Manifest

$ rpki-client -vvf rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
File:                     EF358042A5E1BF7DF7C3C398722ED00286078D06.mft (raw, json)
Hash identifier:          tIRBweCkm4UFmSyttI/Wk0Mv2Op7DxWbA7iWOgSzOUc=
Subject key identifier:   19:88:D1:9D:C1:B8:01:F8:52:2A:27:41:B9:40:6A:4E:60:C1:F4:1F
Authority key identifier: EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06
Certificate issuer:       /CN=ef358042a5e1bf7df7c3c398722ed00286078d06
Certificate serial:       7395A8C6244A5C9C9C81704E1F9D3E6D1164E13E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
Subject info access:      rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
Manifest number:          0329
Signing time:             Fri 22 Nov 2024 20:11:25 +0000
Manifest this update:     Fri 22 Nov 2024 20:06:25 +0000
Manifest next update:     Sat 23 Nov 2024 20:43:25 +0000
Files and hashes:         1: EF358042A5E1BF7DF7C3C398722ED00286078D06.crl (hash: rzxAObPxcXoLYuo68BRULgOvUOFd6YikM2vjEQOSCa8=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl
                          rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:95:a8:c6:24:4a:5c:9c:9c:81:70:4e:1f:9d:3e:6d:11:64:e1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef358042a5e1bf7df7c3c398722ed00286078d06
        Validity
            Not Before: Nov 22 20:06:25 2024 GMT
            Not After : Nov 23 20:43:25 2024 GMT
        Subject: CN=1988D19DC1B801F8522A2741B9406A4E60C1F41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:c3:62:39:66:15:80:fc:72:20:be:da:5d:
                    88:5b:6e:2b:60:3a:e0:34:2e:1c:31:63:85:b3:92:
                    51:81:f0:7c:ec:3b:de:d5:90:89:b3:3c:43:54:5a:
                    4d:75:b0:14:f5:89:29:dc:3b:bb:d8:72:b6:83:c8:
                    69:0d:3f:03:a9:c5:4a:37:ea:17:f8:83:1a:c3:11:
                    73:2b:b9:a5:36:c7:16:81:46:62:90:4c:06:55:d6:
                    6e:e9:e4:b3:91:12:3e:ea:c9:58:8d:65:1b:65:67:
                    d1:72:e2:14:a5:14:87:49:cb:09:ed:1b:4d:98:1d:
                    85:4e:14:62:41:c2:d7:e7:dd:2e:57:c6:f1:cd:22:
                    e7:d9:06:5c:18:30:fe:f3:33:dc:55:3c:ca:8e:4f:
                    e8:14:ab:b9:6a:9f:96:21:4d:89:2a:6f:8a:85:17:
                    67:9e:9d:30:6b:5e:2b:4c:01:b4:2c:c8:5c:bf:23:
                    cd:2b:5f:d4:f4:31:8b:dc:b8:37:58:60:fa:ed:c4:
                    9c:5a:b0:77:4b:c6:20:bb:37:d5:e6:56:79:fb:2e:
                    25:e2:46:ea:bc:fc:ba:2b:20:8a:a3:c9:59:a6:d6:
                    c8:20:0a:03:32:24:0a:7b:60:7d:a1:25:65:f7:a3:
                    cc:f5:3f:a1:01:6d:c4:c8:fe:42:bc:e4:29:f1:d4:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:D1:9D:C1:B8:01:F8:52:2A:27:41:B9:40:6A:4E:60:C1:F4:1F
            X509v3 Authority Key Identifier:
                keyid:EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:e1:1a:7e:d2:7f:36:de:2c:23:fe:92:2c:ff:d7:ca:9a:
         d0:cd:9b:fd:57:9a:3b:8e:3d:d1:2c:98:71:2e:dc:5d:0b:02:
         90:ef:73:8a:92:b6:2f:5a:22:32:10:d1:c2:c2:83:f1:31:c6:
         d9:a0:7b:41:24:4e:53:06:78:53:c3:42:e4:b9:40:29:a4:06:
         0d:eb:91:60:cf:bd:6f:ae:71:fe:80:ae:f9:fb:fa:72:b8:7e:
         f0:a1:51:2e:77:b7:12:75:6c:1d:53:1d:77:43:0a:62:5c:fa:
         54:53:71:3c:1d:46:ec:11:53:7d:b6:64:94:4f:57:3b:4e:ec:
         a9:99:00:7a:7b:42:ab:53:31:f4:e5:cc:15:36:22:8b:d0:f9:
         be:6f:35:db:a3:3f:29:50:03:10:c5:6f:57:72:ce:ef:d7:8f:
         d9:8e:20:15:fb:59:21:aa:a7:bc:e0:50:95:47:0b:1e:fa:e2:
         c7:08:04:99:ea:f6:89:54:d8:d8:9d:06:5d:27:45:8a:94:e4:
         f3:00:0d:bc:0c:39:db:d1:13:fd:bc:80:a1:e2:d8:94:27:ef:
         28:99:75:3c:7f:c7:ac:04:30:86:9e:7c:95:15:2f:26:c1:03:
         1e:e2:ad:a5:97:b6:e7:50:52:55:8b:ce:12:9f:87:bf:78:7e:
         69:83:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:28:53 2024 by rpki-client on console-ams.rpki-client.org