Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
File:                     pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json)
Hash identifier:          FZNJiNuEAFYpxppJQcqVY1LWAm3CCzTjqVY8872/bxc=
Subject key identifier:   BC:79:62:07:00:3F:82:49:4C:99:44:07:5A:7A:39:77:5D:9B:43:57
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Certificate issuer:       /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial:       018F8635E0FD1F009F1C14060BF4D32FE5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
Manifest number:          0C95
Signing time:             Fri 17 May 2024 11:00:28 +0000
Manifest this update:     Fri 17 May 2024 11:00:28 +0000
Manifest next update:     Sat 18 May 2024 11:00:28 +0000
Files and hashes:         1: WYQXYH2x7k0gADTpAOoH1LbpL5E.roa (hash: 3OPWwCIhNzBSfwiALgTGR482xmEenJwzt5CBpMRRpHg=)
                          2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: FiR5Sk02chV0iGd6fazys/CH6qet9GW6lv497bG0Qtg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:e0:fd:1f:00:9f:1c:14:06:0b:f4:d3:2f:e5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65f995603663a569430ccc617287e919df144a0
        Validity
            Not Before: May 17 11:00:28 2024 GMT
            Not After : May 18 11:00:28 2024 GMT
        Subject: CN=bc796207003f82494c9944075a7a39775d9b4357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:53:97:d4:25:f3:42:4a:22:b7:f3:7b:f3:
                    10:7a:e8:bb:c5:fe:a3:41:2d:07:5f:99:05:7e:10:
                    18:07:94:6e:e6:1a:e1:19:15:4b:16:37:2e:29:4d:
                    5d:4d:ce:dc:9b:f2:bd:8e:b9:8b:c8:42:38:fb:ba:
                    b9:15:22:c0:a7:cc:c6:6f:ac:e4:4e:d3:80:35:1e:
                    6d:69:b5:a2:99:45:2e:ae:d8:c5:9e:5f:cd:75:0b:
                    38:04:e6:09:9b:e0:97:4d:44:e6:d4:44:f2:7f:b4:
                    78:9e:26:c7:fd:91:ad:a2:2f:2e:9e:68:a7:c5:4d:
                    b9:99:96:f5:1f:35:e3:84:68:12:85:75:02:b6:f2:
                    33:23:41:d5:64:5d:df:aa:2b:eb:e3:77:27:72:b4:
                    cd:e9:cb:6d:f2:04:8a:dc:e2:05:cf:fb:01:d4:08:
                    08:15:10:70:d5:ba:0a:2b:88:34:b6:f1:0c:d0:77:
                    87:ff:c8:9a:f8:0c:68:df:79:b9:3c:0e:07:27:f5:
                    c8:0f:18:9b:26:c1:98:7e:f3:03:a7:c8:93:9f:09:
                    94:fe:6d:4a:65:de:38:cf:3e:51:48:9e:8e:0d:02:
                    52:ed:f8:ef:1e:00:11:89:e4:a6:a0:d6:83:37:18:
                    47:67:ed:f0:0e:c5:ac:a9:92:9c:93:7a:ab:64:6b:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:62:07:00:3F:82:49:4C:99:44:07:5A:7A:39:77:5D:9B:43:57
            X509v3 Authority Key Identifier:
                keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:fa:45:55:c9:10:54:c1:f9:72:55:ff:1f:f3:8e:02:90:
         3e:ac:9c:31:d1:e3:f0:c2:1f:9e:d0:0b:d4:f0:aa:d5:14:f0:
         88:1b:5e:f0:6c:a8:dc:fb:27:cc:ec:b5:d1:2a:ba:8d:53:1f:
         15:8e:f9:b5:f7:ab:ed:56:ac:21:68:b3:ce:d8:c5:b1:a6:06:
         9a:53:e5:ca:42:8d:c2:c0:c7:22:4c:b3:1f:b4:2d:c4:af:d9:
         21:95:58:e5:04:85:ab:31:47:6c:6a:b6:2d:4b:a7:e0:a0:91:
         bd:dd:49:8f:3b:54:8b:e9:a7:d2:fb:03:d7:80:f1:97:19:3b:
         8d:6f:b3:ac:23:7c:cb:fb:e3:5f:0b:ae:08:d3:98:4e:fd:92:
         3b:fe:e0:dc:df:30:48:bf:d5:f0:11:1f:32:55:43:ac:ba:95:
         67:56:f4:01:c9:d6:fc:df:86:5e:da:c5:b4:fb:0e:a3:23:e6:
         09:7e:6f:d9:1d:e9:aa:9f:93:aa:ae:06:3f:32:7e:f4:0e:34:
         59:5b:62:dd:60:3d:3f:2d:8f:a8:13:00:40:cb:a2:87:24:69:
         b9:2e:dc:a5:67:20:32:a1:ca:4b:e0:eb:83:79:73:0a:96:df:
         63:15:b2:2a:5a:b3:21:7e:f9:f6:c3:2e:38:85:2c:4c:a0:f0:
         67:a2:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:54 2024 by rpki-client on console-ams.rpki-client.org