Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          DsRgQZM8dZ866F366oaLMllolPYEUkXqqNxkH1rgjmU=
Subject key identifier:   59:3D:36:B2:35:93:C0:6C:B8:25:5E:01:51:E2:C2:AA:97:B2:B3:2D
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       01903B196061C3FCB93CD14F194559C54C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          0131
Signing time:             Fri 21 Jun 2024 14:00:37 +0000
Manifest this update:     Fri 21 Jun 2024 14:00:37 +0000
Manifest next update:     Sat 22 Jun 2024 14:00:37 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: qXHZc7GTRVc+oKSY2M2ubHJDrF03sLVZHiq0jGrXKpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:19:60:61:c3:fc:b9:3c:d1:4f:19:45:59:c5:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Jun 21 14:00:37 2024 GMT
            Not After : Jun 22 14:00:37 2024 GMT
        Subject: CN=593d36b23593c06cb8255e0151e2c2aa97b2b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:e6:44:33:fc:62:09:d1:61:39:0b:b5:cf:
                    7b:d4:39:a6:2d:31:2c:72:c2:83:b7:01:50:8a:cf:
                    fd:4a:32:4c:32:4f:6e:c1:98:f6:8b:30:4c:30:ec:
                    10:4a:66:95:36:de:30:41:77:0b:4d:2f:47:e8:a3:
                    ae:ed:39:a8:90:74:70:31:17:ea:36:b4:41:af:2c:
                    14:10:5e:48:1b:a7:54:e6:12:35:ac:63:6b:88:98:
                    85:b8:31:bd:ca:92:46:04:f6:03:9d:cf:c5:e1:37:
                    19:19:3c:23:57:3c:1c:d3:aa:05:94:14:4e:67:e6:
                    ff:04:78:8e:ef:66:66:7e:0e:45:c8:4f:e4:d7:88:
                    31:5b:e3:04:25:fd:74:20:ab:9c:4c:02:f1:1a:fb:
                    29:0e:7a:93:52:f9:8a:82:d9:16:50:6b:4a:28:ef:
                    4c:7b:7c:fb:4b:35:e3:65:46:ed:1c:72:9a:9a:04:
                    14:c7:cf:8b:4d:53:83:33:94:b9:4c:74:8f:6a:59:
                    c8:01:d6:83:81:b1:db:e6:d9:48:63:82:d3:d9:cd:
                    e1:e1:b5:b9:90:8e:fc:36:a9:18:d7:b8:5e:58:0c:
                    4b:4a:7a:67:1e:dc:66:a9:1a:c3:de:ca:c5:eb:d8:
                    29:39:f0:ce:5c:94:84:c0:d0:b6:c1:fc:ee:1f:f0:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:36:B2:35:93:C0:6C:B8:25:5E:01:51:E2:C2:AA:97:B2:B3:2D
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:07:4b:75:96:23:66:c1:d4:76:5d:b5:31:b3:b0:fb:6f:
         cf:3b:83:a8:41:e3:39:a0:25:2c:56:0f:04:ee:44:2e:4d:82:
         1c:05:7a:fc:55:4f:22:ad:15:57:4b:93:13:37:40:b9:db:e4:
         7f:d6:75:62:a7:91:4c:5f:1b:27:9c:20:5d:68:80:ac:4d:8c:
         f7:da:99:8f:2c:81:87:55:8c:46:01:cd:1b:e9:8b:af:84:4f:
         29:59:4b:f1:63:59:bc:20:22:e0:ec:6c:60:6a:d8:c4:fa:fb:
         2f:a8:ad:c1:d1:40:a5:78:ec:de:fb:6e:ba:07:e1:31:c2:e9:
         a7:1f:f5:dc:40:87:6d:c9:f6:27:77:bc:3f:52:ca:20:41:4b:
         c3:4c:83:46:52:d3:67:89:01:f9:1a:b3:6c:9e:75:a7:f9:5f:
         db:d7:2d:57:4b:7e:a8:df:8b:1d:3b:fe:82:e0:8f:e3:d5:bd:
         a8:4a:ae:41:fb:a6:10:d6:4d:d2:19:47:a6:f2:69:ba:c9:27:
         c4:97:7c:b2:75:b7:e0:cc:47:1a:77:aa:e3:30:14:42:d4:e6:
         6b:12:7f:67:26:07:e7:a2:aa:d6:8b:0d:3f:92:72:07:78:8c:
         f6:e4:60:34:c0:fd:b2:12:76:f2:fe:14:e4:04:0d:4b:d7:da:
         2a:68:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:36:51 2024 by rpki-client on console-ams.rpki-client.org