Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          vhtqobePLSCyd7nBbjbERF5bQ80hapwELalAFhTdAf8=
Subject key identifier:   73:30:66:DA:95:28:74:52:DE:36:30:DB:BF:EE:82:FB:88:8C:FD:08
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       019352ACEC84D826BCDEC5C938BEDB029EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          0F7D
Signing time:             Fri 22 Nov 2024 07:01:24 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:24 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:24 +0000
Files and hashes:         1: GsG6DeYoZXA4jM_DGYJqzcqVH8I.roa (hash: EaE6jecNsmTw30wJhHsSoTc4G/jbx8tQRxPazwvDcpo=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 8H6/tDvipRxa0oZ47WQ6DYCHPM7LbRUL+VKaNlN53iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:ec:84:d8:26:bc:de:c5:c9:38:be:db:02:9e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Nov 22 07:01:24 2024 GMT
            Not After : Nov 23 07:01:24 2024 GMT
        Subject: CN=733066da95287452de3630dbbfee82fb888cfd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:c7:0e:23:2b:38:8f:07:72:8e:cb:1d:25:
                    5f:0d:39:cb:4a:d0:0a:ae:c9:f9:29:98:b8:40:2e:
                    c0:fa:a2:e9:56:d7:67:bc:43:dd:f5:1f:c3:f4:8f:
                    ab:fb:df:91:51:b5:0d:8a:d8:d5:9d:fc:f0:23:84:
                    03:6a:d6:0a:00:cc:83:5d:07:06:b7:3e:63:b8:dc:
                    ba:ac:18:35:49:3b:b0:d8:f9:65:2b:67:f9:b0:0f:
                    e8:2a:de:4f:c7:3c:c6:2c:e8:9d:a1:e7:53:96:97:
                    75:3a:e5:67:a5:df:dd:0c:ad:ea:ec:39:d0:4d:ff:
                    8e:b9:c8:97:23:fe:61:be:d9:5f:8f:e4:87:8b:9c:
                    c3:d6:8b:ba:5b:21:55:bb:38:ec:08:5d:f3:a4:3a:
                    fe:84:93:19:77:b0:0d:d1:75:63:57:a0:bb:e4:de:
                    db:b7:00:93:49:a9:86:5a:70:43:32:1f:df:72:c2:
                    56:76:fc:54:13:cc:35:23:9b:19:7b:c1:40:17:0c:
                    7b:b0:87:7d:1f:84:65:da:d2:d7:96:cd:9c:39:16:
                    cf:cf:e8:79:0a:62:8f:3d:15:83:ff:45:a0:f1:e1:
                    89:c3:82:d5:6f:b9:36:f4:f9:d8:b5:82:c6:55:fd:
                    e7:23:84:de:e9:49:4b:74:51:0b:79:a6:c3:d2:02:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:66:DA:95:28:74:52:DE:36:30:DB:BF:EE:82:FB:88:8C:FD:08
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:5a:2a:65:08:b1:18:7c:75:bf:73:02:e8:65:22:33:4d:
         74:54:e4:fa:a3:67:89:37:aa:3a:a1:e8:0c:a7:b8:7d:f6:64:
         e9:d6:a9:c8:cb:2c:e8:4a:10:f4:72:24:9c:fa:e1:6b:50:c8:
         07:07:e7:fd:f8:c1:00:e4:7f:a5:56:ff:77:6b:d5:bd:f1:1c:
         d4:2b:84:2c:8e:92:cd:3d:53:c9:ce:32:44:ed:88:c8:ce:89:
         c6:ca:6c:59:e5:51:9c:81:45:f7:4f:ed:ba:51:e5:51:2d:d1:
         99:05:92:bd:fc:dc:36:22:36:9b:c2:0d:cf:1d:9d:fe:73:6e:
         a0:ea:55:3a:9a:12:bd:81:2d:18:d0:07:84:42:35:0c:87:62:
         e9:8a:aa:b1:1b:b0:84:e0:87:25:56:86:9b:7e:1c:b7:f3:de:
         83:07:a0:dc:93:3c:09:71:54:47:ab:6b:34:b4:c3:e8:03:e7:
         65:55:54:f5:94:f4:d6:27:4b:20:54:c8:a7:0c:58:03:6c:37:
         10:1c:d0:c0:78:dc:f0:4e:1b:01:39:12:03:41:0b:e9:87:7b:
         cf:71:9a:b7:7f:93:56:00:7f:ee:c1:eb:1a:a9:b7:09:e2:09:
         42:8e:30:2c:93:d5:73:08:34:bd:89:73:19:d1:5b:c8:a4:cc:
         ec:75:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:32 2024 by rpki-client on console-fra.rpki-client.org