Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File:                     7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier:          et69ISVqmMef/2I0oaT7usvYxxppW4lQo3ex/I1Ndng=
Subject key identifier:   DD:AB:68:00:FF:5F:AB:EC:A3:D5:52:F1:E6:73:EB:13:BB:48:DA:E9
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer:       /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial:       0193553F0348A4A7EBF6F73B289A429CAACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number:          0FBE
Signing time:             Fri 22 Nov 2024 19:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:13 +0000
Files and hashes:         1: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: bwQnUEXE7mMruJcR8TFwD70Ql1DZ7ElsCqUNgB5+6TQ=)
                          2: Ak0XzHOSwwrkCADIgkofeWxQ4lE.roa (hash: 6p8bze2mCfUkajcGcUf/rrXILsI797qE5DP1tY1jgEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:03:48:a4:a7:eb:f6:f7:3b:28:9a:42:9c:aa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
        Validity
            Not Before: Nov 22 19:00:13 2024 GMT
            Not After : Nov 23 19:00:13 2024 GMT
        Subject: CN=ddab6800ff5fabeca3d552f1e673eb13bb48dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:0d:2b:6e:d1:93:2b:bc:40:da:27:78:14:
                    a0:d7:df:01:7a:ad:57:5c:cd:b2:54:1f:e2:06:6e:
                    6f:1e:62:c6:40:31:99:f4:cf:c0:e0:af:0e:fc:9e:
                    57:4e:bf:4d:5d:83:97:c0:16:ec:a6:0d:77:a0:07:
                    f8:0f:47:f7:b9:ae:10:64:bf:1c:83:6f:f9:1c:fa:
                    17:62:3c:8c:cd:6e:83:3f:19:5b:93:dd:6e:2d:21:
                    33:c1:59:08:89:a4:31:f8:20:29:3a:63:25:96:e4:
                    e5:a0:fe:32:e4:91:3c:44:24:22:99:dd:c6:07:7f:
                    e3:fc:7d:f8:ee:98:be:fc:8c:0e:af:23:f0:90:35:
                    b5:a2:38:5d:60:83:c4:b9:e6:0f:74:ca:ca:e7:54:
                    66:fe:2d:a1:c4:16:7f:21:8f:07:16:01:a4:65:17:
                    93:7d:00:e9:36:d5:b5:c6:25:b1:dd:01:ed:b0:14:
                    3e:63:b5:da:1d:54:c3:16:3c:89:95:d5:8f:09:b9:
                    5c:00:16:2e:c3:d3:5d:0c:4e:f5:6b:da:8f:b7:25:
                    e5:0e:5c:cc:ee:cd:d5:f0:dc:78:64:5e:55:45:55:
                    71:90:76:93:26:bd:cd:86:09:fd:8d:cd:47:60:b1:
                    a7:32:5a:43:1a:a2:69:f6:3c:f4:21:12:56:9c:58:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:68:00:FF:5F:AB:EC:A3:D5:52:F1:E6:73:EB:13:BB:48:DA:E9
            X509v3 Authority Key Identifier:
                keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:40:b0:f8:58:80:aa:fe:eb:63:91:ff:f5:7a:ce:41:b3:
         98:90:6c:07:43:01:a8:71:29:97:23:a7:bf:fc:61:14:b6:74:
         8d:f5:4a:c8:ed:91:42:d3:69:7b:ef:c2:18:6e:10:a4:ee:9c:
         fd:15:d3:db:f9:37:d5:63:2e:18:65:70:0c:8e:e3:76:d4:18:
         ad:7c:93:df:60:42:1e:d8:19:fd:06:5b:46:9d:f3:8b:a9:61:
         38:00:b1:1f:fe:70:9c:ac:ff:4c:ef:3a:83:56:e1:c4:27:b5:
         85:4f:6b:40:8e:6f:bb:b0:65:64:b9:0e:74:66:bb:7c:74:08:
         d0:b7:67:2e:44:4e:31:41:40:e6:22:a7:c0:91:7e:18:a4:59:
         61:78:99:46:0d:0d:23:e9:e2:6d:52:61:6b:4d:c9:30:2d:a0:
         40:8d:a3:72:62:bd:22:37:94:bb:4f:3c:95:da:6a:51:5a:f6:
         d1:f2:a5:b6:f5:63:f2:41:dc:b5:f5:48:eb:5d:fe:78:8a:06:
         ac:e7:d8:f4:bc:41:ac:3a:9b:32:e7:e2:8f:a4:f6:fb:dd:4b:
         4d:c5:66:ce:bc:4e:96:6e:f4:cc:77:3e:e2:5c:c1:b2:bd:3f:
         5a:bf:cf:21:50:3b:7a:8b:bb:a6:bb:5e:eb:09:7e:f3:20:30:
         70:98:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:01 2024 by rpki-client on console-fra.rpki-client.org