Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File:                     7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier:          /VKRSatlLDrmF0XlZbGYvZ+PTwEAjqdCWHpeJ6D/NVE=
Subject key identifier:   D3:79:38:F6:1B:14:44:A1:B6:1D:1A:C8:45:A0:44:D3:F2:09:07:97
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer:       /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial:       018F45A1DE74011618A11ED5F840C7A98E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number:          0C52
Signing time:             Sat 04 May 2024 22:03:07 +0000
Manifest this update:     Sat 04 May 2024 22:03:07 +0000
Manifest next update:     Sun 05 May 2024 22:03:07 +0000
Files and hashes:         1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: kzyNz81nUgJ6XQQqkqTmdJshwsCP18xsl+z9vbF7gDk=)
                          2: ICSlgYUBIsNUhAoxm7YEke5o6bU.roa (hash: R036PFfI9QmIVAucTOeNJDlM2WIYxyE3g2TN4gFGqD0=)
                          3: JK19EEqbXQ9atlEg1X2_oRBuohY.roa (hash: /ka9ykCrkeCWtDu2jcA/GcQR0k6Umsi+uUDNincdwCM=)
                          4: _1OYZ48jvoTMTuysBZpqpK_Sr78.roa (hash: TbNMwemPGhU9DQp6X+sBigAuC+Eokx5ueYdgG/FNDLc=)
                          5: kN2VgqJGJyUNyGD1XjSgQAWu3Cc.roa (hash: cjh7VyJqAOw1ImxNJTKg02L56RDHZ71xwzM3m5O4T3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:de:74:01:16:18:a1:1e:d5:f8:40:c7:a9:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
        Validity
            Not Before: May  4 22:03:07 2024 GMT
            Not After : May  5 22:03:07 2024 GMT
        Subject: CN=d37938f61b1444a1b61d1ac845a044d3f2090797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:d3:95:7b:81:45:81:54:e5:29:fd:93:25:
                    d0:4e:b9:08:6d:92:2f:5e:df:e3:58:dd:51:ab:b5:
                    d6:31:36:68:6e:16:0a:ad:a9:39:41:de:fa:0f:37:
                    e5:e0:80:b6:49:03:89:33:22:62:82:d2:d0:7c:7a:
                    38:a2:2c:05:7b:66:34:73:8a:15:35:9d:ce:d1:65:
                    72:a8:f6:ab:2e:a0:dc:37:e7:dd:0a:c9:41:5a:80:
                    1b:e8:5e:f3:06:31:c0:44:9f:3f:c4:19:3d:b4:18:
                    17:c0:f8:ee:d8:a8:5c:c9:50:98:35:85:73:41:87:
                    92:33:e5:a5:65:ec:61:30:95:e7:7c:09:d0:42:00:
                    9d:38:29:62:a0:22:4a:55:1d:43:66:20:6a:88:c3:
                    3c:79:ff:fc:71:47:1d:4b:09:d6:a6:17:53:c3:f5:
                    51:33:1e:50:ad:48:84:44:fd:c9:e5:02:d6:94:f8:
                    3a:f4:9a:42:92:f8:a8:81:f1:4f:9d:90:12:90:a9:
                    a6:56:64:c9:42:3d:1d:b7:f2:ee:9e:a3:a8:d2:e0:
                    c9:92:05:f0:4c:ba:79:ff:07:f2:61:8c:1c:f0:56:
                    83:dc:ec:12:8d:96:9d:1b:b3:a5:e3:f4:d2:4c:eb:
                    84:6c:e4:ee:18:c1:40:eb:7d:8d:f4:15:e4:55:aa:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:38:F6:1B:14:44:A1:B6:1D:1A:C8:45:A0:44:D3:F2:09:07:97
            X509v3 Authority Key Identifier:
                keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:12:4b:34:bc:56:89:4a:27:f7:2d:2d:77:cd:fa:01:06:1a:
         fc:3e:b7:f5:e6:03:6c:19:f4:4d:45:2f:98:62:9a:c6:11:f6:
         70:77:44:07:7a:ad:b9:ad:c4:07:66:6e:ee:dc:76:8f:2b:d0:
         93:eb:3a:04:82:84:80:0d:5a:96:75:36:7d:a4:9e:b4:74:be:
         6c:cb:7d:7c:c1:18:f6:9d:0e:7d:e1:00:1c:93:40:76:76:3e:
         eb:e5:c3:0c:4c:0d:4c:f6:72:c8:6e:5d:49:67:8f:6b:22:e0:
         d3:dc:af:ce:86:fc:37:a9:98:80:53:36:d6:57:59:7a:30:15:
         20:d4:ec:61:4f:24:7d:11:42:dc:73:3b:49:ea:bc:c1:a4:66:
         8b:43:91:11:8b:8e:37:d1:a6:5a:7b:3a:96:f1:29:e4:fd:ed:
         b1:60:47:47:35:f8:c4:1f:d2:74:cf:b5:41:45:ac:30:f5:e1:
         b0:ee:6a:88:a2:df:ca:fc:46:59:54:fb:4b:6e:27:05:b3:de:
         aa:12:9c:07:4a:5c:f2:6f:34:43:d9:73:5b:fa:5c:d3:8e:8c:
         5a:3b:3c:6b:13:4c:91:46:ab:81:34:db:b1:c8:89:18:9f:23:
         e9:7a:d7:ee:82:b4:ef:d9:bd:c1:17:bf:13:38:93:03:48:52:
         75:6d:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:14:18 2024 by rpki-client on console-ams.rpki-client.org