Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File:                     7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier:          a9gT4Wrs03g+6057ZAfEW24nWrGnxPbH/ymF8xQDTC8=
Subject key identifier:   79:C9:F6:3E:76:90:5C:86:4D:0D:E8:55:D3:66:E1:A2:35:AE:67:9E
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer:       /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial:       018F5325C44CB855590726069E66CDBD650D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number:          0E0F
Signing time:             Tue 07 May 2024 13:02:15 +0000
Manifest this update:     Tue 07 May 2024 13:02:15 +0000
Manifest next update:     Wed 08 May 2024 13:02:15 +0000
Files and hashes:         1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: WsMvkLgYAsdNnT7RcaBGVJWw+ctcRbY8SEGm8Q3F1Pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:c4:4c:b8:55:59:07:26:06:9e:66:cd:bd:65:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
        Validity
            Not Before: May  7 13:02:15 2024 GMT
            Not After : May  8 13:02:15 2024 GMT
        Subject: CN=79c9f63e76905c864d0de855d366e1a235ae679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:d9:82:7c:3c:34:c0:f7:c8:eb:a8:06:8e:
                    3b:51:42:84:4b:31:94:59:f1:9f:76:bc:83:32:c8:
                    73:a5:07:f1:f2:0d:93:96:b9:9c:20:ce:79:86:42:
                    87:ac:ff:f7:61:1c:d1:0e:d2:8d:c3:21:4e:cb:7a:
                    40:ee:71:bd:a0:79:1f:c2:f8:0d:cc:b0:d8:c5:14:
                    2b:bc:71:ad:fd:2a:69:61:65:27:60:fe:64:af:b2:
                    43:01:b7:02:35:ed:14:e7:e3:69:ad:e5:3d:5d:4e:
                    14:ff:17:41:11:49:64:57:ff:60:e9:53:f0:c4:a1:
                    84:d6:a7:63:cf:54:85:48:7e:6a:cf:32:e6:fb:41:
                    9d:22:3d:b9:83:62:34:9f:50:03:01:2d:a9:03:10:
                    84:40:90:90:ab:c1:23:7a:48:62:02:63:62:7f:37:
                    7f:d7:aa:9d:54:a3:38:bc:02:1a:f8:09:ee:19:be:
                    eb:d7:cc:99:0a:6e:ee:1c:92:03:58:ef:da:e8:5c:
                    8a:c8:d5:31:ee:25:03:56:00:18:f6:f2:56:62:1f:
                    b6:a3:b0:5c:0c:f0:49:58:25:4c:25:6f:76:27:d7:
                    27:41:e1:8f:b8:12:fb:cc:04:49:32:d0:16:b1:ba:
                    9e:9b:bb:f9:29:37:ed:f9:7f:b2:ce:7b:bc:69:46:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:F6:3E:76:90:5C:86:4D:0D:E8:55:D3:66:E1:A2:35:AE:67:9E
            X509v3 Authority Key Identifier:
                keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:4d:c7:f7:c8:8a:f6:2b:06:bc:b8:dd:f2:1e:be:61:38:
         5a:77:78:c5:11:23:d6:66:9a:90:8e:07:70:9c:8e:98:2e:f0:
         b0:7c:c9:6b:48:33:86:ef:28:7b:e0:a4:a3:01:9c:c6:5b:67:
         37:65:df:21:b6:82:20:5b:77:b2:20:32:b8:80:ce:2d:a3:be:
         b4:36:3c:dc:be:c7:5a:10:ef:b8:b8:d8:7a:8b:55:b8:ad:44:
         71:3f:5f:e7:13:af:5c:3c:c1:87:e6:70:10:52:7c:dc:58:ad:
         ee:13:72:c3:ff:cd:fb:d2:04:c0:99:5b:2b:26:76:f7:da:44:
         46:2e:3a:37:e6:7f:7a:fa:e6:79:c9:49:20:2f:10:65:b9:3f:
         a7:99:1f:62:71:84:2a:84:85:1f:b4:3d:5a:9b:f1:45:5f:cd:
         24:ae:86:29:7e:e6:f9:87:6f:a3:80:89:5f:d7:fe:15:c6:80:
         de:f6:2f:46:e5:90:2d:d3:5c:fc:58:a7:a9:44:7e:d5:e6:cd:
         1e:df:f3:73:fb:f2:c5:d9:6c:16:27:ae:f5:5b:f1:cb:83:a9:
         38:9b:7b:b0:80:11:08:83:d2:77:02:81:6d:39:f1:da:6b:c3:
         ab:36:7a:c8:02:82:dd:81:19:7d:6b:4c:6b:2d:22:e2:24:cf:
         35:d9:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:53:17 2024 by rpki-client on console-fra.rpki-client.org