Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File:                     pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier:          TZYZN5OrOAplBaT+d8G2oFxObTs3WgOrVCNZn0GLYa8=
Subject key identifier:   9F:C5:BB:45:7D:3B:09:48:E7:95:C7:E5:25:BA:2C:5B:A0:1A:AF:D3
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer:       /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial:       018F9383A66B5032E03AEB56AEEC88FC4D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number:          0BD0
Signing time:             Mon 20 May 2024 01:00:29 +0000
Manifest this update:     Mon 20 May 2024 01:00:29 +0000
Manifest next update:     Tue 21 May 2024 01:00:29 +0000
Files and hashes:         1: fj22D9VTxxDBD9Xd1SrDQtwRzLM.roa (hash: zpiOk5FqZHxW7SI1f8pbOuVhTeDsBAAuQUuo5wrACH8=)
                          2: fnenGhPWgCQ7l9nYoFalHKnjcno.roa (hash: d7bintgUx486FgNk1wkiN5kvIZfTERxwok6hRE5uM4E=)
                          3: l1ZQ79-zjLbPsTHss45GeRkWdSg.roa (hash: XysL20aXN2JK0lgYHIvsLdekhSc35ygu0aGx7k7RnNg=)
                          4: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: ZyGlqwyvwIoCL9KrTUB0QPgKeqORQ6kqapYqabNc0Fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:83:a6:6b:50:32:e0:3a:eb:56:ae:ec:88:fc:4d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
        Validity
            Not Before: May 20 01:00:29 2024 GMT
            Not After : May 21 01:00:29 2024 GMT
        Subject: CN=9fc5bb457d3b0948e795c7e525ba2c5ba01aafd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:5f:63:ea:fe:44:bb:92:41:e9:fb:ef:ce:
                    32:c1:7e:b1:41:3b:96:c3:40:32:c5:c7:0f:04:91:
                    35:40:23:3b:bb:7d:56:ff:63:3e:fb:a6:7e:14:38:
                    60:49:05:b3:54:3b:14:58:c6:83:e2:5a:08:1f:5d:
                    27:7b:32:da:2a:7a:f4:3c:75:4c:61:4f:0c:05:89:
                    d7:02:1b:78:85:a2:8f:de:4c:a6:ce:58:47:2e:55:
                    b9:73:d0:3a:6a:1f:f0:8e:33:01:f8:16:00:0c:44:
                    04:1a:19:c7:53:66:75:35:0e:ea:38:f1:24:5a:c7:
                    e8:cc:23:df:19:f7:38:3e:aa:91:56:c1:72:d8:c5:
                    0c:b5:3a:cc:b2:72:05:e9:7e:d6:88:4c:8f:e2:73:
                    b0:a0:c1:5c:b7:37:22:c1:01:8a:c0:bd:51:e7:9c:
                    af:ee:94:0a:6d:2d:74:48:00:45:c6:0e:9e:03:f1:
                    5b:f4:c0:b4:30:16:10:53:3d:a7:2d:1d:ad:6d:59:
                    17:ce:0b:b8:0d:d4:c6:08:5b:57:a5:03:d2:a8:8a:
                    28:ac:f7:95:ad:2d:bf:13:20:39:bd:7d:71:63:5c:
                    ae:87:20:59:13:6a:2c:4c:be:7d:09:17:f7:8f:03:
                    dc:35:c1:e8:60:05:b9:60:05:78:c5:52:0e:a9:f3:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:BB:45:7D:3B:09:48:E7:95:C7:E5:25:BA:2C:5B:A0:1A:AF:D3
            X509v3 Authority Key Identifier:
                keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:43:e1:df:33:97:00:5c:63:b0:e1:5e:26:04:83:a4:ed:a9:
         67:de:e0:a4:94:6e:1d:ff:70:73:0d:cc:f5:f1:c5:8c:1c:6a:
         65:f7:f0:03:98:75:51:69:60:7d:3a:42:c8:e8:16:83:e1:f8:
         23:54:63:1d:2e:15:9e:7d:48:ff:ed:49:85:ba:8f:68:d8:66:
         16:eb:16:e7:7a:ab:eb:86:3e:39:74:e1:36:80:aa:e1:f5:56:
         2f:0d:f0:b7:45:e5:76:e7:9b:9c:40:23:57:84:d5:18:56:bf:
         03:2c:2e:ea:39:19:bb:ba:35:93:25:4f:25:94:f9:b1:58:4c:
         9c:27:f0:78:89:8b:02:a9:4b:5e:02:5b:98:d4:50:e8:b7:19:
         44:cd:98:ad:c2:32:90:0e:52:32:8a:c1:fc:d0:f5:d0:1a:fa:
         ca:a5:57:6d:07:d1:57:4b:7c:33:e8:23:9f:49:89:e7:c9:05:
         14:5b:1a:c4:1d:3d:94:3a:fa:29:4f:90:6a:bb:ae:4d:6e:f1:
         9b:5e:ee:59:13:9e:8f:e1:fa:4a:51:6b:55:56:ac:12:fd:c8:
         fc:99:4f:bd:3a:b8:d2:36:8f:84:23:02:28:62:7f:58:72:69:
         2b:35:67:b5:4f:b0:f8:72:0f:1e:59:9b:89:e9:1b:f8:91:96:
         ee:01:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:56:11 2024 by rpki-client on console-fra.rpki-client.org