Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          Fu6/2WqmgnZQOI5HMz1ENCo8stytbmO98fB6hVQ0hbM=
Subject key identifier:   86:FB:8A:0F:6C:CB:E5:D8:4E:F8:18:05:54:39:1F:30:1C:51:79:28
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019406B3CB9B041DD148CA39D4569A5EE46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          3C
Signing time:             Fri 27 Dec 2024 06:00:33 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:33 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:33 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: XpoXChmf36TR0IT5Byn80jAoSR4kARKC9r3OwiSFrzY=)
                          2: dOesoiDPOkIF8xWVN9656AuYppI.roa (hash: BLadEWP/JWLgMVOi5C+FO6KqcVROGqz2z8FQNyLphBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:cb:9b:04:1d:d1:48:ca:39:d4:56:9a:5e:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Dec 27 06:00:33 2024 GMT
            Not After : Dec 28 06:00:33 2024 GMT
        Subject: CN=86fb8a0f6ccbe5d84ef8180554391f301c517928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:1f:ac:c9:39:44:c9:76:8e:72:07:17:74:
                    ae:b9:85:dd:b4:81:c5:25:8d:d3:7f:f1:75:4b:28:
                    22:e8:04:bf:0b:2c:dd:80:9d:7e:05:89:6d:29:4a:
                    5b:60:3e:57:a3:45:05:3e:2c:80:e2:44:c7:2e:cb:
                    13:35:a5:1d:11:da:79:07:d0:ae:74:17:e4:54:95:
                    47:3d:3d:2d:5a:22:b2:b2:9b:d2:66:93:58:d2:dc:
                    ed:08:0e:76:96:c3:9c:6a:bc:c9:f3:17:42:5c:a2:
                    7a:c7:39:3e:cb:86:0b:d4:3f:e0:26:12:16:8f:ba:
                    77:52:e9:e7:02:dd:b4:f5:cb:8e:09:75:7a:7a:23:
                    4e:35:62:3b:35:58:b0:2d:8a:23:85:3d:c9:6a:8d:
                    0c:0c:b9:d1:c2:67:73:5f:ca:02:fd:6a:8f:8e:ee:
                    ba:f8:4f:d7:1e:a6:1a:b5:ac:ef:f3:3d:3d:de:eb:
                    ec:bf:b9:f6:8d:5f:12:ae:73:5a:b0:71:02:b7:65:
                    3e:bc:ea:6a:12:7e:0d:15:e7:11:97:f5:12:85:13:
                    fc:4a:ab:1d:ba:5d:24:37:d7:23:90:79:92:db:df:
                    5c:1d:b2:1a:c2:07:c2:c3:fa:b8:4a:a2:69:26:2e:
                    a5:5f:0b:82:10:22:a1:82:f0:54:0f:92:72:d8:6e:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:8A:0F:6C:CB:E5:D8:4E:F8:18:05:54:39:1F:30:1C:51:79:28
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:8b:ff:e4:5b:db:40:44:15:c5:62:cb:45:16:25:e7:f2:a1:
         2b:38:70:45:a8:c7:ad:91:b0:91:a5:00:0e:16:2e:1f:78:ab:
         04:d3:fa:df:f8:fc:80:4c:6f:60:01:ab:48:b3:9d:25:e9:ff:
         3a:34:f2:cd:53:0f:ba:b6:8f:88:cf:ee:1f:c3:9a:78:a8:08:
         d0:fb:9b:bf:6b:48:a8:04:52:c0:22:7e:77:46:2c:9d:dc:c4:
         92:b9:80:95:6d:10:b7:26:39:5e:b9:5d:a0:0d:1e:fd:ad:6b:
         06:fb:95:3f:54:89:fa:32:9f:cd:cf:9c:7b:ff:ba:64:46:6d:
         41:ad:0a:fd:17:40:75:83:ca:10:17:22:63:6e:14:29:ce:a4:
         c3:49:87:b2:5c:94:28:35:66:ba:b0:5a:cf:87:34:c6:0e:e8:
         34:f1:8f:cd:58:87:18:a8:9e:23:95:2b:b8:5e:d5:72:91:66:
         da:62:65:a5:28:89:b5:f9:fc:a9:41:c9:b3:af:3f:fa:ff:e5:
         e0:b7:8f:1c:b9:66:ad:59:08:56:7e:c0:87:43:1a:4f:67:be:
         2f:4a:1b:37:e0:cd:1e:f5:39:0c:7d:b9:86:a8:ee:0d:06:2b:
         12:de:33:cd:39:09:e0:82:b3:1b:72:b2:73:0e:da:07:8d:f0:
         8b:9e:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:48:21 2024 by rpki-client on console-fra.rpki-client.org