Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File:                     7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier:          OvwdzIO3rc48aplynHBEQK60EUG2g9wTaBgW7zgy9R8=
Subject key identifier:   16:B9:E6:B3:1D:04:8B:95:0A:61:96:C9:FE:AC:99:48:43:39:EC:34
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer:       /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial:       019355083CEBD6FB398EA0CACDCD60D521C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number:          04AD
Signing time:             Fri 22 Nov 2024 18:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:23 +0000
Files and hashes:         1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: 7PXK7e/6fa9QFSD6jXW2zG4oQUHH5G1KLimhcmu5B5c=)
                          2: PFZexs9BK-NfF5NXMSXMoZ7giFE.roa (hash: LSFCyxl3oyBCebFuRg2xKldPUabF/wooHWM4diuJT94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:3c:eb:d6:fb:39:8e:a0:ca:cd:cd:60:d5:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
        Validity
            Not Before: Nov 22 18:00:23 2024 GMT
            Not After : Nov 23 18:00:23 2024 GMT
        Subject: CN=16b9e6b31d048b950a6196c9feac99484339ec34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:a6:19:86:34:77:c5:37:2c:ff:8e:6d:f4:
                    9e:41:c7:15:09:b5:71:08:3c:96:4b:58:9b:db:25:
                    ee:ca:48:b1:53:c9:8a:ba:5e:4b:07:4e:85:87:6c:
                    99:56:04:9e:63:06:cb:4b:92:6a:bb:ac:a7:3a:f6:
                    b4:25:eb:fc:07:bb:39:30:aa:93:f9:4e:5e:07:1b:
                    36:05:1c:11:79:45:01:9c:78:b2:b5:9e:a3:c9:d4:
                    68:6e:32:ec:7c:fb:70:9f:5b:76:08:f4:05:29:cd:
                    ac:e8:1e:c1:d4:21:09:46:0e:a0:9b:1d:69:a7:1f:
                    67:14:de:4e:35:50:35:81:ee:5b:f2:ee:97:40:5d:
                    b9:4f:86:1d:46:98:e0:32:73:62:34:40:62:ed:e6:
                    84:f4:e0:1b:ba:61:4e:00:e2:a8:26:7a:62:f4:e6:
                    04:a4:e1:cd:d8:5f:f7:a4:3c:f7:2a:0a:5e:5d:ee:
                    0d:f5:ca:22:4e:c8:e2:70:1f:63:77:1e:23:a4:22:
                    b1:72:c3:8e:2c:94:3a:ba:48:6f:ed:53:a1:fe:01:
                    dc:a5:9d:ac:81:b7:b6:c2:74:cb:5d:7c:f9:38:79:
                    34:95:25:c3:71:a1:a0:fa:1d:66:19:89:58:40:14:
                    29:1c:d6:b9:98:85:a5:7f:73:aa:bc:76:13:31:7e:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B9:E6:B3:1D:04:8B:95:0A:61:96:C9:FE:AC:99:48:43:39:EC:34
            X509v3 Authority Key Identifier:
                keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a9:e2:b0:c1:85:02:c2:85:db:e9:c8:20:82:fe:46:71:91:
         91:4f:5c:1b:cb:29:4d:a0:8a:d7:0b:7d:0a:53:e0:29:e0:79:
         4d:57:40:b9:ef:47:e5:2e:3f:7c:bf:d1:88:a7:97:0d:ba:df:
         19:f9:ad:9f:0b:6b:a3:80:73:41:1a:1a:85:9c:9a:b5:67:d5:
         37:e3:17:13:83:d5:83:8e:01:57:85:e8:e5:f4:de:b5:02:c9:
         a0:67:bb:52:fe:5b:ed:7e:c4:8d:b5:ef:de:41:66:4a:c7:2e:
         f7:8a:8e:94:68:72:2f:78:ab:fa:df:35:67:db:b4:9a:8d:09:
         e2:b4:15:b9:08:30:68:d1:bf:ca:f5:dd:0e:a3:dd:bd:fc:7c:
         cf:e7:90:e0:dc:e0:64:ec:8e:5f:80:ee:99:d0:fa:40:35:68:
         15:af:95:6c:99:db:f8:10:89:a9:e1:53:73:98:64:4e:77:d3:
         91:03:a2:dc:ca:1e:74:b5:0f:e5:74:51:53:ab:59:d1:67:a4:
         be:4e:56:0d:c4:d3:83:9f:46:d1:8a:5b:b1:3f:cb:40:ca:04:
         b5:88:d5:7b:80:0a:7c:ca:3c:4c:ed:48:32:ca:1b:d0:ad:13:
         ad:78:0e:c5:f9:f3:22:cb:3b:06:e8:00:b3:72:0e:12:22:38:
         20:f8:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:16 2024 by rpki-client on console-fra.rpki-client.org