Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          zK0TuZKYYytrDbGrCR4kZ+3Hl3fs42gWupHFtrvkgJU=
Subject key identifier:   1E:68:58:AD:15:D5:B1:B3:48:1B:B7:00:DC:1B:79:9A:6D:06:B8:A7
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       01936B227C7E35D3F97941A880B153225804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          10DB
Signing time:             Wed 27 Nov 2024 01:00:42 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:42 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:42 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: eqe7v+m537DkySdUOQm7RxmByaVwqcTMbzpsTvF6y+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:7c:7e:35:d3:f9:79:41:a8:80:b1:53:22:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Nov 27 01:00:42 2024 GMT
            Not After : Nov 28 01:00:42 2024 GMT
        Subject: CN=1e6858ad15d5b1b3481bb700dc1b799a6d06b8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:33:24:00:68:0e:d6:75:62:12:ff:ac:a8:
                    d6:d6:e7:21:76:e6:a7:5e:ec:dc:b2:ae:74:89:59:
                    57:bb:1a:97:18:ae:1f:c3:d9:d6:52:04:11:21:d8:
                    b2:d8:21:36:1d:bc:2d:38:97:f4:41:ce:01:7f:38:
                    13:4e:2f:a9:45:12:9e:db:fb:8e:b6:3e:37:25:2d:
                    4a:c7:38:6b:8d:37:3d:5c:e3:0d:c2:41:6e:80:e6:
                    4c:e4:61:db:79:7e:60:e7:36:39:99:d5:04:23:cd:
                    25:87:43:23:d7:bd:21:82:f2:e0:ab:bc:b2:56:5e:
                    f0:4b:5f:f0:b5:a7:17:58:76:59:da:99:20:9b:ff:
                    1e:5b:b6:a8:89:d0:b7:77:ff:d3:20:8d:c4:e6:99:
                    cc:9b:ac:fa:7e:27:28:97:72:76:d6:73:46:44:c1:
                    b0:58:c0:bc:ed:06:df:41:f0:2e:44:01:bb:9b:2e:
                    2a:ed:d8:8c:23:80:71:e6:83:7a:4b:66:4b:7b:45:
                    38:bf:70:4a:af:37:d2:73:db:6a:06:0f:b5:f8:b3:
                    80:d0:8a:a3:fb:37:56:6e:97:bf:8a:c2:55:e9:09:
                    5b:86:4d:6d:4f:2f:8d:77:34:18:15:e1:ad:d6:ba:
                    a6:e0:92:c9:f6:e5:89:36:3e:bc:26:10:06:7e:f8:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:68:58:AD:15:D5:B1:B3:48:1B:B7:00:DC:1B:79:9A:6D:06:B8:A7
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:d2:ef:a9:cd:16:95:b8:52:96:42:27:86:ee:04:c7:a6:
         75:35:59:99:e4:73:4c:ab:e9:56:97:41:03:e7:da:ba:06:8a:
         3e:fd:69:a2:c9:7f:f7:d1:b6:c2:f6:92:5f:b1:3d:98:47:7f:
         e7:79:cf:02:a8:64:16:07:21:44:13:3c:89:f9:38:77:fb:10:
         66:5b:98:22:b6:6b:ef:d6:30:bd:ad:18:de:21:d9:a9:cf:9d:
         a5:7f:63:25:30:62:51:68:7b:85:36:8e:71:7a:c1:e0:cd:ae:
         a2:47:27:48:47:18:56:24:03:1e:65:c6:f2:82:5c:e5:b1:9d:
         eb:bc:4c:28:89:16:70:33:d5:a3:a1:29:6c:9c:5c:53:b5:5c:
         2e:18:16:b1:fc:ec:88:12:61:57:fc:33:e6:2d:55:d4:fa:5d:
         77:e7:95:81:ab:08:47:9a:00:ad:f1:ca:11:1e:af:60:0f:b0:
         0b:d8:05:60:7c:f0:bd:d2:ad:4d:92:17:00:e7:b9:dc:45:d1:
         3d:56:54:cb:36:99:a6:e0:e7:ce:b8:76:5a:35:5a:96:dc:e3:
         08:0d:34:e5:17:0d:cf:cd:e4:72:0b:aa:9a:22:03:c4:7b:be:
         44:a2:34:a8:9b:32:ac:62:fb:90:4c:df:40:f6:b0:0f:a7:97:
         43:ea:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:32 2024 by rpki-client on console-fra.rpki-client.org