Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          MYvmWEB4ahGcc5aHSfpgm/gTNL2HR6+11ylDcirVTbU=
Subject key identifier:   7F:39:B1:8B:C1:4F:D4:76:8B:F2:3D:09:8D:DF:D6:24:AD:45:EA:EE
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       0193579BA3B9DCDCF623C931BC0C0B5244E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          1175
Signing time:             Sat 23 Nov 2024 06:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:37 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: v9V0HWkVgzJ5uIZdz54AuB/WMQCME0GQS8NuRNVJQfI=)
                          2: DAMauTmzJz7QjZhuU10zBp28QQA.roa (hash: NuirW3flQuKypAUeVPhzytvXIO1qTBCqvIvGoYMcqTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:a3:b9:dc:dc:f6:23:c9:31:bc:0c:0b:52:44:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Nov 23 06:00:37 2024 GMT
            Not After : Nov 24 06:00:37 2024 GMT
        Subject: CN=7f39b18bc14fd4768bf23d098ddfd624ad45eaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:4d:49:ef:22:ed:5e:18:3d:81:ae:74:6e:
                    12:1f:62:18:92:5c:85:a3:d4:e3:a4:38:88:ca:47:
                    7f:67:3b:bc:3e:76:30:c7:8d:b9:62:69:6f:09:c2:
                    06:af:62:40:52:6d:7e:27:f5:63:ee:07:61:69:33:
                    c3:1e:50:c2:ab:ef:ab:d5:b4:41:d3:cd:fc:15:e3:
                    cb:97:ee:2d:8a:cd:e8:fe:1c:ff:f8:4a:6b:45:fd:
                    98:4b:34:d6:40:e1:69:2a:43:f6:32:c1:fe:e8:b0:
                    3d:7a:33:01:42:3b:9a:b6:fa:db:2d:59:2a:77:a0:
                    93:df:68:ae:8b:3f:8b:98:1a:f9:dd:f0:bf:27:85:
                    b3:70:08:e3:2b:37:fe:6d:d7:c1:91:f2:25:0c:b0:
                    9c:62:2a:71:2d:56:aa:67:ab:13:54:08:64:ca:2a:
                    88:43:01:b0:36:7f:b7:34:d6:7c:7b:c6:8e:cb:fb:
                    a1:bf:83:4f:10:68:f5:b8:4b:e1:aa:f0:06:07:d6:
                    38:ae:fb:c7:a2:7e:b6:b8:8d:df:77:7f:2d:42:63:
                    86:59:6d:d6:61:f3:c8:ad:1b:bb:ff:6e:e8:15:7a:
                    6b:05:2d:0d:6c:97:6c:9e:dc:1d:49:71:69:bd:49:
                    20:6d:e9:11:82:dd:0f:a1:d2:8f:34:b5:29:cc:42:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:B1:8B:C1:4F:D4:76:8B:F2:3D:09:8D:DF:D6:24:AD:45:EA:EE
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:1c:4b:92:df:59:3f:96:5a:5a:97:e5:bb:58:b8:ae:55:
         1f:f5:9f:26:3d:71:e9:72:3a:3e:e0:27:91:6b:d5:50:18:54:
         a5:18:65:0f:d5:77:d9:ab:89:03:5b:46:df:c5:04:cc:8e:c2:
         ce:c7:ae:87:d0:0e:c2:70:f6:be:bb:f3:50:c6:e2:a9:ad:0a:
         1f:72:c0:d1:9b:67:d0:35:30:26:63:01:97:18:89:70:fa:2f:
         c1:9c:e3:96:01:5d:25:6f:98:e2:b6:f8:6d:56:a6:84:7c:42:
         31:c9:63:58:95:6a:6a:ed:5a:dd:7f:ce:a6:f9:21:7d:6b:8b:
         4c:6a:e7:fa:9c:30:d8:82:dc:07:91:e3:ec:6a:16:20:56:a9:
         68:27:e7:26:cf:68:4b:0f:07:42:76:7c:1d:7f:7c:21:69:26:
         c9:6d:04:1a:f8:b1:18:52:ae:d3:7c:87:e3:ff:25:5d:c0:9e:
         2a:6f:47:2b:57:bf:74:b5:df:ae:a4:b0:bd:9b:0a:d5:d6:a6:
         96:a3:75:c7:ba:c8:13:b9:04:ca:f0:37:61:f6:2c:5e:a5:63:
         f8:bc:0a:57:06:67:92:e5:bf:e8:e9:9f:a6:a6:1e:98:ad:34:
         c4:1c:f0:ba:d3:f3:9c:5a:a1:39:fd:6f:e5:2d:c4:1c:51:39:
         d5:0d:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:09 2024 by rpki-client on console-fra.rpki-client.org