Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          moERFa6UcCSp2GizLEQBIycI9QhDrtgXxhHvaHYRAxI=
Subject key identifier:   36:31:F9:AE:B0:D7:0A:1E:F1:0F:58:7C:19:DD:89:E0:7A:A5:77:AE
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       0193579BE9E3D28ECCB83C15089D820E8B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          0EB6
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: m2Ja/FhIoQHtdpmBIhVA0xwvKjBBTKsycv0qKjPXroY=)
                          2: RHGT4hJsJ6zwe4vHuNUNVhnuMWc.roa (hash: cT1b9kG//2M/nDW9+YvUop8Hz0FR1SOV+EJf3AyZc/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e9:e3:d2:8e:cc:b8:3c:15:08:9d:82:0e:8b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=3631f9aeb0d70a1ef10f587c19dd89e07aa577ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:51:04:50:41:65:f9:ef:bc:d9:ef:93:f7:
                    51:d0:ac:24:1d:57:3a:85:ff:b4:96:e7:5b:35:8a:
                    1d:31:21:fe:63:f2:d2:8a:7d:ca:da:fb:d6:19:9c:
                    c9:84:cc:d4:b5:bb:19:21:85:d4:50:37:20:03:10:
                    2f:f6:57:13:79:3d:50:16:da:5f:1e:5b:7d:85:12:
                    75:02:11:6b:e1:94:d8:21:a2:77:09:62:ab:8b:33:
                    be:e6:f3:cf:aa:b2:90:6d:41:75:12:20:d6:26:9a:
                    0a:f1:24:20:71:21:bf:e5:43:0d:ab:f4:44:9a:7c:
                    10:ab:e3:b4:23:e7:c5:c9:ba:61:ef:f6:ae:40:f7:
                    70:9b:60:09:41:07:b1:ee:c2:b5:9c:82:bc:06:60:
                    c7:d5:50:1b:66:b4:7c:89:2c:57:69:ae:26:d2:53:
                    c9:39:d1:7a:40:eb:46:75:74:e0:28:39:27:d0:32:
                    b4:d3:22:18:48:c2:30:0d:83:df:04:cd:d0:57:10:
                    24:f9:28:f2:5d:53:23:82:ff:3f:1d:bf:d8:83:6a:
                    43:55:c4:8c:59:4c:55:61:0e:c4:1e:39:d4:bf:18:
                    20:d2:a4:9c:a2:d2:1c:b8:d3:d6:a0:ed:2b:bb:24:
                    08:b4:e3:da:41:48:09:a1:d0:d8:44:97:43:e3:e3:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:F9:AE:B0:D7:0A:1E:F1:0F:58:7C:19:DD:89:E0:7A:A5:77:AE
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:de:d5:ec:3e:86:fe:e5:1b:64:43:58:32:71:93:b5:2f:e2:
         ce:53:a3:cd:40:b5:bd:2c:99:6b:8c:48:35:64:cb:59:99:26:
         22:81:2e:29:c7:5a:d3:3f:01:05:c0:89:9f:21:6a:fe:21:23:
         14:76:29:9e:d9:8c:9b:88:8c:d7:fb:de:3a:98:26:c0:25:c6:
         ef:8e:03:74:70:17:ee:8d:62:ca:4c:2e:c2:9b:f9:5d:56:30:
         6b:81:08:43:0a:54:ff:6e:b4:fb:90:05:10:ff:5a:1e:f4:5d:
         cb:e0:de:94:18:30:57:be:79:45:ec:ea:16:b0:d3:78:31:37:
         51:ce:32:f0:99:ab:ce:55:18:91:35:97:a8:10:cf:54:5f:db:
         f5:dc:76:65:fb:61:82:b0:b1:c1:8c:eb:dc:ef:d6:7a:51:b1:
         4e:99:b9:cd:24:c0:bd:a4:dc:63:26:8b:83:a9:d0:f7:6a:c7:
         ae:cd:ac:c2:dd:6c:53:99:ea:54:79:86:5f:a5:42:38:0c:ab:
         fa:56:31:95:72:b4:da:9f:f7:6a:39:ea:e4:88:c9:f5:1f:b7:
         fb:c8:cf:61:c8:64:17:6c:56:b4:2a:52:ee:e8:5a:a2:38:70:
         45:22:43:e3:0f:c9:e7:5c:08:f3:57:c4:ed:1e:72:20:16:7c:
         b2:95:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:48 2024 by rpki-client on console-fra.rpki-client.org