Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
File:                     t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft (raw, json)
Hash identifier:          afEbpXxOJY/PBsvZDhFQ8m3BMHVmSF2WbDLhFT0/dVc=
Subject key identifier:   14:24:A4:C1:07:7D:4F:AE:BC:2B:55:C3:15:36:41:B2:5B:04:67:4D
Authority key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Certificate issuer:       /CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Certificate serial:       019369D9F81EF26F25A4C520E049887A9FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
Manifest number:          0C75
Signing time:             Tue 26 Nov 2024 19:01:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:52 +0000
Files and hashes:         1: t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl (hash: 4E3FfkZCTld4YyJdmBWzZopKhQl/sHDoryCYu78Z5h8=)
                          2: xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa (hash: /sNBJV9bCm7wOEdWI4QigO7aal/wVcOe5lQBe4bAu+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f8:1e:f2:6f:25:a4:c5:20:e0:49:88:7a:9f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
        Validity
            Not Before: Nov 26 19:01:52 2024 GMT
            Not After : Nov 27 19:01:52 2024 GMT
        Subject: CN=1424a4c1077d4faebc2b55c3153641b25b04674d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:a9:d5:3e:c8:2b:83:38:51:62:3f:55:22:
                    b8:29:b6:df:dd:21:10:40:88:d7:3b:f8:59:e2:81:
                    39:8f:cd:48:4e:4e:23:00:a5:ca:1a:0d:28:5e:39:
                    45:dd:00:94:e4:3f:6b:22:4f:ea:7e:ca:14:72:73:
                    db:c5:70:53:4a:7b:a4:2e:af:9d:2c:07:7a:86:36:
                    aa:4a:fb:b6:41:f0:5c:f9:a8:ad:22:ab:59:66:f0:
                    60:99:b1:8a:5c:15:d7:06:be:a6:2e:6c:b3:2d:f2:
                    45:a4:8c:ac:9c:96:ce:b3:14:36:d7:fd:7a:2b:56:
                    95:91:3f:6c:2c:2d:cf:d3:14:d9:35:04:2c:95:d7:
                    81:2f:9e:33:37:9d:aa:98:8e:6b:ee:31:21:01:e4:
                    6d:51:51:76:28:be:6b:f3:cb:65:99:d6:64:02:a7:
                    88:70:3f:2d:fb:f5:e8:2a:c1:3d:e1:37:b0:c3:01:
                    07:82:6f:09:45:19:c4:1a:3a:57:54:0b:37:7b:07:
                    df:61:1c:98:a2:7f:5c:5a:4d:a5:91:f4:eb:f1:82:
                    09:f7:5b:62:c9:74:3d:c4:ec:6d:53:8e:4c:d7:15:
                    79:60:80:79:9c:80:1b:6b:e8:75:df:a3:0b:8c:c9:
                    e2:ac:1c:c9:0a:c1:51:bc:23:a5:5b:03:ee:8c:a4:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:A4:C1:07:7D:4F:AE:BC:2B:55:C3:15:36:41:B2:5B:04:67:4D
            X509v3 Authority Key Identifier:
                keyid:B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:48:23:a2:b5:d7:43:69:ce:2e:4e:81:1e:f7:90:ff:e8:57:
         48:b4:3a:fa:12:26:e7:0e:cd:24:01:5a:96:17:af:1f:8a:c3:
         0b:f0:da:39:91:c4:9c:a9:34:07:a1:cb:ea:57:64:7c:71:88:
         bf:ff:bd:63:4c:3a:e9:9a:d1:01:87:b8:07:7d:7e:78:a1:51:
         95:a6:88:56:9a:58:9d:a8:b1:28:03:e3:0c:01:c7:95:4e:e1:
         84:53:b5:25:6a:c3:5f:7f:03:05:6d:2e:8a:2f:1a:50:ac:31:
         3c:b6:f8:44:52:8e:5e:d8:4c:fc:9c:06:6b:ad:78:60:34:d9:
         29:54:a7:46:7c:c7:b4:98:f1:e4:18:4b:67:87:e3:99:2b:35:
         6d:bc:f9:66:62:7c:42:b5:61:bf:a5:60:77:ff:d3:6f:17:43:
         ae:93:69:8f:f5:79:97:66:63:8d:19:0c:de:ab:5a:eb:dd:cd:
         43:a3:81:08:71:58:e0:4d:7c:a0:d9:da:b4:e5:fa:b9:31:ba:
         04:fb:cc:50:54:5d:66:28:15:53:10:60:39:b6:8a:b8:64:de:
         ef:5f:06:d2:e2:8a:fe:c2:d2:5c:29:c0:36:f6:94:72:00:e3:
         08:ae:75:aa:fb:61:d9:98:e8:bf:0d:28:2e:74:23:8c:1a:cc:
         85:48:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:37 2024 by rpki-client on console-fra.rpki-client.org