Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File:                     7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier:          JlfHt14NUfjoGKa3u9gNfyq5EkqNq3dizO5Ug3KTeX0=
Subject key identifier:   EE:03:B3:F7:B5:B4:7B:21:86:0F:26:81:AE:C7:F0:2C:91:84:D8:BF
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer:       /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial:       01935688CEE708A52B9C7B905E4EE2AAF20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number:          09F1
Signing time:             Sat 23 Nov 2024 01:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:26 +0000
Files and hashes:         1: 4sy4PK-0z-55q-uLaDBIbi7D4eg.roa (hash: xjqpdV244UuAsbA8wvEBRVioPaAutgSTy2o0sp7LjJk=)
                          2: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: KiFQND/UbR1qRxKEphUS0Op4HGXExlWY0SpZcNWRU88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:ce:e7:08:a5:2b:9c:7b:90:5e:4e:e2:aa:f2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
        Validity
            Not Before: Nov 23 01:00:26 2024 GMT
            Not After : Nov 24 01:00:26 2024 GMT
        Subject: CN=ee03b3f7b5b47b21860f2681aec7f02c9184d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:33:43:84:12:44:87:3e:a9:d1:b7:2c:e6:
                    73:94:83:26:89:ad:ad:db:04:9a:78:e4:4f:f5:89:
                    14:24:9b:75:c6:7d:cf:0f:c0:cd:28:94:77:4f:fc:
                    6f:a6:b8:5f:b6:87:33:be:52:57:f0:c9:36:91:39:
                    1b:0c:e8:49:33:cb:12:61:66:0a:54:63:ac:11:b6:
                    b2:a4:0f:60:3a:cc:f5:b5:86:6c:60:a2:11:38:95:
                    73:f6:e0:75:db:4a:5d:20:4a:1c:e4:80:e7:f7:e7:
                    3d:f7:7f:dc:81:49:2b:c8:dd:c9:30:75:4f:25:16:
                    8d:cd:2a:ef:22:19:b5:f0:6d:f4:e0:d7:b0:e1:9d:
                    bd:0b:cf:bf:32:5a:e5:d1:77:cc:a4:b0:12:d7:f3:
                    39:c2:23:92:10:4b:ee:e3:f9:30:68:62:a1:e3:27:
                    2d:5a:a7:65:f2:e8:04:ef:5f:88:0d:5a:84:3a:b2:
                    61:90:89:c9:67:c7:41:71:28:2c:05:db:14:fe:6a:
                    36:34:82:35:70:f4:43:f6:97:e1:bf:80:a9:3d:6c:
                    8f:7b:3d:b4:6e:c2:15:31:20:b7:57:e8:0d:07:a2:
                    cc:a3:9c:32:43:a7:c8:94:11:2f:09:ee:c2:31:4b:
                    41:f6:3a:e8:16:66:5d:07:91:aa:bc:5f:50:9b:27:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:03:B3:F7:B5:B4:7B:21:86:0F:26:81:AE:C7:F0:2C:91:84:D8:BF
            X509v3 Authority Key Identifier:
                keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:95:04:be:a7:37:89:e3:43:c9:2a:d7:2c:b4:cb:4d:9b:
         d3:44:71:42:fc:31:03:0d:c5:57:5f:83:4f:7a:c7:0a:71:40:
         e8:e3:56:3c:1f:59:cd:d4:15:e7:cc:e6:42:cd:af:3d:db:f1:
         60:84:54:9f:cc:0f:0d:22:9e:53:2b:b4:bd:c2:8a:d9:a7:5d:
         09:fe:26:92:16:13:ee:9b:6c:89:9b:24:2e:2d:4b:aa:83:dd:
         7d:2d:3e:ed:78:c3:85:b6:00:5f:64:36:0b:de:b1:b2:67:e6:
         8a:57:d7:5f:df:80:b1:28:46:96:78:21:d9:ab:0a:c4:12:75:
         ff:fe:4b:ef:c1:0b:6e:c0:2f:c0:bf:de:c7:95:c2:c5:c9:75:
         11:60:cf:d5:48:6e:bd:f9:e4:08:f6:ee:38:28:25:e7:0b:1a:
         26:4d:95:d7:5b:82:03:54:67:cb:f8:9d:6b:b2:80:53:d5:75:
         1d:fc:21:67:ee:87:95:6d:d1:a6:c0:31:a4:10:4b:04:c4:0c:
         1e:4b:33:ec:72:08:32:63:db:04:bc:8c:63:ac:22:58:77:7b:
         ac:ca:ae:eb:51:0a:31:12:9d:dc:5f:eb:21:a9:c5:e2:e0:f8:
         2c:58:b0:99:98:f8:6c:33:93:6c:86:28:96:e9:dc:2e:a9:7d:
         01:85:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:58 2024 by rpki-client on console-ams.rpki-client.org