Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          A2eirSSQfpcenMhpGMwa8jrN6yAkbIEa5MAih/F5cW0=
Subject key identifier:   9E:70:DC:F2:E3:B0:20:DD:2C:77:DF:B1:15:15:EC:E4:C9:47:DB:EB
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       01936A4700782F8F7F67C87D982A9AE6400F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:58 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:58 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:58 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: AVuUhkisZyrGa9cR3szhpSpnOuOwSirOX1dyqjr9m7g=)
                          2: Oyb2jvlBpEFJaRJcilVS7M0RinQ.roa (hash: amwi0biJkfyXTYCvNWhejnSbHkumqzfgfl4EbVshDyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:47:00:78:2f:8f:7f:67:c8:7d:98:2a:9a:e6:40:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: Nov 26 21:00:58 2024 GMT
            Not After : Nov 27 21:00:58 2024 GMT
        Subject: CN=9e70dcf2e3b020dd2c77dfb11515ece4c947dbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:ee:e9:83:76:c1:37:ba:82:c0:ec:60:81:
                    5c:7d:82:2f:a8:29:67:0a:ac:e0:98:9d:f2:2b:0b:
                    29:6b:57:8b:a4:24:a4:15:8a:a4:7e:ac:ae:cb:74:
                    a6:52:6d:62:22:c2:e9:21:95:ad:99:5d:0e:b3:be:
                    d9:ea:fb:c6:bb:ac:fd:14:a7:f2:db:c2:c2:be:d7:
                    fc:03:9f:aa:01:c4:7b:c5:95:58:63:0f:2b:ca:7e:
                    5d:4d:2e:65:1e:9c:e9:32:80:96:74:ba:6f:bb:14:
                    33:33:43:39:62:61:d8:43:d3:1f:70:e0:52:a7:46:
                    0e:a1:06:c5:28:c2:27:44:b1:c7:b0:0e:d5:94:f7:
                    20:ba:2e:da:0c:fd:0b:1d:f0:70:4e:d3:6d:2b:43:
                    2f:71:b4:8b:cd:74:40:20:54:05:9f:ed:16:6f:84:
                    c0:2b:76:e2:2e:3a:7a:22:6d:cd:ca:26:1f:b3:03:
                    cc:6a:68:92:fd:d1:d8:97:bc:54:ba:e9:ec:13:7c:
                    17:89:c5:6f:14:d7:a1:3b:3a:4d:01:35:01:58:54:
                    61:03:7f:9d:3c:cf:54:d9:fd:b3:03:f0:61:55:14:
                    ae:8b:1c:f3:3f:b6:67:e8:a3:d7:a9:af:0d:b4:a8:
                    a2:01:78:f4:31:7b:81:75:05:ac:b1:9f:73:a8:e7:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:DC:F2:E3:B0:20:DD:2C:77:DF:B1:15:15:EC:E4:C9:47:DB:EB
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:16:13:48:92:10:c8:77:50:20:69:2f:2f:7c:64:6f:37:
         60:6d:b8:6d:86:1e:f5:9f:f0:88:22:8a:fd:0e:db:0d:fc:fa:
         ef:63:33:bb:35:d3:0a:7b:82:94:7d:04:69:6e:05:9b:8e:d8:
         dc:e1:b5:ba:bd:15:4f:2f:8b:72:2d:7d:a9:67:cf:40:52:58:
         fc:9d:c6:80:4c:ea:a1:27:6b:1d:bb:a0:97:35:ec:de:e1:8e:
         8b:8a:1c:b1:5c:11:1a:4a:fa:14:f4:73:e7:71:25:5d:32:e3:
         1f:81:b2:4f:e9:ff:e5:95:65:e0:d5:ee:e3:c6:bd:14:16:82:
         b0:19:3a:45:e3:8a:10:65:46:aa:e1:33:6a:86:7c:48:3a:be:
         c4:6b:24:26:1c:d6:69:0c:57:e9:d4:cd:d1:21:e3:b1:ec:e1:
         7f:b6:bf:17:8a:4b:e3:ee:e0:73:fc:3f:43:b7:1b:73:ad:ad:
         af:f8:6b:7f:12:d6:c7:9e:0d:a3:b9:29:4e:1d:64:4b:c9:d8:
         d2:18:15:4d:a3:7e:56:50:0b:2a:38:89:8c:34:3d:e7:a0:fd:
         74:7d:16:3d:a9:95:1e:d0:21:1e:19:b0:16:a2:28:dd:8a:f8:
         ee:2b:cf:51:11:d2:72:6a:6a:0f:1c:e8:4e:12:ff:81:80:3c:
         bc:bc:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:47 2024 by rpki-client on console-ams.rpki-client.org