Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          oxtp5CcK5iEhbbfAxlOzaccWxMWyhwbPpgtGRzCkmbg=
Subject key identifier:   3E:4B:3E:1E:FE:DC:DC:EA:28:D9:A0:B2:AC:D6:7E:34:97:CD:72:36
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       0193553F47E3DC9788A1974135A1FE86F3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          025D
Signing time:             Fri 22 Nov 2024 19:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:30 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: g89iml7gps9C0aTSFA9tl5TiR/8kHka9tHYWEMAMiTI=)
                          2: PBx77Cfoqn4EL1ZkzcRKpln_28c.roa (hash: +HOQRukDSjybshPbEXhp7b1Z1FV+ltp0SFjv4PVKWmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:47:e3:dc:97:88:a1:97:41:35:a1:fe:86:f3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Nov 22 19:00:30 2024 GMT
            Not After : Nov 23 19:00:30 2024 GMT
        Subject: CN=3e4b3e1efedcdcea28d9a0b2acd67e3497cd7236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:78:39:f1:6d:2c:1d:cd:b0:60:c2:3a:ed:
                    57:f8:25:dc:9a:a4:62:33:6b:45:61:51:c1:13:ec:
                    5b:d8:fb:0a:4e:04:c5:00:ff:0d:fd:15:09:8c:71:
                    e5:f0:76:e8:a5:26:71:a1:2b:d9:f5:5d:b2:1a:78:
                    a2:d0:78:5a:6b:a8:49:b5:bf:e8:5f:2a:a5:50:9d:
                    1b:42:b1:5e:ea:2f:6c:bd:0c:91:b3:06:23:63:dd:
                    ab:54:9a:51:80:af:63:50:5c:24:f6:ad:c9:0f:16:
                    14:3c:98:bd:2f:19:1a:36:98:32:1a:8c:d4:a1:5d:
                    91:50:dd:01:ff:ba:a1:c2:1f:af:1a:71:2f:61:3c:
                    ed:bd:f8:8c:8f:43:a8:dc:58:c8:e7:41:59:93:15:
                    24:eb:e7:c6:cc:61:ce:62:f8:5b:76:62:10:c8:7d:
                    b8:33:58:16:70:cd:15:d3:7a:74:30:63:94:a1:c9:
                    4a:22:82:be:61:d6:83:70:a7:4b:18:fe:71:79:01:
                    53:fd:4d:23:32:39:fd:b0:ad:f4:75:08:e2:ab:83:
                    77:ee:34:5b:8d:22:f4:f9:a9:0a:50:25:d1:15:5c:
                    d3:96:37:d4:c2:d4:26:3c:a9:63:86:15:09:79:51:
                    cc:b0:2c:8c:ab:e9:36:ea:b0:7c:a0:4f:65:f6:8e:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:3E:1E:FE:DC:DC:EA:28:D9:A0:B2:AC:D6:7E:34:97:CD:72:36
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b8:56:bc:68:a9:c5:7d:54:df:7e:0a:d4:9e:f8:98:f2:1f:
         3f:f8:d3:9d:08:e7:a1:82:fd:4e:a9:8c:a3:6e:f9:61:04:c6:
         4f:40:91:4a:14:ff:77:de:c1:f6:a7:2b:28:2e:bf:f6:03:26:
         60:94:f0:62:1e:f4:c5:99:9c:47:f3:74:10:15:ed:38:ba:2e:
         3e:69:ca:00:d0:b1:df:05:9b:9e:78:cf:2f:bb:78:55:7a:4d:
         8c:57:6c:9e:ea:e1:98:92:ea:a5:a7:e5:5e:10:01:51:33:8c:
         db:f1:6b:5d:c6:7e:cb:22:8c:8b:00:bd:b1:85:6b:06:bd:d0:
         db:68:7a:25:d9:a1:a4:74:fa:4c:bc:46:46:e8:d2:32:88:e5:
         92:b2:e1:3a:49:83:21:c2:aa:ae:a9:a9:3d:15:7a:8e:20:4b:
         dc:61:41:78:75:1e:7e:1b:ae:8e:98:d0:49:92:0f:bf:ad:16:
         d6:f1:0f:53:c4:da:00:55:80:69:8c:e7:04:6f:b0:cd:43:15:
         2a:e1:5d:67:28:69:e2:3f:b2:82:09:60:fd:b1:1d:4e:d9:b3:
         89:ab:c2:20:12:b0:1c:ec:3b:cf:0e:a4:0c:7f:65:7f:7a:9d:
         ec:81:9e:f3:43:c4:0d:9a:4d:e8:21:22:59:ca:e8:df:35:94:
         aa:36:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:31 2024 by rpki-client on console-ams.rpki-client.org