Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File:                     sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier:          8+rs31TFRsDmk0POgq2GdF43SR8yDYyuzrkB0YLrd0s=
Subject key identifier:   7C:DB:40:D7:F6:88:13:2B:23:F0:DB:02:98:33:45:C9:56:48:32:8B
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer:       /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial:       0191F9A2D7ECB66A18E7E17871F13A503D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number:          A7
Signing time:             Mon 16 Sep 2024 07:01:24 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:24 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:24 +0000
Files and hashes:         1: Eraq8TDFMzXx8Udr-ffNbblIOHs.roa (hash: bO3DiiKSZ+3rkO9i7Ko0YSulVr2XVEAcws73MyW47sw=)
                          2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: jLR/c//qVU+z3ncAqYnuZcmAl9+5+CTeVR14gjLfPcY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:d7:ec:b6:6a:18:e7:e1:78:71:f1:3a:50:3d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
        Validity
            Not Before: Sep 16 07:01:24 2024 GMT
            Not After : Sep 17 07:01:24 2024 GMT
        Subject: CN=7cdb40d7f688132b23f0db02983345c95648328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:fb:13:8b:62:24:82:c2:67:e3:4b:2a:37:
                    d3:74:3d:c1:9a:ec:15:59:44:97:1c:5e:1a:73:0a:
                    af:25:bc:65:20:bb:83:0a:b4:88:6d:db:42:33:d9:
                    f9:7f:cb:ae:8c:18:7e:db:da:71:0f:8c:19:8c:a8:
                    50:33:cf:63:57:c0:80:88:43:f5:2a:37:43:db:1e:
                    1d:4e:27:b5:82:56:4f:6f:eb:db:0f:f2:e0:1d:ec:
                    14:56:e3:4d:80:6f:76:2e:43:07:03:4f:dd:42:92:
                    22:3c:ed:2e:5d:85:bf:11:49:57:5f:c5:4f:af:94:
                    cc:6e:6d:33:8f:2f:7b:1d:dd:8b:fc:cf:48:d6:4a:
                    38:e9:cf:f6:4c:da:46:f9:77:74:2b:b5:3c:8a:19:
                    cb:47:5f:c4:ac:ca:13:8f:1c:41:bc:ec:5a:34:a2:
                    8e:52:27:13:d6:59:e4:a8:b5:57:64:86:c9:fa:12:
                    17:95:06:3f:44:88:1c:f0:81:cc:f6:0e:d5:a0:1b:
                    59:98:d7:9b:51:55:bf:72:80:f1:7b:03:ff:4a:6d:
                    98:6b:e0:85:7d:b7:b4:d3:0c:02:16:00:bf:f7:35:
                    d6:ee:7c:fd:32:c8:9a:00:60:82:25:b1:ee:4d:08:
                    ea:e7:79:04:dd:cd:ff:50:4b:1f:4e:a1:b9:7a:92:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:40:D7:F6:88:13:2B:23:F0:DB:02:98:33:45:C9:56:48:32:8B
            X509v3 Authority Key Identifier:
                keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:f7:2c:8b:3a:3e:b9:73:3d:c8:0a:ee:d4:f1:28:cf:1e:
         0b:a6:4e:66:ae:96:cb:ec:74:d9:46:06:07:6b:4a:88:e5:b4:
         85:34:eb:47:d9:fd:b1:60:b9:8b:b5:20:44:c4:8e:78:e9:9d:
         06:d5:9d:51:b1:e5:ab:c7:92:14:32:a6:b4:cb:a1:3c:cc:9b:
         be:28:e6:fc:7c:7a:7d:96:8f:d0:9f:79:d3:55:2d:d6:3f:33:
         46:f8:50:96:7a:5a:01:ab:c6:74:79:c1:6d:a2:78:cc:a1:07:
         ed:9e:c1:6f:63:95:18:59:b7:ae:72:58:01:b4:56:47:7d:d4:
         08:5b:fa:71:65:58:3e:5b:cf:00:41:21:57:26:ed:34:76:c1:
         f8:95:ce:fe:41:3d:85:b8:05:c9:3c:93:b2:ff:12:79:ac:45:
         df:65:13:e0:cc:35:60:e9:d1:f3:77:2f:b1:e1:8e:0c:e1:12:
         0e:98:e2:20:05:9f:8a:92:0c:81:35:52:1d:4d:ff:0f:c8:93:
         72:25:bd:8e:96:f1:17:2d:19:14:0b:e6:ec:df:2f:1f:c9:06:
         67:6e:33:46:cc:b7:19:c4:8d:1d:f1:0e:b2:18:51:05:ad:e1:
         1e:6a:67:ef:7a:40:8d:cf:2a:85:3d:d4:e9:3d:2f:07:57:69:
         83:18:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:33 2024 by rpki-client on console-fra.rpki-client.org