Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          lwx3Erwig5a1dVmcJH0hQJ1Chg1WKRS1/i3kQH6+sAE=
Subject key identifier:   F7:39:7C:17:25:79:47:ED:1C:E0:0C:BE:8E:BE:BC:01:EE:46:71:CF
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       019352ACB9E92EE6A9B5939BB6B57E50A64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          139D
Signing time:             Fri 22 Nov 2024 07:01:11 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:11 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:11 +0000
Files and hashes:         1: 0QtZZ3q___k2VAGd2mjbVqSAzj0.roa (hash: RluxHyo/n3rdUeJJ24UIhirM6sWLcxulRGZH1XlHeh4=)
                          2: 39KjStmC6WuX48HVAMyh2tRprDw.roa (hash: 4jEluOmbgKgO8r32mgcvYz2hqhO8z3BtQ7Z/bnQGhVw=)
                          3: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: rDv5C1rgnT0jDm/Se+EvPYwL1G/muMppHHc6zKexbFs=)
                          4: CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa (hash: CxtCeJVWGz1y7sXMjGjTFZSPWBJF0JBmmRGZsh/CaBY=)
                          5: DK6_dWb6ffGTlpgyP63vrlGmXms.roa (hash: LEoKFFsQD3XnhYahnkDkz9brhPgr1e3rCDO34aDADTI=)
                          6: DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa (hash: Y1euoqRmoOD5HkZ1WfjTdlz9g8GNe/DpgO8EsQVD9Xk=)
                          7: EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa (hash: 84HBOgJp4gCIXPl5CNQr/w9Rn5c9jxQZhYB7PhHhUls=)
                          8: FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa (hash: ZVUh82rLI/XdllSvRNpYnu5TNIvuYWoSeUyg+sNnd+A=)
                          9: JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa (hash: Gdcve6s9uGlNpOs4lSC6BQyRoeP9YHR7nUgcEveKH14=)
                          10: MpUh9G-o95wrOcDqC94wpEk41_c.roa (hash: 0DdOxeBOpwjIZ0Kw2at0TCdXY656Tyz5OZmnQ3ymBF0=)
                          11: Zbo58G9mKmdMCdnY0Gt0h8oH4WQ.roa (hash: 80Ritc9Ka/JpikzYP/h2a9At4CQZFsz4lKCIezlse4I=)
                          12: _FMDz97zmP9d1JHVKIiKjgP6Uqk.roa (hash: hucwfh1Y1KRd61JRraABpWkGTogS7KMVU2I9KLUZPuQ=)
                          13: gtLYwVAPNPe8yArWSoJ0z-AOZ3w.roa (hash: n7FSMVGluUYq1CQM0zBz4t//1Q18BTqOkasxj8KTl5k=)
                          14: srmmTgMLRm0CPG-BIhv3UaX0v5o.roa (hash: 2EBtvsAQd40gI/7hx9Lx0d+6jJaV2g8ODlw/2OMbsCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:b9:e9:2e:e6:a9:b5:93:9b:b6:b5:7e:50:a6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Nov 22 07:01:11 2024 GMT
            Not After : Nov 23 07:01:11 2024 GMT
        Subject: CN=f7397c17257947ed1ce00cbe8ebebc01ee4671cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:19:5a:12:ab:99:07:dc:73:9f:fb:66:e5:
                    12:0b:a2:f5:ed:df:34:76:34:88:e4:cf:b6:cc:c9:
                    21:6f:a9:a5:dc:5a:61:0f:72:53:2e:5b:d4:8a:a6:
                    fb:18:9b:e2:8b:cb:8e:2c:4a:0d:af:cf:2a:19:3a:
                    28:2f:51:ac:63:7d:c9:fc:fe:c3:8d:1a:a1:b9:72:
                    af:6d:c0:40:62:3d:65:90:d0:e5:7c:d0:0f:a9:8e:
                    35:ed:b1:c5:76:db:75:ca:94:d3:4c:73:32:62:95:
                    53:f3:eb:37:5f:63:c2:c2:67:fa:4b:ba:26:af:12:
                    ff:2c:a1:8d:48:62:f2:41:61:96:2d:3f:aa:04:fb:
                    09:c8:d7:cd:8a:44:18:5e:16:5f:ab:19:2b:d1:71:
                    15:90:0b:fe:25:7a:6f:a4:c8:7c:a3:f5:0a:83:34:
                    70:43:e8:1a:0d:a9:18:d0:87:a1:70:ba:62:2a:c8:
                    9b:1e:d4:fd:05:86:93:1e:d2:1f:dc:5c:87:01:d8:
                    38:4b:60:e7:a0:6d:20:db:01:4c:a0:14:2e:64:3b:
                    c5:22:0a:e1:eb:df:6b:40:e4:97:e2:0f:77:0b:62:
                    f5:35:55:75:c1:0d:fc:c8:aa:42:f9:f3:41:9b:03:
                    74:b1:9d:f8:7a:60:da:6f:f1:ce:07:c5:c5:b3:79:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:7C:17:25:79:47:ED:1C:E0:0C:BE:8E:BE:BC:01:EE:46:71:CF
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:9b:35:72:d6:ce:95:65:3e:88:70:75:da:98:52:2e:ad:
         52:1b:55:30:c1:04:31:64:c6:19:ea:73:e3:d8:c1:65:49:49:
         f6:80:f3:4d:d0:96:2c:7b:fc:c3:30:57:54:ff:86:65:0f:59:
         f0:5c:9b:fa:13:c1:94:df:c3:8d:39:1c:c8:1b:60:b0:d1:dc:
         86:cc:f7:58:49:1e:55:9d:94:a6:1e:b5:fe:62:c2:3f:a6:35:
         67:84:e4:89:00:70:49:2a:3d:dd:30:41:3f:18:44:25:ac:51:
         c6:d0:f5:1e:5c:e2:a1:7a:cf:fd:b0:e9:ef:48:dc:bf:e8:71:
         f0:99:3a:c0:9b:86:e5:34:59:82:fd:0a:7c:ea:fb:59:78:57:
         7b:38:cc:52:be:33:be:6a:41:c9:99:0e:aa:3f:99:95:d3:08:
         5a:bc:ff:9c:4f:c2:5e:d5:2b:e3:dd:0f:27:b4:a9:6a:86:65:
         2f:65:27:52:71:58:8b:f8:cb:08:b3:e1:ec:b6:64:d2:12:fe:
         13:28:c1:10:b6:dd:74:bd:a5:43:b7:f7:5d:71:ca:65:6e:bd:
         81:11:13:64:63:1a:53:61:9e:1f:2a:f7:1d:95:6c:3c:23:13:
         d4:ac:11:8a:6b:26:9c:91:75:34:ae:18:f3:30:27:e4:0c:d9:
         77:a3:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:19:13 2024 by rpki-client on console-fra.rpki-client.org