Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          L1ZKhUMDD9zKirCKeGNrR3S4V6w3NBQ22Lrf+7r+9hE=
Subject key identifier:   CD:02:6C:5A:D4:39:E2:A9:ED:3B:26:2F:9E:C8:9E:8D:3E:7B:29:E8
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       0194C3887A1445AC8F65193E851825EFCC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          0905
Signing time:             Sat 01 Feb 2025 22:01:28 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:28 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:28 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: RyU+Qyht62b7ZxI24RglelwHJ1xJkKyreD1/p1wvjIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:7a:14:45:ac:8f:65:19:3e:85:18:25:ef:cc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Feb  1 22:01:28 2025 GMT
            Not After : Feb  2 22:01:28 2025 GMT
        Subject: CN=cd026c5ad439e2a9ed3b262f9ec89e8d3e7b29e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:a7:84:20:2e:53:ad:b8:77:74:0c:b2:99:
                    8b:4e:75:12:35:2f:3d:d9:00:41:86:4e:2d:94:52:
                    68:ba:f2:12:0d:63:5f:d9:46:4d:94:7c:cb:63:2c:
                    1a:18:60:5e:28:7f:d2:d7:8c:f4:00:29:6b:ea:71:
                    bc:10:f1:ff:b6:24:1a:c9:6f:9e:0a:d7:35:f4:05:
                    b8:5f:b0:ae:33:65:eb:db:25:b1:48:ff:97:45:75:
                    48:16:ab:9f:af:b6:d7:ba:96:61:f6:30:24:83:b3:
                    0b:e5:57:77:1e:8f:1a:34:29:0a:21:1a:eb:0f:cd:
                    f8:35:f0:87:0b:98:fc:0a:73:a7:37:7a:d4:0c:eb:
                    52:73:6c:8d:86:fa:cd:a6:60:f1:00:fa:06:cd:b1:
                    f3:29:37:a4:cc:68:d0:f3:a5:fd:6e:86:28:41:96:
                    34:25:5e:2c:8c:65:c6:93:a2:e8:97:18:6c:d7:c7:
                    06:5a:f5:37:16:95:1a:59:0a:2f:e3:9e:c9:20:a9:
                    3b:72:dd:fb:d8:2d:d8:ba:ff:31:45:fb:29:5d:30:
                    87:5a:c0:ad:70:b6:5b:5d:01:7f:80:0c:62:b7:fe:
                    db:79:3a:17:14:d0:6f:c9:67:22:9f:97:22:f0:84:
                    7c:20:1a:b9:62:ea:f4:3d:0e:ea:ea:64:c7:bc:c8:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:6C:5A:D4:39:E2:A9:ED:3B:26:2F:9E:C8:9E:8D:3E:7B:29:E8
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:6f:3e:0d:b6:39:82:de:26:19:67:37:65:90:7d:da:2b:
         c7:99:e3:48:75:b6:1a:99:bb:13:6d:d0:23:c5:a9:a0:5d:18:
         b2:26:c5:55:96:f2:2e:0a:86:d9:5b:0d:54:c6:f7:76:85:d2:
         03:65:e7:25:c8:8a:96:30:71:eb:1a:96:b1:50:68:02:a7:79:
         85:0f:3a:e9:2d:59:18:98:68:52:78:d4:c6:cf:8e:ea:74:36:
         fd:a3:5a:13:99:42:2f:1f:b3:ce:99:49:f4:11:f1:ff:c8:42:
         2f:c4:f8:aa:c6:f8:f3:b3:14:51:ba:c6:a1:4c:83:df:75:1d:
         bb:d9:37:cf:a7:ac:8d:47:37:cb:60:1d:ca:8a:3a:4e:cc:9a:
         8b:86:36:45:13:c4:fb:62:25:08:0c:d3:f0:6f:76:16:6b:de:
         67:e5:fc:6d:ef:e3:6c:ce:47:81:9f:52:be:fd:6d:13:36:d6:
         da:d7:d2:71:23:27:69:45:bd:3c:0f:45:83:64:e1:93:04:79:
         cb:e9:26:72:f6:d1:a7:ba:2b:ee:07:f5:f5:d8:e2:02:0b:e4:
         5f:8d:dc:e8:62:64:a6:88:20:ae:2e:cb:67:bd:21:d6:e8:d6:
         ad:c5:2e:12:a7:d2:15:fe:cb:e8:d0:d9:ff:12:c5:ae:eb:07:
         04:6f:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:27 2025 by rpki-client