Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File:                     7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier:          7vln30OJJlQMscKQdvVdeTIiuyFQka5EgIOfdsnL9jA=
Subject key identifier:   E2:13:96:FA:10:3E:1A:4E:39:07:7F:B7:D5:57:C6:D4:C5:F1:7A:46
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer:       /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial:       0193579BAABE50534E63FF394E2CC9AA60B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number:          0EF2
Signing time:             Sat 23 Nov 2024 06:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:39 +0000
Files and hashes:         1: 7rM-VaToy8nFleI7ojz1mNKQkfc.roa (hash: b/9TofnsUBoYwQ/eCofWjRc9i5SxMPb9hAp6azt6fRQ=)
                          2: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: Qbqi5FCTuCW13cGdpRHR2WK2x/i3ABi1L3P8c4Wyn5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:aa:be:50:53:4e:63:ff:39:4e:2c:c9:aa:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
        Validity
            Not Before: Nov 23 06:00:39 2024 GMT
            Not After : Nov 24 06:00:39 2024 GMT
        Subject: CN=e21396fa103e1a4e39077fb7d557c6d4c5f17a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:3f:04:09:43:57:de:1d:97:16:4c:ca:5e:
                    1d:96:7f:88:8f:dd:73:46:a3:09:44:a3:f6:8e:63:
                    bc:91:1d:c7:ce:e9:2a:42:4f:60:b3:d9:73:e8:a5:
                    d3:ab:06:c2:c9:ee:56:54:ff:f1:cd:4b:17:0e:84:
                    96:1f:8d:ff:c5:de:1c:66:62:29:41:29:5f:f1:0d:
                    17:cf:2e:67:eb:c6:b2:50:e7:b7:b0:e1:2d:f8:98:
                    2a:41:8a:3e:ed:5e:c9:be:70:50:60:5d:c3:34:f8:
                    7b:fc:8d:ab:5a:b9:a2:53:6e:9f:a8:bb:38:55:54:
                    45:07:6d:65:66:74:d6:eb:7c:03:fd:cc:ee:39:88:
                    3e:62:54:69:fe:fb:97:ad:98:04:fe:17:65:a4:35:
                    43:48:13:01:cc:42:40:c6:14:85:79:29:7d:77:46:
                    88:ab:c0:7a:b6:b3:22:a4:cb:25:f4:67:38:aa:c6:
                    22:0b:53:98:a8:ed:b0:36:e3:64:01:9a:5c:0e:a3:
                    b0:77:6b:29:38:ee:1e:6f:e8:13:51:ee:41:12:30:
                    5d:72:58:3c:11:1f:ac:41:c6:e7:a2:69:38:50:b5:
                    7d:1f:21:b3:50:b3:00:74:4c:3c:7a:5f:9d:0f:fe:
                    34:bd:f1:a7:01:f2:91:08:b1:d0:15:03:67:b8:a8:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:96:FA:10:3E:1A:4E:39:07:7F:B7:D5:57:C6:D4:C5:F1:7A:46
            X509v3 Authority Key Identifier:
                keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:5f:f3:79:ea:43:09:d8:ca:b2:41:b8:60:2a:5b:6e:8f:
         73:ee:2c:c8:d9:d2:27:1a:94:ca:cb:12:dd:95:78:1b:c4:1b:
         f4:4f:b7:62:9e:70:48:f7:fc:13:50:1a:dc:f7:52:e2:5f:4e:
         b1:68:14:50:1b:a0:98:34:53:e1:d7:1c:13:03:18:b2:75:59:
         04:01:05:ec:82:f3:89:9f:78:ef:58:51:86:de:49:9a:c1:5a:
         93:2a:e1:6d:78:95:b4:45:de:d3:d7:7f:69:a3:ab:c9:a3:fd:
         38:1a:99:89:7d:bf:40:77:29:42:ef:5e:1d:d1:37:70:2c:7a:
         81:7c:61:9c:d9:2e:29:00:5a:89:fd:95:09:a6:e5:11:24:c9:
         2a:e2:8a:25:99:65:91:3f:ec:61:ec:8d:4a:8f:e7:82:7b:5e:
         11:1b:2a:14:d7:09:56:71:c1:11:e0:78:2b:d8:cd:96:77:e5:
         32:fe:7c:9f:f7:9f:42:5a:38:60:91:d7:71:52:d9:e8:2b:56:
         6b:5f:f0:51:79:20:a0:cc:56:f2:0a:fb:9c:eb:9b:37:0c:c7:
         ad:cf:b6:a8:83:d5:2f:ef:e1:93:2b:bc:6a:57:81:07:f6:9b:
         bc:f9:b0:0e:a9:1a:4b:91:fc:0a:c7:13:94:3a:21:59:9b:28:
         aa:db:24:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm6q+UFNOY/85TizJqmCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMzdjNDgwNjM2M2VhYTZkMzQzYWYyMmUwMzhiZWFkMmUx
OGI0ZjQwHhcNMjQxMTIzMDYwMDM5WhcNMjQxMTI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhlMjEzOTZmYTEwM2UxYTRlMzkwNzdmYjdkNTU3YzZkNGM1ZjE3YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHU/BAlDV94dlxZMyl4dln+Ij91z
RqMJRKP2jmO8kR3HzukqQk9gs9lz6KXTqwbCye5WVP/xzUsXDoSWH43/xd4cZmIp
QSlf8Q0Xzy5n68ayUOe3sOEt+JgqQYo+7V7JvnBQYF3DNPh7/I2rWrmiU26fqLs4
VVRFB21lZnTW63wD/czuOYg+YlRp/vuXrZgE/hdlpDVDSBMBzEJAxhSFeSl9d0aI
q8B6trMipMsl9Gc4qsYiC1OYqO2wNuNkAZpcDqOwd2spOO4eb+gTUe5BEjBdclg8
ER+sQcbnomk4ULV9HyGzULMAdEw8el+dD/40vfGnAfKRCLHQFQNnuKiIEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOITlvoQPhpOOQd/t9VXxtTF8XpGMB8GA1UdIwQY
MBaAFO83xIBjY+qm00OvIuA4vq0uGLT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMt
YWNiY2M2Y2ZkN2UzLzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMtYWNiY2M2Y2ZkN2Uz
LzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9Bf83nq
QwnYyrJBuGAqW26Pc+4syNnSJxqUyssS3ZV4G8Qb9E+3Yp5wSPf8E1Aa3PdS4l9O
sWgUUBugmDRT4dccEwMYsnVZBAEF7ILziZ9471hRht5JmsFakyrhbXiVtEXe09d/
aaOryaP9OBqZiX2/QHcpQu9eHdE3cCx6gXxhnNkuKQBaif2VCablESTJKuKKJZll
kT/sYeyNSo/ngnteERsqFNcJVnHBEeB4K9jNlnflMv58n/efQlo4YJHXcVLZ6CtW
a1/wUXkgoMxW8gr7nOubNwzHrc+2qIPVL+/hkyu8aleBB/abvPmwDqkaS5H8CscT
lDohWZsoqtsk5A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:20 2024 by rpki-client on console-fra.rpki-client.org