Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          pRCpW1tqCM3/zw/WJz3khJ1svNkAg9LOyaek/7/MwPc=
Subject key identifier:   9C:1E:6A:3B:08:50:AA:01:92:23:6C:A8:89:C2:F9:02:74:D1:89:48
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       01901DEB5421D8413A8499DDB2B4EC30FF0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          069D
Signing time:             Sat 15 Jun 2024 22:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:20 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: n104IH0V++mkemOqXDcTEA5fcuXjS99smHcvV1ahe0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:54:21:d8:41:3a:84:99:dd:b2:b4:ec:30:ff:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Jun 15 22:01:20 2024 GMT
            Not After : Jun 16 22:01:20 2024 GMT
        Subject: CN=9c1e6a3b0850aa0192236ca889c2f90274d18948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:71:26:7a:c0:61:9d:9d:97:c3:a1:d7:10:
                    80:53:5e:98:ea:b9:0b:10:fd:f4:12:b3:7f:bc:9d:
                    4f:ad:ce:7c:fe:ff:4a:c5:c9:55:2a:79:73:3d:9b:
                    e4:b4:b2:08:77:0b:86:18:8e:d2:fc:68:72:76:ca:
                    52:51:23:d3:71:d2:12:e2:58:c7:60:97:20:ff:fd:
                    12:22:9c:73:cd:ca:c1:b2:20:22:57:ec:42:b5:a4:
                    35:f2:1b:74:d3:8b:c7:72:98:46:87:42:2b:b7:67:
                    52:04:dc:15:ee:26:2f:1f:78:b5:a1:d8:33:52:bb:
                    6b:bc:4b:e9:d0:5d:92:89:85:18:76:be:71:18:61:
                    05:c9:9f:e2:4a:4c:49:c5:40:8c:e4:ff:33:e3:f7:
                    b7:75:90:1e:1a:63:e0:37:d0:4b:2f:36:4c:f4:27:
                    a9:4d:45:1d:44:18:e6:e0:9c:c1:d5:e7:a7:6b:40:
                    09:be:46:9d:93:8e:5e:12:04:99:0d:b0:4c:b6:8b:
                    27:8e:bb:f3:ed:43:c6:ce:1f:48:85:dd:91:a1:94:
                    64:b7:97:7b:12:2d:94:f3:16:d9:7e:0a:4f:15:0a:
                    a4:c6:35:b1:47:d7:83:c3:13:f4:9d:9b:4a:8a:ff:
                    a1:03:99:72:d4:1c:81:2f:37:f4:b8:ca:b2:18:bc:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:6A:3B:08:50:AA:01:92:23:6C:A8:89:C2:F9:02:74:D1:89:48
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:f3:19:ef:4b:62:08:fa:7a:0e:77:d8:af:1b:fb:70:01:
         a1:1f:cf:97:e0:50:ab:8f:0d:95:9a:57:bb:7f:51:85:8b:75:
         75:4b:aa:3d:f6:7a:0c:ef:43:8b:e9:f6:e3:71:03:fb:cc:7a:
         f5:87:d5:57:41:47:f9:f2:8f:87:2c:5c:e6:a5:68:62:dd:b9:
         a9:5c:90:8f:99:e6:dd:60:db:9f:35:8c:5d:1d:88:57:c0:58:
         92:db:d9:94:0d:0c:1f:6c:59:0c:f6:56:16:4f:65:db:a7:60:
         47:49:cd:5f:dc:08:6c:15:6c:55:c1:c4:43:61:a0:39:a7:08:
         05:35:76:a8:27:ba:14:00:39:bd:d4:61:0a:0d:08:3d:23:ec:
         69:52:38:26:c5:1c:1e:ae:5c:06:60:40:e1:97:c0:a4:dd:c3:
         ab:0c:16:e2:4f:12:60:76:ae:45:46:d9:c1:a7:19:ef:d7:06:
         c0:f1:e7:e6:7c:28:7c:ba:c8:b3:b6:60:e1:a7:0c:f8:ce:4d:
         8d:82:1c:e7:97:75:6f:48:f6:21:ef:6b:11:7e:74:c7:4d:a4:
         6e:9f:68:8a:00:d5:1b:3a:54:ac:be:1f:16:d9:f9:db:fa:eb:
         31:af:04:08:b3:b9:12:d0:be:9b:82:15:b6:a7:e0:5b:d5:dd:
         7f:f3:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:34 2024 by rpki-client on console-fra.rpki-client.org