Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File:                     7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier:          aBScZ1mR0A4D5M/b23J6zLPGZuJ8FrHQe1BKFU9LlEo=
Subject key identifier:   40:70:5F:54:E9:51:A4:8A:B2:16:FC:C0:74:FF:30:69:4F:42:41:2E
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer:       /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial:       01935207B3AF72C1610EE5B1D82546FCD909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 04:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:56 +0000
Files and hashes:         1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: gg+C3wpL0mh0d6SOFJfEONumIWOZkdbkFyAdM9Zlde4=)
                          2: Z8D0OHugo_hYfN6Eujt_qVpSlTw.roa (hash: F8ndM5OlxqrE9bcME+Nwn2Hb8KK07/d5c+y4x5vuFXs=)
                          3: mFxi4XGyXNbtb78HZ5XVptPDsD0.roa (hash: FtIuuMAL5UzDiJh1EjHFQZYP35mqWs2Fc0Z0NesEl54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:b3:af:72:c1:61:0e:e5:b1:d8:25:46:fc:d9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
        Validity
            Not Before: Nov 22 04:00:56 2024 GMT
            Not After : Nov 23 04:00:56 2024 GMT
        Subject: CN=40705f54e951a48ab216fcc074ff30694f42412e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:b2:63:8e:c6:05:b9:df:d0:7e:a6:f3:b0:
                    07:f6:59:b5:d6:6f:35:02:bf:40:63:6c:c6:54:72:
                    74:39:7e:c4:58:b9:7e:a5:4b:8e:8f:41:60:ae:2e:
                    25:ed:cf:5c:46:8e:70:6b:94:d3:ed:04:92:41:06:
                    f3:89:a2:43:83:f9:15:dd:81:83:3b:79:b1:b7:da:
                    9b:18:4a:60:46:69:6c:c5:ff:b5:6f:dc:36:81:01:
                    7f:cf:ba:c2:39:65:72:23:78:d9:7f:f1:63:ce:89:
                    9d:0b:f0:15:58:76:da:78:f4:42:70:76:84:5b:5a:
                    56:29:a1:38:09:a6:4d:94:c7:94:97:8f:8e:2d:ca:
                    97:e9:0b:95:48:b0:64:62:b7:af:02:92:cd:cc:17:
                    bb:16:25:9e:c4:16:db:df:91:8a:da:e8:ff:e7:ae:
                    ed:6e:fc:67:b6:8f:8e:5c:78:20:99:34:4d:b8:3c:
                    59:8e:c6:92:66:94:c7:9d:57:33:8b:8e:bd:38:f2:
                    15:8f:cc:e8:d4:e4:e4:9f:6b:50:64:92:da:4e:b5:
                    e5:85:8b:d2:59:33:74:96:9d:07:97:c7:af:c5:ac:
                    bc:60:59:c6:ff:e3:e3:9f:23:e8:de:e1:f4:4a:e9:
                    0e:f4:16:32:72:e7:2d:d0:18:01:74:91:5f:ae:d3:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:5F:54:E9:51:A4:8A:B2:16:FC:C0:74:FF:30:69:4F:42:41:2E
            X509v3 Authority Key Identifier:
                keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:59:b8:4a:ee:21:1e:6e:15:07:6a:a5:34:02:f0:29:ef:
         7e:90:0e:c6:ba:5a:87:6b:3a:89:8d:91:1b:ee:f2:1e:22:52:
         55:6c:de:a3:a8:30:32:b5:ba:5e:bf:dd:21:b2:4c:f2:a0:4b:
         d0:70:7d:0c:10:be:4a:f1:03:4c:5e:ba:28:8f:1d:b5:75:f8:
         5d:97:49:dc:d6:fd:6e:db:af:cc:4e:38:7e:13:1a:05:60:26:
         75:a7:18:b6:f2:f6:30:1a:1f:21:68:31:c9:02:84:ef:70:98:
         f0:a8:06:ea:11:c4:81:26:7a:10:38:38:b0:03:8b:ba:50:2a:
         b2:fd:57:18:73:06:f7:1f:26:eb:d0:04:14:f4:3a:39:f3:9b:
         23:96:56:43:85:a5:82:e8:0c:3f:50:d6:54:1c:8c:76:bc:06:
         f8:36:8c:97:45:f7:48:4a:81:d2:fc:80:26:61:09:48:04:75:
         8e:9f:03:3c:7e:10:89:81:37:4e:c4:ae:7a:12:68:d5:27:38:
         1f:e6:ea:40:eb:92:a3:16:b8:5a:4f:39:e1:1b:17:2d:19:20:
         13:3e:b5:dc:1a:ef:1c:dd:dc:dc:a7:b6:ef:f5:80:55:bd:5f:
         2c:de:f7:d9:0e:b2:3d:a4:93:ea:8a:b0:7e:43:19:6f:a7:80:
         44:a2:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:34 2024 by rpki-client on console-fra.rpki-client.org