Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          eRuXxEupEeyulvAgcgVUtqgN2vUYretbEsigKRvBovs=
Subject key identifier:   32:21:ED:9C:94:F7:8B:E7:AE:91:B9:16:26:C3:97:4F:84:A4:52:69
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       018F88927C894B3508144B267465F3B318E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          4F
Signing time:             Fri 17 May 2024 22:00:52 +0000
Manifest this update:     Fri 17 May 2024 22:00:52 +0000
Manifest next update:     Sat 18 May 2024 22:00:52 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: BlHoLDtuuWIYzrXfJ8SnxhCdw0NYW8CckK4bdEqUki4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:7c:89:4b:35:08:14:4b:26:74:65:f3:b3:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: May 17 22:00:52 2024 GMT
            Not After : May 18 22:00:52 2024 GMT
        Subject: CN=3221ed9c94f78be7ae91b91626c3974f84a45269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:30:c7:4b:fb:68:25:c6:a4:6e:3b:8d:3d:
                    da:31:67:c0:4a:cf:38:65:fd:67:76:30:2a:03:01:
                    73:40:f1:df:5d:3c:b1:dc:7f:63:9b:8d:47:31:a1:
                    31:af:fa:dc:71:81:28:50:fe:c4:7c:01:5f:b2:d5:
                    41:d8:1c:eb:49:61:92:05:a4:50:83:08:33:33:6b:
                    0c:56:7b:8d:36:69:76:60:0c:25:bb:07:83:3f:81:
                    7a:18:ab:94:ed:81:f7:0e:0d:36:b7:ef:da:24:a9:
                    00:43:d7:4b:97:36:81:24:b1:d0:c6:a3:bc:b3:07:
                    a0:8a:f4:1b:69:78:74:a4:cc:d2:03:7b:5f:24:8c:
                    a8:d8:a5:aa:40:e2:b6:30:d0:8e:31:bf:dc:00:6d:
                    bc:81:53:7b:c7:9a:94:ed:c6:7d:ae:ed:de:89:25:
                    ad:4a:ea:81:24:cf:b6:6c:4d:72:0b:3d:a3:e3:58:
                    1f:3f:9c:b5:20:ba:db:bc:dc:67:5e:9e:a1:0a:d6:
                    8b:c8:c4:2d:ac:38:a3:ea:d9:26:e1:de:ba:28:db:
                    90:a5:18:fa:8b:79:c3:1b:72:7e:13:55:21:ba:b5:
                    82:7c:5b:93:2e:d4:07:a7:29:94:ff:00:03:0d:81:
                    55:08:77:fe:ee:fb:c2:e1:21:c5:a4:b7:64:03:23:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:ED:9C:94:F7:8B:E7:AE:91:B9:16:26:C3:97:4F:84:A4:52:69
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:3c:a1:9c:d9:8f:19:96:d2:06:89:43:ff:98:8f:9c:c5:
         d4:3f:f0:d8:58:ba:64:78:8a:ae:b5:1c:1e:42:f0:d0:46:d2:
         67:2c:8f:27:aa:24:db:69:7b:ea:ee:e3:60:0f:40:8a:54:e7:
         69:c6:64:05:db:76:f8:a9:73:27:db:75:cd:5f:4c:a5:66:fe:
         71:34:74:5a:c9:35:62:90:72:a4:8b:56:74:31:80:8a:c4:4d:
         cb:ee:fd:cd:d2:16:d3:02:39:63:d5:f5:86:e3:9f:e5:27:8b:
         88:5d:cb:58:26:9d:c5:98:de:93:82:0d:f9:12:5d:81:5f:a8:
         c8:35:0f:ba:47:58:1f:87:71:24:2a:07:a5:78:08:2b:83:f3:
         d5:79:00:8d:23:25:91:c1:11:03:51:92:f6:ec:81:8a:8e:ce:
         cd:ea:3e:f9:20:88:67:ae:4d:bd:3d:c7:6a:ee:b4:a5:f3:f9:
         04:1d:2f:69:d3:a2:9a:32:0d:7d:1c:a3:cf:ab:e2:45:27:88:
         99:9a:1f:33:07:68:3a:25:7f:ac:f3:ea:b8:6d:4c:4d:cc:f9:
         84:b0:06:f5:18:64:e7:b6:51:b7:85:de:79:de:79:3c:db:3d:
         0f:8d:95:2c:f9:e6:52:e4:c6:cc:9a:b0:8d:ea:1d:36:00:16:
         8e:af:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:47:54 2024 by rpki-client on console-fra.rpki-client.org