Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          5/wk0kM4Fkh9BBNq4EP7D/986xSejfwJE3rO8DY4NlY=
Subject key identifier:   DD:3B:AB:6A:DC:ED:9A:AA:7E:66:1F:63:67:49:DE:B6:F9:FD:78:2E
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       01936A0F812DC826D970D2B6C05B94C2139C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          02D7
Signing time:             Tue 26 Nov 2024 20:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:21 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: k8N8mifyjBjJx/prmXTdDRdnTw7K72+NAlGwd4TJCgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:81:2d:c8:26:d9:70:d2:b6:c0:5b:94:c2:13:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Nov 26 20:00:21 2024 GMT
            Not After : Nov 27 20:00:21 2024 GMT
        Subject: CN=dd3bab6adced9aaa7e661f636749deb6f9fd782e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:6b:e5:62:1d:98:7f:1d:32:af:73:19:62:
                    0f:35:92:9e:da:ff:24:81:68:89:6d:37:f4:46:63:
                    4d:df:bd:30:a2:18:b9:5c:38:11:af:d6:0a:3d:0c:
                    a5:f1:ff:47:ed:ef:0c:33:fc:f5:93:0e:e5:27:64:
                    ff:bc:06:b2:1e:37:d3:dc:ea:a2:ab:24:d1:1d:69:
                    80:17:c9:43:38:99:7c:2c:c2:1f:35:da:d7:70:b1:
                    49:ec:79:10:20:92:5b:23:87:ec:6f:32:e4:cb:f7:
                    58:7e:ea:26:67:24:24:a9:51:e3:1b:90:b1:ee:5a:
                    55:3f:28:cd:78:9a:24:08:5e:83:42:36:e4:9f:97:
                    07:52:bd:ee:5b:82:ea:c9:72:5e:22:76:6c:ad:52:
                    fe:a1:a9:1b:ba:ef:36:f7:2d:3b:e0:e3:55:1a:49:
                    e1:72:98:39:9e:05:32:ae:7a:59:93:bc:0c:12:2d:
                    0f:aa:06:66:f3:b9:13:0e:e0:68:ad:b8:2c:0f:26:
                    9a:d0:a1:83:a8:dd:13:6f:da:0a:db:da:21:25:cd:
                    a6:16:c5:fa:39:22:95:3f:6f:25:7c:08:32:f4:23:
                    62:e6:fd:be:26:01:75:19:74:9a:32:cc:ea:54:37:
                    49:3b:33:2d:e4:d2:ac:99:6b:41:d0:cb:0f:c8:93:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:AB:6A:DC:ED:9A:AA:7E:66:1F:63:67:49:DE:B6:F9:FD:78:2E
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:ae:e5:cc:dd:e4:f3:6f:48:b7:04:e1:95:0b:fa:a5:b7:
         b8:d1:4a:9b:50:86:91:2a:0e:7e:8a:70:a1:21:1a:a2:b4:50:
         13:15:6b:f9:2d:4e:62:24:74:ca:99:e4:e1:fc:31:a7:fe:9b:
         6a:23:3d:81:ca:25:c2:be:e2:0a:ad:6a:cf:1d:59:85:f6:93:
         45:be:b5:64:59:a2:84:11:74:c7:f9:ff:60:8f:a1:13:58:aa:
         3d:85:37:a0:73:a2:1e:a2:67:8d:46:ab:71:78:98:bb:aa:c5:
         0a:f6:25:6a:e3:20:5c:3f:b4:9c:c5:b4:b2:b5:39:64:d2:66:
         74:d6:dd:69:fc:eb:6a:dd:17:90:5c:9a:b9:3b:a5:a6:16:ea:
         cb:8b:07:6d:35:3a:63:cc:4f:20:7e:8f:06:c6:dc:c4:ff:af:
         6d:a0:91:da:c4:5d:74:bf:80:df:df:c8:d8:c9:90:e0:72:5f:
         11:76:a1:33:b3:6b:ca:5d:34:8e:02:e8:e0:0d:e0:80:55:83:
         60:6a:67:f8:6f:00:63:d2:26:5d:ad:31:37:7d:c8:26:ae:e6:
         25:e0:01:15:a2:c0:9f:ec:8b:36:ef:be:f7:38:d5:aa:3c:1b:
         b1:a0:d5:a8:fc:63:f7:cf:4d:cc:dc:4b:1d:0f:d9:6e:f9:d1:
         65:7f:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:19 2024 by rpki-client on console-fra.rpki-client.org