Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          BSb0qjKmYhUuhGZIWgkQDmw6pO6i2SpWZE1HGZMSPqQ=
Subject key identifier:   7E:B7:B9:E9:89:BB:7B:83:C5:E7:14:9D:FB:4D:B8:D1:7A:36:E6:25
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       0193553F6F98346F295F26EEAD3E21793178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0845
Signing time:             Fri 22 Nov 2024 19:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:40 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: xjx/5TKTljC/q+0nJgRZI7gp95rdKBi17uu9QgMiI44=)
                          2: Q_xfBz_vmbmf04iLk1lp1dI9p0Y.roa (hash: gVZTfmVJp4+73Io4Q8OHJ7aJztUz++T3QQqctnmqDKo=)
                          3: XcNyAtcSIj3VZNRuAXRr-c4msZE.roa (hash: 4bMziUezyBdIBevz1fCuHZyQ24umjEOHAhLAtBZqxqs=)
                          4: cbSP--6B9W70R0i4fNGBrZcmE8s.roa (hash: MLvXrxaFu/39uh8vYLPHK7HowNETKzs7QZi9mXNRDy0=)
                          5: pIYkaFt_vy2BQo8IbKGI6NWsYko.roa (hash: 2cDNJBcItJ59E9ou5zfA12VIM5oue/3Fx4KNjBOKlIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:6f:98:34:6f:29:5f:26:ee:ad:3e:21:79:31:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Nov 22 19:00:40 2024 GMT
            Not After : Nov 23 19:00:40 2024 GMT
        Subject: CN=7eb7b9e989bb7b83c5e7149dfb4db8d17a36e625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:b6:ec:cf:97:7b:d5:ef:66:57:09:40:96:
                    81:20:71:dc:3a:11:3f:6c:f1:70:d2:77:08:36:a8:
                    44:f4:e8:1e:d2:a5:d4:41:b8:df:6a:a5:e4:20:3e:
                    ee:b4:46:37:b0:0e:a4:64:f9:b5:cc:e0:37:b1:47:
                    29:e3:85:18:e9:bb:64:68:49:8c:ca:6f:57:c2:ad:
                    54:8d:36:3d:de:2a:5b:5f:8a:00:6e:1b:56:4a:1e:
                    7d:f4:fc:8c:6c:bf:e3:88:7b:75:81:be:45:1c:30:
                    01:d2:d1:5f:78:26:d4:ec:da:d1:c8:22:43:3f:00:
                    68:74:9d:5e:9b:f7:8c:20:e2:a5:d6:d9:be:e6:a5:
                    45:d6:70:b3:19:2a:6e:7b:16:a8:66:cb:89:d9:de:
                    e0:2b:1d:90:a8:34:bc:b5:8f:c0:fa:97:79:60:3c:
                    ab:59:84:ed:c5:68:cb:7c:6d:2b:a8:46:7a:be:5d:
                    fa:d0:dc:b9:50:20:f6:a3:7c:ec:fb:44:f9:1c:27:
                    c7:02:1c:08:62:0d:3c:ca:cf:78:70:e8:8d:03:49:
                    99:36:98:44:17:26:f5:4c:c0:35:1c:0f:bd:b4:df:
                    85:64:81:67:a0:1f:37:a0:2b:04:f1:61:2d:28:ca:
                    0d:3d:a5:00:b7:7a:3e:95:9f:2b:80:32:7c:17:a2:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:B9:E9:89:BB:7B:83:C5:E7:14:9D:FB:4D:B8:D1:7A:36:E6:25
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:31:37:3d:f2:46:a3:a7:47:53:7f:39:c6:50:42:dc:a2:87:
         b6:fc:97:c7:41:b6:82:78:de:a4:94:7f:8a:d9:9f:8b:e9:c7:
         a0:a9:12:60:c7:8f:bf:a5:cc:15:bf:40:5a:7b:dd:fc:86:d5:
         9e:a7:19:2a:86:62:48:d0:aa:50:f0:b1:fb:7d:f6:9c:c1:67:
         bc:28:6a:24:47:9c:fe:3d:20:6b:32:84:3c:4c:32:a2:7b:8a:
         3e:dc:77:52:0c:38:b4:26:fe:7f:c7:61:00:28:9f:94:5c:b2:
         b7:15:bb:a1:bb:9a:62:be:1a:5a:8a:b8:b6:fd:64:89:a0:b1:
         1d:aa:7f:e3:cc:9c:5f:84:2a:b4:a9:b3:15:8a:63:81:b4:42:
         47:25:65:18:4f:63:22:5e:d9:17:24:e9:42:d0:36:79:4e:e7:
         3d:c9:76:5f:74:af:d2:b6:8c:f9:b5:83:16:5f:09:58:f7:73:
         66:83:d5:4c:ff:32:2c:d7:56:35:b0:f1:f3:85:52:f5:91:0f:
         15:d0:3d:2d:bd:cf:81:72:f0:15:40:72:fc:9d:9f:06:b9:60:
         c0:25:56:26:2b:5d:12:e2:92:62:63:3f:d2:6a:68:3d:67:f7:
         ad:d0:16:66:f3:8b:bb:00:b9:18:26:e9:ee:64:6e:05:0d:2f:
         3c:1d:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:03 2024 by rpki-client on console-fra.rpki-client.org