Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File:                     7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier:          MTv+aILfBXLQS2pWhC/LzXv8Xus3FpWmn10Dwu7Lxho=
Subject key identifier:   4D:F7:2C:25:9F:F5:2E:56:C0:BB:B7:B2:CF:2D:09:E6:6E:61:61:4B
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer:       /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial:       018F23EFA92C86A2020678D2ECCB477DFD2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number:          0CC5
Signing time:             Sun 28 Apr 2024 09:00:59 +0000
Manifest this update:     Sun 28 Apr 2024 09:00:59 +0000
Manifest next update:     Mon 29 Apr 2024 09:00:59 +0000
Files and hashes:         1: 7rM-VaToy8nFleI7ojz1mNKQkfc.roa (hash: b/9TofnsUBoYwQ/eCofWjRc9i5SxMPb9hAp6azt6fRQ=)
                          2: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: pe39oJ6/5XY+s19/chOmwIKcLAtloT8HbbDj6lH13AI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:ef:a9:2c:86:a2:02:06:78:d2:ec:cb:47:7d:fd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
        Validity
            Not Before: Apr 28 09:00:59 2024 GMT
            Not After : Apr 29 09:00:59 2024 GMT
        Subject: CN=4df72c259ff52e56c0bbb7b2cf2d09e66e61614b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:a0:4d:09:27:a4:ad:19:c0:96:17:f5:2e:
                    89:42:06:9a:62:2b:d2:38:37:45:d9:9d:22:46:bd:
                    52:70:ad:c9:5d:f1:99:98:63:fc:7e:74:30:e9:7b:
                    21:b3:57:7f:89:8d:26:94:08:94:e9:aa:cf:6b:11:
                    93:9a:ae:a0:ab:3b:11:64:4a:6c:89:ff:6b:5a:a2:
                    c3:bf:3f:4b:19:eb:02:77:52:e4:2e:b2:5a:a4:8a:
                    43:f6:74:92:9a:d6:9d:39:fc:74:26:12:e5:a7:a0:
                    d3:03:82:16:d2:65:41:ee:b3:fd:9e:48:0f:7b:b7:
                    ed:4c:6c:d8:74:c4:f5:16:c8:09:74:1d:9c:53:17:
                    3b:a2:8f:a2:99:ab:c0:0a:22:38:75:30:c0:0c:80:
                    26:d5:79:f8:b5:30:d7:17:d1:88:32:af:8b:a3:29:
                    1f:ba:79:d1:9e:5f:08:9b:d5:05:0b:f9:80:91:a2:
                    ae:b0:da:a8:f1:38:45:52:6e:63:fc:3f:e4:18:28:
                    94:8b:f2:7a:ac:b0:8e:2e:a4:68:de:9b:8e:d2:bb:
                    9c:27:8a:4f:87:80:a9:ec:d5:fc:06:4a:fc:c0:26:
                    52:eb:93:78:d7:83:27:de:0d:3a:ee:28:c6:83:2b:
                    c4:29:4e:fe:28:f1:13:9a:02:06:c4:72:3a:80:9e:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F7:2C:25:9F:F5:2E:56:C0:BB:B7:B2:CF:2D:09:E6:6E:61:61:4B
            X509v3 Authority Key Identifier:
                keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f0:ef:6d:04:d7:79:03:9b:9e:49:5c:a5:7e:b5:34:e9:d1:
         65:a8:5e:75:ec:17:c2:c8:b0:ba:27:72:bc:ba:73:37:d4:6a:
         7c:d6:0a:75:7b:37:e7:f4:60:e5:2d:74:53:05:e3:56:34:58:
         f0:1d:a6:8f:34:d6:57:92:44:db:58:5f:97:a9:e4:b9:0b:27:
         0d:61:b9:65:de:f3:6c:06:a9:cf:80:84:b4:82:13:32:6f:2e:
         0d:d1:21:ff:98:2d:a6:41:dc:0c:ac:27:8b:bc:26:ae:b7:d6:
         6f:0f:ee:26:db:ed:b4:a0:0e:2b:6e:64:bd:ea:5e:5a:65:ec:
         d4:0d:78:99:52:ab:e6:e9:7d:92:2d:b1:9b:52:4f:ec:ba:91:
         a6:56:04:aa:b9:ec:b6:18:6b:ec:8e:6b:de:7b:5a:27:ee:86:
         80:91:9e:5c:4a:88:d1:37:66:72:15:7b:2b:29:72:c1:da:63:
         ac:93:35:66:22:74:90:43:79:4a:bc:8e:ad:df:13:83:7e:81:
         e0:31:29:23:23:bc:da:27:4c:97:0c:d9:05:a6:e8:ab:b3:2f:
         29:23:53:49:1e:0f:fa:95:1a:76:c5:09:d0:c2:5c:a9:b7:37:
         59:de:25:fc:8c:ec:b9:93:3c:6d:ac:8b:d2:c6:d0:86:f7:30:
         9c:10:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:32:57 2024 by rpki-client on console-fra.rpki-client.org