Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
File:                     eN7biYi8i7Gl-eVfQXJrZURsJew.mft (raw, json)
Hash identifier:          DKLp524LO0NNKWPvON/eeLs2uLhA0eO/BlflC14j0bE=
Subject key identifier:   3F:3F:AF:FB:80:83:9C:BB:BE:64:3C:48:08:D9:B1:0D:82:FF:12:61
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Certificate issuer:       /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial:       0193561ADE29AB80897EB7B93E2AF953E030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
Manifest number:          0AEA
Signing time:             Fri 22 Nov 2024 23:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:21 +0000
Files and hashes:         1: KWbrIW2VwJEguzU8MECA4od67fA.roa (hash: tSn5WL1XPxVrergfY8pWlp0KKED6ktfPpSUKOMtgRqo=)
                          2: eN7biYi8i7Gl-eVfQXJrZURsJew.crl (hash: cTjpNSQkWaDU/xlePIJPwO8nUMg8EcR0QULNOfdGXHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:de:29:ab:80:89:7e:b7:b9:3e:2a:f9:53:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
        Validity
            Not Before: Nov 22 23:00:21 2024 GMT
            Not After : Nov 23 23:00:21 2024 GMT
        Subject: CN=3f3faffb80839cbbbe643c4808d9b10d82ff1261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:1a:fe:eb:7a:7c:c1:c9:2b:cf:84:de:01:
                    b4:c5:1a:c1:e5:56:b2:d7:39:df:21:7c:a6:d0:b4:
                    89:6e:ea:7a:08:cf:ff:fd:ef:15:fc:b5:ef:09:4d:
                    d9:15:54:7a:a8:6a:35:98:cc:ff:81:8b:71:3b:97:
                    c3:05:43:ae:4c:fa:10:9c:d0:b3:35:d6:56:85:23:
                    83:d1:7d:3a:f1:eb:2c:07:4d:27:8a:06:3f:5d:2a:
                    70:f4:7f:cc:d8:48:fb:8f:69:de:65:9e:22:8c:fd:
                    10:70:55:0c:6b:94:04:be:06:00:4b:a8:97:47:4d:
                    d3:62:51:82:11:79:c3:8a:14:23:27:7d:b1:f6:91:
                    f0:59:ac:b9:90:70:10:1a:cc:1b:40:1f:3b:18:be:
                    59:91:32:d3:4a:96:27:a9:7a:6e:c0:d7:0d:80:35:
                    db:63:76:4d:89:8e:eb:25:ff:f3:ed:30:59:0c:e9:
                    e9:54:3d:e7:2e:e4:8b:1a:c6:84:6d:fc:55:5a:73:
                    0a:e4:84:50:ed:8c:46:4a:2e:4d:15:3c:4b:d6:76:
                    9d:ca:2b:d4:8a:13:ca:2a:7b:ac:5f:e7:91:32:86:
                    40:54:d4:70:59:64:f8:da:7a:3e:f4:eb:7c:cd:cc:
                    19:15:42:63:eb:bd:ac:ad:67:b2:a5:cf:80:62:5b:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3F:AF:FB:80:83:9C:BB:BE:64:3C:48:08:D9:B1:0D:82:FF:12:61
            X509v3 Authority Key Identifier:
                keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:ba:e0:eb:8f:41:97:84:ec:08:46:94:8b:aa:f9:e5:23:
         46:09:10:9a:22:0c:e4:45:62:92:46:17:6d:af:00:c5:65:fb:
         e8:90:a7:0a:98:02:53:0f:b6:2b:85:50:bc:90:26:10:77:1d:
         96:53:02:55:b4:4f:89:50:56:69:be:a0:53:8c:a1:86:31:08:
         d2:1f:c3:c3:81:ce:69:7f:7a:ba:d6:74:50:f0:2b:d2:1d:bb:
         ba:70:06:15:c0:5f:8d:d6:18:c3:df:f5:3c:20:5c:2f:43:f1:
         bc:9b:35:f6:be:16:84:4c:ad:bf:7d:6d:8a:e1:cb:90:dd:b9:
         9d:ca:e0:c7:92:42:5a:54:7f:ea:e7:3f:2d:31:ef:96:9f:62:
         38:bf:07:7c:f5:c3:c0:57:11:f1:5b:be:ae:c6:f5:55:ac:b7:
         02:08:5b:6c:31:5c:df:dd:1b:22:95:77:24:68:c2:0a:0b:40:
         6f:d6:fe:0c:e2:80:80:ae:9b:5a:25:ec:c4:4e:36:e7:34:cd:
         ae:6e:0f:e9:8c:d0:1e:6b:c4:85:f9:e8:a8:4f:f3:14:49:f4:
         65:da:9c:fa:15:c6:f5:5d:79:0a:92:71:07:10:db:e3:28:01:
         c6:f5:91:69:e7:68:70:50:e3:cf:f8:2c:dd:62:ca:d1:0a:48:
         94:75:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:25 2024 by rpki-client on console-fra.rpki-client.org