Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File:                     MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier:          TM2BCqMOOGIFNEXPK+A3aJ0N+1fnfP9zDscYcfE8bMo=
Subject key identifier:   62:B9:32:33:5B:C7:C0:C2:59:DB:9F:85:09:86:1F:1C:38:08:45:C3
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer:       /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial:       019369DA0A13971E394835FCCFE9F7BCF551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:01:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:57 +0000
Files and hashes:         1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: b7gMmO588lPO2ODtLVfIfzpXzW5TZikVODeTOiAl8KM=)
                          2: dJEMlwcyCgOEfG8jOHB1h2EiykU.roa (hash: et3VPssKBeLxMXw0/1H9lyFC9Yk8wJ3TW9fTdgtQkcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:0a:13:97:1e:39:48:35:fc:cf:e9:f7:bc:f5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
        Validity
            Not Before: Nov 26 19:01:57 2024 GMT
            Not After : Nov 27 19:01:57 2024 GMT
        Subject: CN=62b932335bc7c0c259db9f8509861f1c380845c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:60:34:32:f4:79:4e:1a:3b:6b:7c:2e:2c:
                    f9:27:5b:82:0a:f3:93:4a:47:f0:5b:67:93:57:72:
                    58:de:20:2f:8e:84:9a:0c:7a:77:02:0e:8e:49:91:
                    02:6e:82:a9:d0:95:d8:3d:95:a3:ff:2c:71:35:ee:
                    b1:bb:fb:7c:f2:a5:ed:5e:28:e7:eb:fd:14:f8:f8:
                    51:a7:7b:a6:3c:e0:e0:ae:ea:a8:9d:bc:b1:79:7c:
                    94:3b:6a:d9:5a:16:14:28:bc:2f:e0:7c:ea:ec:fa:
                    c7:7e:bb:d5:ba:7d:db:2b:43:c2:97:22:20:a0:c7:
                    56:fb:af:0c:76:13:5d:fd:ec:b8:0b:c2:12:8b:8f:
                    81:4e:1b:9d:14:e2:e7:35:f4:5a:84:ed:9e:6a:f5:
                    29:3e:a9:dd:ec:d3:e7:53:2e:a5:1f:e8:62:b0:57:
                    d3:c0:3e:f4:68:7a:97:c4:70:0b:3f:6e:f9:e0:87:
                    68:09:9a:91:db:e1:ad:d0:9a:98:48:db:25:7c:22:
                    57:34:53:3a:25:a8:a7:8c:8d:1b:69:13:ca:69:89:
                    1f:09:96:fd:0b:52:c1:74:76:06:e0:6e:43:f7:51:
                    de:97:f2:dd:d2:94:ba:98:7a:6a:42:92:11:9e:80:
                    c4:cf:b5:fd:2c:e2:d7:27:d7:15:4f:18:db:78:ad:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:32:33:5B:C7:C0:C2:59:DB:9F:85:09:86:1F:1C:38:08:45:C3
            X509v3 Authority Key Identifier:
                keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4e:14:8f:4c:6d:c9:93:02:c5:fe:4b:5d:a5:6d:ba:28:ff:
         37:9c:6c:c8:29:e0:87:34:bc:e9:83:b1:9b:29:ed:7c:e1:64:
         de:36:53:4c:04:b4:ec:cf:7c:c0:3a:de:38:b2:fe:ed:6c:83:
         af:0e:c2:87:44:62:c4:df:13:f3:ec:13:66:cf:2c:a2:71:8d:
         9f:ef:a9:ed:c8:65:08:77:8f:74:b9:e9:61:d1:03:06:f5:80:
         aa:0b:6f:0d:4c:6d:14:6a:62:0f:ff:6d:8e:94:5c:56:c8:5d:
         1d:ec:55:92:81:15:55:f9:4b:2c:02:d4:7e:8c:56:69:43:8e:
         31:d0:06:38:fe:da:52:5b:0f:68:1d:90:7a:55:a0:c7:47:55:
         a8:a8:c6:58:75:63:c5:33:8b:10:b8:6e:58:60:a1:76:28:9d:
         3b:dc:dd:de:80:04:29:d7:b2:93:67:03:3c:b7:d1:16:18:0b:
         43:93:a4:e8:c0:a2:85:06:72:96:36:45:9c:64:67:c8:7f:63:
         45:04:38:6d:32:7d:05:06:e0:ae:1b:63:50:35:71:f7:7e:28:
         71:86:ce:e9:f7:7d:b3:08:06:1a:ba:0d:05:ce:87:b3:20:3a:
         98:b3:bd:b6:78:b5:bc:5e:46:af:25:08:6b:b5:91:92:0e:f1:
         88:6b:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:28 2024 by rpki-client on console-fra.rpki-client.org