Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File:                     e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier:          +nS1EglT388TJUdK0p7qhO8NKRKSsQsLRYGe8MLRfqc=
Subject key identifier:   44:40:FE:6E:11:6C:64:7D:B3:A8:D6:25:FE:4A:E2:99:E6:DB:DB:59
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       0193579B5DC9872D0335D44112654CE72B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number:          073E
Signing time:             Sat 23 Nov 2024 06:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:20 +0000
Files and hashes:         1: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: XwxghZO4BTtkTip4LXW33RDit3IsjSGbqKuzn2oWbys=)
                          2: z29pt1kDFyAlICsuOlFs4zDuPBA.roa (hash: TjHYT+lOCubbFey199kgafvkx5fXX4H+9dUbONlqIfo=)
                          3: z6w_3DgzWpjjmLt8fvSl-LOdmaE.roa (hash: 1xytcaLbQBXTCcN9PKAkVQIHJNuThzqkRw8lmWKgecU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:5d:c9:87:2d:03:35:d4:41:12:65:4c:e7:2b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Nov 23 06:00:20 2024 GMT
            Not After : Nov 24 06:00:20 2024 GMT
        Subject: CN=4440fe6e116c647db3a8d625fe4ae299e6dbdb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:f1:39:57:2a:50:ec:c6:e8:08:69:65:85:
                    c8:22:f9:bd:61:7f:14:e4:4a:7b:6b:a5:36:21:67:
                    85:31:34:18:b4:13:c8:19:60:f4:d6:c5:4b:bf:bd:
                    22:8d:f3:99:c1:5b:67:62:0a:ca:5a:e5:a5:52:ac:
                    e0:39:96:07:88:c6:61:7c:73:f6:6b:db:7a:56:70:
                    1d:b2:6a:96:23:4d:42:24:18:21:a7:a5:0d:6c:f1:
                    79:7e:96:d9:2d:f3:32:8e:30:10:fa:d0:8e:0c:8f:
                    89:5f:1c:9a:81:13:8a:5e:6c:31:62:aa:c6:05:94:
                    03:21:e2:7c:ad:be:88:16:e2:5a:dc:f5:aa:a2:ec:
                    fe:a2:16:6d:2c:25:84:3a:ec:49:70:6a:fa:fe:b2:
                    4c:bb:8c:c0:3e:d1:dc:fd:c5:c1:00:48:cf:57:fb:
                    5c:a3:71:12:60:9c:7a:47:27:26:d6:b6:53:a8:01:
                    c0:4b:b8:41:42:0e:32:a5:d6:18:90:29:1d:0a:fb:
                    8e:2c:9a:95:0c:72:60:52:d6:de:0e:5c:99:63:eb:
                    bf:25:ce:05:b3:81:27:bb:6f:5d:da:9e:59:01:59:
                    67:78:8a:1d:52:e5:7d:19:82:ca:94:66:e6:32:4c:
                    36:fa:6b:5c:f9:f2:ad:b0:65:01:0a:e2:36:ef:e6:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:FE:6E:11:6C:64:7D:B3:A8:D6:25:FE:4A:E2:99:E6:DB:DB:59
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:31:dc:54:f7:19:b3:0a:bb:9a:af:32:1a:db:33:b4:36:6f:
         b4:ae:d8:5a:4e:9f:35:c7:6a:07:97:e0:ec:5a:f2:ab:4e:35:
         da:4b:bc:5c:bc:18:ac:74:97:bb:b4:6b:68:7c:e1:32:2b:9d:
         1d:17:bb:8f:e0:2d:93:11:12:26:9b:86:b0:32:30:d8:82:ff:
         13:f7:9d:f4:a2:c5:8c:55:e7:9b:0b:f7:d8:89:3c:f1:25:b5:
         02:d3:53:e4:a4:d5:ad:10:9b:04:a9:75:1e:d5:4a:71:aa:11:
         8b:4e:b2:40:b2:e7:ef:e5:42:29:36:48:4d:48:59:d5:7e:a9:
         a3:ea:c7:ce:43:73:89:5f:2c:52:84:cf:b4:31:6d:f7:03:ec:
         d5:fb:e7:6a:83:4c:3e:55:4c:7c:3c:e2:61:ac:36:e2:4f:a1:
         dd:ba:4b:e0:7a:b3:24:78:a9:c5:68:d4:29:03:ca:6c:61:f1:
         be:e6:70:78:3d:9f:be:b7:31:ed:8c:81:8a:41:a4:df:91:20:
         98:c1:0b:09:0b:68:2b:88:9e:8f:be:0d:90:77:4b:a3:a7:14:
         94:cb:da:b8:6b:3e:05:bf:34:77:8d:27:9c:45:8f:2d:92:fe:
         7c:1f:8f:64:4a:74:7c:fb:68:d3:54:ae:d7:36:bb:25:ff:7d:
         c4:b7:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:05 2024 by rpki-client on console-fra.rpki-client.org