Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          RDdCZATKAw4+4TpOZqWZgaRpOd2fsnCvJ+wE4MgF+2w=
Subject key identifier:   F8:23:AF:5E:4D:97:D3:60:4B:4F:9A:74:D7:C5:44:D5:1E:59:27:7C
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       0194BABBB2EC325EC9FE321985381C393D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          0598
Signing time:             Fri 31 Jan 2025 05:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:50 +0000
Files and hashes:         1: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: 9cQ32fA79VnAmvM7t0JbXlz7/xMfRNqcTsMnhYw+VM4=)
                          2: sGUfZNonYxZsb_xTxnb3H4Yu91o.roa (hash: s4fR6r2ByqMIr6sZhA9/b2xFuO1KrvktMupAhaQVN8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:b2:ec:32:5e:c9:fe:32:19:85:38:1c:39:3d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: Jan 31 05:00:50 2025 GMT
            Not After : Feb  1 05:00:50 2025 GMT
        Subject: CN=f823af5e4d97d3604b4f9a74d7c544d51e59277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:fb:c9:67:29:c0:57:4b:2b:aa:68:26:62:
                    6e:fb:11:fc:5e:82:11:d5:d3:14:23:18:f1:46:51:
                    b2:51:26:ae:d3:7d:49:3c:d0:0d:d6:30:d0:ac:dd:
                    55:4e:f7:c2:de:4b:d8:18:06:c3:d1:3e:88:2f:15:
                    4f:56:a7:7b:9c:75:d3:05:96:e3:4b:00:fc:6f:5d:
                    40:44:4a:3b:b0:0e:7a:ea:2f:25:7e:dd:7b:dd:f4:
                    61:07:82:b6:60:35:d6:d7:e4:73:ea:1b:ff:b8:d2:
                    e0:c3:76:06:9c:f5:b7:dc:e7:93:54:85:a6:b3:43:
                    2b:3c:71:90:da:45:f8:9c:b5:1f:99:cf:83:01:43:
                    56:f3:d1:96:37:00:ad:4b:30:3f:50:98:63:1e:b1:
                    7a:dd:86:b0:f5:5b:26:fc:54:00:a4:79:58:bc:38:
                    28:44:76:88:20:47:59:28:a8:01:84:fd:fa:8a:92:
                    b1:1d:03:14:29:0a:01:d3:20:70:bc:3c:2d:9d:bb:
                    b7:b1:a9:2b:89:31:d5:2c:02:a2:d3:9b:84:ef:e1:
                    07:52:b8:8a:24:0a:3f:f1:51:1b:8e:2b:8d:88:9a:
                    5f:18:02:05:a9:16:71:9d:18:48:24:a4:24:1b:39:
                    d2:8b:78:ea:e4:50:48:a4:8c:b4:93:da:e8:63:df:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:AF:5E:4D:97:D3:60:4B:4F:9A:74:D7:C5:44:D5:1E:59:27:7C
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:06:1f:e0:ad:a0:67:d9:05:6e:b4:9a:e3:9f:ad:06:f1:
         df:1c:5b:34:46:6e:86:a6:12:a6:68:26:5c:96:08:49:38:c6:
         e9:45:a7:43:4c:e2:50:43:5e:b8:37:2e:f1:53:87:77:0e:d7:
         08:8e:38:6b:ff:e5:ee:97:b9:f6:69:28:b7:91:97:02:f0:92:
         7a:0b:10:db:cd:e6:53:de:5e:13:8e:2e:23:7e:18:64:57:53:
         4a:92:83:1a:06:2f:a9:33:c1:df:b8:63:4f:5d:52:5e:10:ec:
         d5:1c:23:8a:41:6d:2a:77:c2:46:97:53:81:ad:3c:c5:4c:4a:
         97:55:e7:60:03:9c:8c:52:56:90:ff:84:a8:b8:32:e4:e2:51:
         fe:8d:3a:de:fb:98:2e:6d:f2:7f:4e:61:cc:8b:29:1d:8e:12:
         cf:cf:e6:6a:61:08:8f:2f:39:62:ea:d6:e8:de:b0:68:99:01:
         46:b4:3e:8b:d9:0e:7b:7d:b7:37:f6:ae:24:77:ec:1b:01:00:
         fe:a1:0c:04:dc:6b:73:29:d1:1a:41:8d:ce:fb:dc:a5:0a:b4:
         46:1d:0a:6a:74:72:2c:8f:15:c8:c0:a2:fd:f3:91:a8:6e:87:
         82:49:8a:a2:ff:9e:77:ce:e2:72:ba:a9:98:53:11:3b:62:a7:
         ab:82:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:46 2025 by rpki-client on console-fra.rpki-client.org