Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
File:                     t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft (raw, json)
Hash identifier:          9aSYsmMv+++p2qI9Ev+vxN/rV70iVrT3Y6oomA2uU0o=
Subject key identifier:   F8:B3:ED:E4:81:FE:E1:D8:19:B1:A4:A2:AA:57:21:AE:54:D1:A5:30
Authority key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Certificate issuer:       /CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Certificate serial:       018F874A7206F644A07E56C96B903B59D9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
Manifest number:          0A72
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl (hash: GpRrsvWc/pVjE9/CFk0yLG3dYPTtd3pY+muDQ/q+sxY=)
                          2: xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa (hash: /sNBJV9bCm7wOEdWI4QigO7aal/wVcOe5lQBe4bAu+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:72:06:f6:44:a0:7e:56:c9:6b:90:3b:59:d9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=f8b3ede481fee1d819b1a4a2aa5721ae54d1a530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:28:c9:2f:23:19:b4:5f:c9:a5:44:1a:19:
                    25:f5:00:3d:c9:02:9b:db:7c:a9:3d:f7:1e:c2:75:
                    f2:5a:12:1e:87:bf:74:58:35:e2:2c:66:0b:e3:67:
                    58:3f:5b:f0:3b:9a:68:7e:77:d1:16:27:24:4e:25:
                    53:cc:04:37:e6:44:10:ab:d1:84:a1:9b:9a:ee:52:
                    d0:71:eb:7d:44:74:75:0d:27:67:08:47:24:77:53:
                    31:d0:5c:6b:ef:a6:aa:d9:c7:0b:08:f6:b8:a7:33:
                    18:1a:f5:72:ca:29:9e:5b:14:b7:8b:da:fd:dc:9d:
                    3f:25:87:6a:50:f1:4c:f8:3b:25:4f:21:d8:fa:31:
                    ee:95:7e:12:6f:cd:7e:c1:3c:d2:cb:81:30:07:3b:
                    7a:18:2e:5a:24:c8:c3:e6:d1:8d:c0:e7:86:73:93:
                    49:f6:ab:49:16:b8:87:fc:87:c9:86:0f:90:0c:b8:
                    83:9a:a5:b1:67:51:cb:39:25:58:04:9c:f5:ae:36:
                    f8:4a:bb:7a:8b:31:b7:ac:cf:c3:84:23:b7:66:f1:
                    7b:40:2c:d6:f8:80:bb:3f:b4:02:aa:86:47:8c:c8:
                    7a:37:ac:4b:50:6e:14:0b:58:6e:59:74:b1:4a:10:
                    69:91:cb:c4:94:fc:29:0d:cf:12:a9:75:0d:f7:75:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:ED:E4:81:FE:E1:D8:19:B1:A4:A2:AA:57:21:AE:54:D1:A5:30
            X509v3 Authority Key Identifier:
                keyid:B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:33:3d:ee:97:c4:70:13:51:08:01:31:b7:79:ae:1a:af:
         e3:ec:32:56:85:01:f7:b8:be:72:95:b5:64:44:b9:d6:79:cd:
         b7:03:b1:58:03:18:73:e5:ff:0c:8f:32:f1:07:14:1d:a0:ff:
         a9:e8:7a:c0:4d:d5:99:b1:7a:9d:fd:dd:33:8a:fe:ca:08:d4:
         9a:c6:32:08:d7:63:ff:b2:a7:c4:fa:ef:8c:dc:e1:48:b4:5a:
         f6:a3:fb:0d:3a:17:c1:ea:e7:f1:f0:9f:4a:82:ec:6b:9b:4d:
         9f:93:c7:56:df:5c:64:b2:d8:a4:d9:24:52:da:9a:e2:03:99:
         bc:29:65:92:ba:56:b2:70:b7:c7:b5:8e:c2:36:a2:69:01:b1:
         b8:9d:52:42:ca:36:e4:23:7b:43:2b:b9:86:e6:9f:da:4e:b5:
         c5:ae:0a:82:8e:9b:76:7a:5c:b4:de:5e:08:87:b0:69:7e:d0:
         8a:90:a3:e2:b4:b5:d7:42:3a:8e:16:a8:f3:93:79:e9:cd:e8:
         9a:81:5b:4f:85:a1:12:e6:fd:ac:43:17:7b:96:be:32:89:b3:
         33:03:90:2e:83:55:1b:46:dc:da:9a:76:46:a5:12:bc:fd:b6:
         e4:66:f0:2a:dd:98:fe:bb:2b:93:8f:d0:71:7b:d1:5f:81:73:
         45:7d:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:34 2024 by rpki-client on console-fra.rpki-client.org