
                    54:a6:be:d2:4c:f0:26:9e:09:80:5b:cb:ac:b9:4e:
                    34:b1:29:ea:84:d5:83:b7:34:68:1a:4b:47:8e:b3:
                    96:8a:88:80:03:9a:7e:10:54:4d:3c:4b:d4:b3:ec:
                    84:19:02:e4:19:21:ca:5b:81:54:3a:29:31:a1:e1:
                    d9:ba:e8:bd:41:9f:2a:af:31:8e:78:73:f0:ab:24:
                    c8:dc:29:55:0a:0a:9e:ae:ec:90:d2:d0:9d:2d:1c:
                    7a:17:24:11:bc:f3:ee:d0:dc:c2:8c:fd:11:51:26:
                    0c:a2:74:a2:c8:67:0b:89:92:b3:d3:88:0f:67:21:
                    03:56:76:46:34:4b:15:4c:81:16:dc:03:c9:79:97:
                    d2:f3:80:5c:96:ec:83:4d:a7:8d:e2:d5:d0:e0:d4:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:DC:D7:87:CB:AB:86:D9:16:29:14:2F:22:5A:7B:53:D7:DC:4F
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b8:4b:82:b3:20:c4:4c:35:fc:5a:fd:fb:34:c1:c1:41:6b:
         a9:6e:ba:b8:40:38:d7:56:d1:3c:03:0e:e5:09:76:30:11:a2:
         62:29:5c:d8:41:fb:09:a5:a0:6d:50:bc:31:9a:e0:d7:a9:62:
         c8:f2:98:53:33:72:6f:c5:f2:7b:d1:cc:f0:76:35:0a:b2:bd:
         0b:6c:23:73:84:6f:1a:7a:22:f4:d4:76:5a:27:a4:e6:2a:0e:
         bd:13:5e:fa:be:3a:5a:6e:d8:35:b1:11:0f:55:fe:43:3a:28:
         ea:a5:d4:48:bd:57:39:bc:6e:e6:ed:c2:31:ba:84:79:9c:c3:
         cb:3f:fe:4b:b3:4d:78:3c:f5:eb:df:c7:9b:b9:73:b7:09:f9:
         b5:60:d0:a8:49:50:af:a1:b7:18:7e:29:83:f5:52:2e:81:c4:
         6d:3a:cf:fc:cc:1b:ba:2a:eb:c0:40:61:3b:d2:19:74:9e:91:
         38:4f:78:00:db:67:ab:87:0a:18:dc:f9:4a:c2:04:7a:f5:5d:
         87:9e:2c:78:d4:ee:8c:39:b3:9a:94:5e:ed:da:dd:35:93:0d:
         07:e0:c5:05:bc:0a:2f:ea:7f:e0:51:0c:01:62:08:67:c0:d6:
         6f:96:51:06:cd:8a:31:27:3c:f9:52:4f:be:64:4e:67:31:f1:
         b0:8c:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:51 2024 by rpki-client on console-ams.rpki-client.org