Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          2kphSGOeHBQfn965bkIHze5UMioHA0Gya7Dk30ARSAE=
Subject key identifier:   10:FF:6A:CA:33:27:D7:4F:4C:C3:F7:A9:93:39:76:C7:3B:C2:C6:8F
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       0193512C299D613B53D1D964338ECE788FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 00:01:08 +0000
Manifest this update:     Fri 22 Nov 2024 00:01:08 +0000
Manifest next update:     Sat 23 Nov 2024 00:01:08 +0000
Files and hashes:         1: YxT7gw8KU1vau_5Ci_G0TvuM4sc.roa (hash: 3y+k5WUm/JBUV5+OyJEPIlwpfSsGOWrC95eyw9/cLpM=)
                          2: k0wnme1XgR52Xps-D65viQkFwLs.roa (hash: b9NjRu+j1K7IWksDOPF6GLzOMkkmsO6WTTxT9raxWlw=)
                          3: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: HlWiqUKn3W4VrsgQzRIvU4TZTOka5UvbTlW+cHD7B8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2c:29:9d:61:3b:53:d1:d9:64:33:8e:ce:78:8f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Nov 22 00:01:08 2024 GMT
            Not After : Nov 23 00:01:08 2024 GMT
        Subject: CN=10ff6aca3327d74f4cc3f7a9933976c73bc2c68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:51:25:87:64:8c:23:0e:e9:19:d2:c7:2d:
                    dd:ea:f5:05:07:fb:98:75:33:ba:3a:79:4c:bd:fd:
                    ee:30:33:18:f4:83:4a:06:78:aa:07:e0:01:1c:3f:
                    4c:f8:17:3c:90:9b:d7:22:5a:ed:f2:d4:08:05:48:
                    83:43:e3:04:3b:1f:13:87:74:b9:bd:6a:27:d6:35:
                    4f:2b:57:95:30:af:99:fb:72:7a:c4:1c:d5:fc:46:
                    56:85:ac:90:34:be:dc:0e:bd:b1:67:07:51:6c:c5:
                    6c:a8:e0:7b:fa:d9:ba:17:bb:67:ed:e7:ae:25:30:
                    95:8f:0a:cd:7e:18:e4:a6:63:fe:1d:b8:9a:c6:3a:
                    01:80:da:1d:38:d4:26:48:40:e9:c2:b1:14:9b:4f:
                    29:b0:35:6a:d1:87:c1:ce:e8:91:c1:95:e7:4c:8f:
                    e4:af:4a:13:2e:d5:71:a2:61:33:63:a4:83:5c:0e:
                    1c:55:7f:a2:7d:16:64:cd:5e:e2:84:f4:75:3b:24:
                    d1:44:0e:d7:46:29:31:85:bd:d8:cf:0d:83:e1:60:
                    d7:96:b9:e5:48:26:3c:dd:e2:12:ed:83:b2:30:c1:
                    f9:e7:62:d4:bb:5e:83:33:96:c4:9b:90:28:9d:d1:
                    20:8b:44:30:2d:ca:c7:57:10:42:b3:ba:9d:d2:77:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FF:6A:CA:33:27:D7:4F:4C:C3:F7:A9:93:39:76:C7:3B:C2:C6:8F
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9f:27:99:dc:fd:3d:f5:b7:5e:db:be:93:5c:61:6b:b8:d5:
         0d:58:ff:b3:39:89:c7:59:24:a8:a8:26:b1:b9:40:47:9d:0f:
         94:c1:43:83:9d:97:65:25:82:30:d3:1f:d0:7e:72:11:3d:d7:
         85:87:04:47:e0:a4:8e:e6:08:af:7d:4d:11:bb:f9:c0:42:4b:
         bb:54:1b:9b:f6:07:06:87:da:95:8f:10:c0:d5:ec:ec:78:35:
         83:20:0f:22:a7:f2:9b:fb:42:ef:05:2b:21:e3:3d:e6:83:22:
         12:fe:fa:3d:3a:8e:75:c7:bf:81:fc:0b:fe:24:7d:06:75:9b:
         e4:66:3a:1a:7e:89:a9:9b:91:a5:86:73:cb:81:b9:42:4d:43:
         02:37:5f:4c:91:0e:1b:bd:07:6f:4d:72:f6:a3:ce:ac:71:fc:
         ed:93:0b:7e:52:0a:14:48:7b:23:79:08:43:d0:98:f2:00:55:
         1c:b6:cf:39:3a:4c:66:98:1f:39:27:0c:57:18:e6:c0:bb:56:
         6f:d1:a9:4d:cb:99:0a:79:d5:4a:75:98:5d:3c:5a:03:19:81:
         d2:27:a0:10:2e:5a:bc:9d:31:ec:30:73:d7:4e:ef:25:c9:3b:
         e8:1a:2c:f4:3b:72:1c:d2:06:48:51:31:e2:d0:34:e0:14:7b:
         1b:b0:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----