Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          9kO4gWFNvUbyVBlz/TIJkhHwYP3n4ungGkBFVbi3nD0=
Subject key identifier:   ED:1A:D6:E2:2E:96:BD:7D:A8:1C:8B:EC:BC:7F:62:AB:DF:07:98:D3
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       019369DAB89F0709FD7DDFF2B8A14AE945AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:41 +0000
Files and hashes:         1: 1-ASZez0i0MyTytcWAgj4iBy5z_Q.roa (hash: orVdx0YxDxIJBTYx5DQ//4wS5RPo6X0ZBuMo4rivTH4=)
                          2: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 9KZlJnrL5tkppFriEH3gKF4YfW0tEdHZWf59V4yy/2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b8:9f:07:09:fd:7d:df:f2:b8:a1:4a:e9:45:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Nov 26 19:02:41 2024 GMT
            Not After : Nov 27 19:02:41 2024 GMT
        Subject: CN=ed1ad6e22e96bd7da81c8becbc7f62abdf0798d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:b7:f7:31:9d:f4:b1:c4:44:41:c3:f0:f5:
                    47:90:af:de:2f:3a:5e:9f:bf:87:bf:b5:73:a3:70:
                    28:a4:36:50:f4:34:15:d4:22:5a:33:9f:a6:a5:0d:
                    f9:e0:eb:00:16:25:1a:da:2b:18:f5:58:34:5c:1f:
                    15:9c:f9:cd:70:63:1a:68:2b:6e:8f:97:f6:22:53:
                    85:b3:d0:97:5a:d0:20:c8:e7:e0:9e:e0:43:2a:bd:
                    15:8d:2f:19:d9:bb:38:f7:ef:6a:ab:0f:40:8c:54:
                    21:03:1a:c2:38:d8:74:8c:f3:6c:ac:9c:9c:d6:b9:
                    64:a0:96:ed:5c:d3:8c:9a:07:14:07:28:61:7f:f5:
                    a3:b1:3a:70:e5:62:5f:7a:8f:1f:a5:1f:d2:b7:0e:
                    c3:e9:3a:08:ea:69:52:bd:0a:fe:46:b5:70:c2:be:
                    6b:af:61:36:2b:11:2c:f3:fa:cd:75:08:43:38:a9:
                    b0:f1:59:e1:45:a0:3c:64:15:48:d3:b8:e3:4f:df:
                    62:17:0f:b0:97:5e:fd:f4:28:7c:c3:94:64:b9:02:
                    d8:42:8c:64:92:54:70:20:13:e5:27:10:14:dc:3d:
                    59:54:fa:6b:32:79:65:24:8b:65:70:7d:89:57:9d:
                    57:1c:04:69:dc:96:c7:7c:b9:76:5a:11:79:71:b9:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1A:D6:E2:2E:96:BD:7D:A8:1C:8B:EC:BC:7F:62:AB:DF:07:98:D3
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:df:3c:d3:b9:bc:19:3f:db:06:6e:68:e2:aa:24:86:f9:be:
         6d:ff:bf:2c:5d:3a:a0:b0:93:47:68:e8:8b:e0:55:95:83:94:
         fa:c4:79:0b:41:0b:3e:8e:8a:15:15:b8:91:27:a9:57:de:d5:
         b7:10:d5:e8:c1:db:5e:cf:c7:a3:09:59:64:58:12:2d:35:a4:
         71:fa:fe:67:fe:a7:2a:c8:3c:65:ff:86:61:ee:f7:c0:f1:57:
         4d:8e:67:4a:29:61:73:76:33:f9:e8:27:7c:ef:07:0a:70:a3:
         90:b3:23:84:c7:86:1c:37:1a:19:70:37:72:9b:99:3d:4a:01:
         ec:95:4b:12:81:df:e8:7f:ad:db:b6:a5:41:cf:1d:26:60:85:
         52:74:53:49:23:7d:dd:70:5a:d7:f5:f6:45:21:e1:23:7c:26:
         c5:7f:20:52:0e:f6:19:e4:ca:6a:be:48:c2:db:59:e6:d0:1e:
         f8:4e:e1:12:cb:80:ae:d2:eb:5a:29:14:15:f1:fa:c6:d9:8a:
         2b:bd:ce:ab:29:40:24:47:76:64:fe:ea:27:6f:ec:04:f0:5e:
         07:73:7a:e9:74:b6:b0:7b:8d:f8:59:57:cf:83:d1:a0:70:ec:
         c9:ae:d1:74:3b:50:92:6a:12:f2:2c:c0:57:e2:a4:d2:a1:46:
         2a:2a:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:47 2024 by rpki-client on console-fra.rpki-client.org