Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
File:                     7zgTezuGluY2P3_NDdaU4eL7sEI.mft (raw, json)
Hash identifier:          YbWKshMzS0bB6EqCctJCOcnQCtd7vG71wn8p+rfhwns=
Subject key identifier:   42:8A:66:88:2C:91:F1:A1:6F:4A:96:5E:AC:37:37:EC:63:87:C7:97
Authority key identifier: EF:38:13:7B:3B:86:96:E6:36:3F:7F:CD:0D:D6:94:E1:E2:FB:B0:42
Certificate issuer:       /CN=ef38137b3b8696e6363f7fcd0dd694e1e2fbb042
Certificate serial:       018F343E6A1AA4F8A24A6010790638091805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zgTezuGluY2P3_NDdaU4eL7sEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
Manifest number:          0E99
Signing time:             Wed 01 May 2024 13:00:56 +0000
Manifest this update:     Wed 01 May 2024 13:00:56 +0000
Manifest next update:     Thu 02 May 2024 13:00:56 +0000
Files and hashes:         1: 7zgTezuGluY2P3_NDdaU4eL7sEI.crl (hash: khA+W/U+0V0XHDxfJi19cH7Fxb1nmYeRoflZRT7uXA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zgTezuGluY2P3_NDdaU4eL7sEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3e:6a:1a:a4:f8:a2:4a:60:10:79:06:38:09:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef38137b3b8696e6363f7fcd0dd694e1e2fbb042
        Validity
            Not Before: May  1 13:00:56 2024 GMT
            Not After : May  2 13:00:56 2024 GMT
        Subject: CN=428a66882c91f1a16f4a965eac3737ec6387c797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:85:fd:65:fc:d5:94:a4:9f:91:db:26:2d:
                    fb:96:fc:0d:43:6c:db:cc:f9:df:56:93:44:05:84:
                    94:e7:77:0a:05:6d:b3:70:1e:63:31:39:2a:13:34:
                    0d:d4:3b:55:d4:e3:44:69:5e:ae:cd:66:0d:49:89:
                    a8:f4:16:52:0c:93:8e:3c:88:11:8b:e6:e2:83:63:
                    d0:f4:d3:59:1a:6e:a8:ea:2f:28:ec:30:9b:f9:03:
                    c5:81:18:db:de:59:43:b4:43:05:c4:29:97:c7:2e:
                    ea:01:12:08:ff:ee:2f:1b:67:54:de:3f:e6:7a:3e:
                    0b:9a:ab:e3:0e:19:97:90:67:b9:46:15:f2:86:08:
                    fa:b5:3a:7b:f2:56:98:96:48:30:c0:e9:12:60:d1:
                    ed:29:46:c4:f3:7b:fa:4b:c3:3b:aa:fc:60:56:4c:
                    11:21:57:17:bd:dc:14:fd:f4:1f:8c:8f:56:05:3b:
                    11:e2:79:99:1e:d1:e1:c6:58:38:a7:5d:f6:5e:11:
                    f5:df:24:b5:a9:81:6a:30:0c:46:1d:a0:2c:80:c7:
                    f7:8d:f1:55:5e:de:d1:2a:5b:a6:ba:30:53:e1:ec:
                    3c:c8:50:ce:a2:82:04:fc:f6:7c:a5:e3:9f:b5:ad:
                    c6:eb:26:10:d2:fe:0d:24:c7:89:7c:89:f9:f0:76:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8A:66:88:2C:91:F1:A1:6F:4A:96:5E:AC:37:37:EC:63:87:C7:97
            X509v3 Authority Key Identifier:
                keyid:EF:38:13:7B:3B:86:96:E6:36:3F:7F:CD:0D:D6:94:E1:E2:FB:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zgTezuGluY2P3_NDdaU4eL7sEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:51:2b:49:cd:9b:28:c9:7a:11:31:7f:a2:07:3b:31:81:
         7c:81:24:0e:98:07:d7:16:1e:0d:bf:65:01:b5:35:0f:17:6d:
         48:d2:25:2a:e1:cf:59:4c:b4:12:82:53:53:23:3b:c8:57:a0:
         54:cc:8e:32:af:42:29:c8:43:a9:d8:ab:f6:70:75:ff:d7:74:
         a3:11:4a:8e:b3:ab:a7:f6:1a:0f:ed:04:f6:13:f4:f2:10:b5:
         5a:9b:99:99:d1:4d:08:eb:f9:7e:d9:27:3d:cc:4d:d8:df:86:
         28:53:71:fa:5a:89:14:a0:f3:40:f6:62:f8:85:41:87:d5:32:
         ca:66:08:1b:bb:c7:9b:36:9b:35:81:ac:a6:d4:fe:7a:65:20:
         91:ae:96:0f:3d:c5:15:ea:53:41:a0:35:ba:71:9b:a4:2b:2f:
         f9:43:f1:77:8a:04:84:8e:99:ed:22:9b:aa:20:3a:a5:5d:02:
         20:9e:7c:39:93:79:49:77:45:f4:43:98:f0:36:67:22:ad:bc:
         87:87:12:60:38:1e:be:db:b8:65:34:26:eb:fe:e1:ac:5e:e6:
         4a:f0:ed:94:42:1f:99:06:ed:e0:fc:8f:e2:63:a6:92:71:45:
         de:f1:a6:a2:59:2f:11:96:d7:7f:2a:cb:6d:4f:e2:33:6a:c1:
         74:18:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:16:54 2024 by rpki-client on console-fra.rpki-client.org