Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File:                     7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier:          Ea3TJSLWqIGItr8s1DkHbIVnaRl6nAMrQhBeO/qaJfk=
Subject key identifier:   F0:D0:87:3D:5D:84:03:9D:D9:2C:54:90:90:15:F8:34:1A:8F:4B:8D
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       0191FAED25B90FAF0AFA8023774F34707899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number:          014F
Signing time:             Mon 16 Sep 2024 13:02:11 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:11 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:11 +0000
Files and hashes:         1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: keoBKHpSBYiGRn2pLky/JO0wwxQH1zLXAmPlxSYOJiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:25:b9:0f:af:0a:fa:80:23:77:4f:34:70:78:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: Sep 16 13:02:11 2024 GMT
            Not After : Sep 17 13:02:11 2024 GMT
        Subject: CN=f0d0873d5d84039dd92c54909015f8341a8f4b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:07:da:aa:bc:74:b1:d7:87:16:f9:87:b2:
                    a1:8d:7c:f2:f8:1d:d4:4d:23:0f:10:ab:81:fb:a8:
                    1c:94:2d:ad:53:b0:0a:51:43:21:96:42:81:a3:ef:
                    d9:cd:d3:82:d7:b0:ef:57:7c:ee:3e:51:2e:6c:b6:
                    e3:dc:4e:69:59:b1:59:10:46:80:74:3f:c3:ef:5b:
                    ec:13:9e:b6:0d:80:af:5c:12:c3:5f:1a:18:d2:15:
                    63:6d:e9:00:4a:49:6c:fc:b0:9a:11:34:c3:15:24:
                    45:f0:3e:5e:51:a5:84:d6:c1:00:d5:cc:f7:17:d9:
                    58:e1:7d:73:98:cc:5e:da:d7:06:ea:60:68:fb:83:
                    71:31:c3:6c:36:ef:a9:61:79:8a:92:8d:3b:16:0c:
                    ed:ec:c3:50:80:8d:bf:00:b5:77:ad:63:fe:af:9c:
                    6e:fd:54:22:c2:ab:49:a8:59:9a:9a:68:57:fc:ca:
                    b1:ff:42:23:2c:b4:ef:03:53:10:bd:8e:12:6c:2e:
                    1f:94:57:bc:17:d4:40:5e:9b:7a:55:d6:d1:8a:4e:
                    0f:3c:a1:66:24:74:fb:ed:96:6a:ac:ad:ec:89:58:
                    01:cd:76:62:8f:60:97:f8:cb:0a:7b:9d:55:5c:e3:
                    c0:2c:0e:1c:32:68:5e:e7:c7:87:3a:00:6c:55:f6:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:87:3D:5D:84:03:9D:D9:2C:54:90:90:15:F8:34:1A:8F:4B:8D
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d5:41:c3:e3:79:03:15:78:b6:18:34:cb:ce:5f:4c:67:e3:
         50:e4:71:40:bf:f8:a6:31:8d:74:46:cc:7a:0b:cf:ee:1b:1f:
         f3:76:98:42:6f:25:c8:d5:82:95:ea:cd:a5:56:1c:ff:86:02:
         53:62:9f:ad:a1:d1:c7:95:41:42:5f:1f:f8:3b:a6:66:1c:ba:
         a4:26:37:c1:e4:a7:b0:3d:60:97:74:ef:31:eb:08:31:47:92:
         64:49:12:23:dc:06:b2:51:fe:e9:d2:7b:a0:83:c1:9a:4c:4b:
         35:c6:f3:f6:ea:4a:00:a9:53:b0:ae:14:d9:af:e9:7d:88:23:
         73:ee:df:92:fa:9c:48:e5:b3:f1:4f:11:f7:54:21:45:8e:63:
         eb:e8:6d:ca:66:32:d2:12:2d:4c:73:c3:0b:9a:11:b9:54:ff:
         e6:21:dd:11:7e:f9:35:df:56:a9:b8:8d:51:67:10:f0:1c:9a:
         4e:4a:a3:3c:3c:e0:4b:b3:35:7e:62:6b:5b:3b:4d:ad:b0:a1:
         97:0b:2c:e4:ad:e0:7c:ba:32:80:4f:b4:a1:03:0b:3d:5b:6c:
         68:70:a7:84:a2:fe:7d:9a:ec:2f:a8:47:98:09:d8:1c:79:e4:
         20:e0:a1:3e:d5:cb:79:5d:3b:85:52:3e:bd:3f:ae:71:93:b1:
         d2:a1:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:14:54 2024 by rpki-client on console-ams.rpki-client.org