Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          m0rVsG37OMq6giMGOI14E/zChj81xO3fzmnDX1FWsoc=
Subject key identifier:   E3:B6:F3:30:5C:B4:44:0E:89:64:36:79:D8:8F:BD:C3:56:D7:8D:8F
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       01901DEC886C19EB5553607C4C3754E03F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:38 +0000
Files and hashes:         1: 3G8peIU3cjobtb7YxzSAmUA2pWM.roa (hash: eEHXHF4j2fjn7QGLzu1rtEHjDmcKZIyx3XQfGA5fNdI=)
                          2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: Ucp1K7gi9pMj4qimSP9JDGLDUhQW7bq+nwLKNgQYvsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:88:6c:19:eb:55:53:60:7c:4c:37:54:e0:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Jun 15 22:02:38 2024 GMT
            Not After : Jun 16 22:02:38 2024 GMT
        Subject: CN=e3b6f3305cb4440e89643679d88fbdc356d78d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:45:a3:29:4a:4e:64:bc:76:83:83:ba:d1:
                    e9:31:f2:7a:23:17:9e:8b:3f:e6:75:dd:56:a5:58:
                    f4:36:17:53:fd:1c:08:f1:fb:34:fc:dc:98:a0:10:
                    2a:5d:82:b9:42:6f:ee:50:d6:84:f7:bf:5e:4f:ad:
                    e7:45:fc:34:45:e9:5b:5f:30:e9:ef:6d:92:9e:33:
                    7c:6b:d5:bc:d6:2e:07:0f:4a:b5:90:aa:10:84:bf:
                    a2:4e:0f:4f:94:35:62:9b:25:0a:47:8a:8b:2a:90:
                    18:32:42:fe:9c:96:f8:4d:77:cd:7a:2f:86:b9:8a:
                    81:59:ec:e3:01:c3:d2:b6:a1:7e:9b:04:a7:66:cc:
                    bf:23:8c:2d:82:c2:4c:3a:77:2e:05:0c:1c:ab:2e:
                    65:41:32:eb:1b:0f:b5:a6:39:30:4c:f1:5c:0b:0e:
                    18:99:50:fe:25:cd:d4:53:86:23:6a:52:fb:34:f7:
                    05:11:a0:9f:fc:77:9d:01:8f:eb:6d:cb:5d:4c:ce:
                    d3:29:3c:17:39:93:2e:e9:fe:80:a1:9c:a3:b8:d2:
                    76:22:fc:0b:8d:ea:3e:38:d7:9c:2b:79:51:33:b3:
                    56:a9:67:a4:65:f5:d2:ac:9e:bd:24:a9:a1:ff:f8:
                    a2:e2:1b:c9:ca:89:2a:c9:56:99:57:86:91:bf:53:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:F3:30:5C:B4:44:0E:89:64:36:79:D8:8F:BD:C3:56:D7:8D:8F
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:75:60:2a:f1:b0:05:7d:9b:6c:73:2e:ff:93:6a:8a:e8:38:
         6d:ff:bf:31:0d:ba:5d:d4:af:a6:d0:e3:b5:31:8f:35:6e:86:
         cb:b3:68:3c:91:15:bf:e8:6e:f2:6d:25:ef:04:d6:9a:55:92:
         5b:1d:97:34:e9:cd:c2:9a:55:0a:af:39:fe:f0:b7:a3:54:49:
         c4:9f:7f:ec:dc:20:5b:73:ce:38:4b:ee:11:fc:86:88:0b:1c:
         58:67:8a:0e:d8:01:4e:29:f1:fb:12:27:a3:a4:01:1b:47:99:
         92:96:e4:b0:7e:f9:06:09:89:ee:02:ce:56:34:fb:1b:6e:71:
         84:77:e6:87:e2:2f:aa:c9:6c:84:0d:78:82:73:d1:d1:c1:4b:
         b3:44:a0:4e:10:f9:84:8e:80:09:87:84:84:40:c9:9b:40:00:
         78:bd:fc:ca:02:46:7c:f6:36:2c:35:ec:0c:b9:a2:b4:fd:77:
         49:3f:4e:bf:f9:66:dd:5e:eb:f2:ff:43:e2:3b:e0:2a:f5:ce:
         05:6a:f7:24:64:60:ec:3a:8c:bf:6c:36:33:b1:f6:56:1c:30:
         28:bf:25:1c:2e:c4:93:e2:c9:2d:5b:3f:8b:32:35:6e:41:ca:
         13:ca:c4:7e:e9:f1:59:a4:79:45:15:cc:b5:67:19:af:b6:fb:
         de:fa:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:53 2024 by rpki-client on console-fra.rpki-client.org