Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          yPinINT7PQZLELiMUUpH3JY3EexJE87xhQf6MRiu6Kw=
Subject key identifier:   EF:C1:5F:4A:72:5D:10:5B:E6:FF:DA:8B:2C:BC:E7:04:24:F6:FD:7F
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019355AD144BCA91531758932BFB676ECC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          0DCD
Signing time:             Fri 22 Nov 2024 21:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:26 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: I16ufqABttSsoN4WcCORJVkh0FoayA9xYj4NVTOVU1o=)
                          2: 9WcnktL6S9LxP9j2w2uwwOusTfY.roa (hash: 6KAvI8dsxG2Gw0PAqW3+p1ZSWwXCULUg7UzwuNY6SDU=)
                          3: LAGnr5gWKOncbshxEsvULImYbfs.roa (hash: +1AWQB/QpbTpGhHKZP+J3O7A34oi9sEnCSNE4v2z3QA=)
                          4: NwEklZa0XBXDVtQBDakF_Hb6x_o.roa (hash: izc1nnKeGv1KWp13PqwyJm9iqd50sbJq6xozpFK+kCc=)
                          5: OC54kXOm7I7tseRw5OHrOV1BJHw.roa (hash: sUSVlEMkWASI85R3VU1F/2tLZQqe7PQp+2Agz/OhLX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:14:4b:ca:91:53:17:58:93:2b:fb:67:6e:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Nov 22 21:00:26 2024 GMT
            Not After : Nov 23 21:00:26 2024 GMT
        Subject: CN=efc15f4a725d105be6ffda8b2cbce70424f6fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:48:9b:4d:b6:ea:0e:ab:36:66:37:4e:ce:
                    a1:6c:f7:88:87:48:22:a7:19:95:81:02:27:8a:1f:
                    04:56:b0:b4:ae:e9:5b:9c:d6:a9:65:a0:1e:f6:2a:
                    8f:1b:d3:c7:a2:f3:c9:c6:4f:74:1d:87:c4:49:bd:
                    0f:bf:48:40:9b:2a:01:c5:f2:6d:11:cf:73:3a:ee:
                    e6:a4:8d:c2:c1:3c:02:13:a6:91:27:34:48:ca:eb:
                    5b:8b:a8:39:84:99:d1:36:d2:c0:a0:8f:5f:ed:02:
                    7a:cb:b5:99:ba:c2:89:ef:c9:13:b4:f8:d8:2a:64:
                    d2:b2:e1:26:a3:8d:ad:16:0b:6e:27:44:39:38:08:
                    33:5f:1c:2b:7e:46:f4:0b:e6:53:0b:59:2b:1f:d2:
                    7e:1f:30:cd:a4:85:50:8f:76:dd:08:4a:9d:3b:ba:
                    66:98:72:f5:90:d1:11:ce:f6:c8:87:ee:f9:88:f3:
                    16:95:bf:c3:65:ba:fb:f9:07:b9:41:51:9b:f9:fd:
                    70:ca:68:f2:62:34:6f:52:30:60:dc:61:6c:30:e0:
                    a5:33:bc:c9:ac:4f:29:96:ce:2e:f1:ad:b7:92:d8:
                    9d:62:29:75:87:25:32:5e:d5:00:76:01:88:76:51:
                    c7:e1:70:5e:b6:0f:1b:c1:18:9f:f9:43:e8:5d:d1:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:5F:4A:72:5D:10:5B:E6:FF:DA:8B:2C:BC:E7:04:24:F6:FD:7F
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:68:e4:79:b7:89:35:07:f6:0c:fb:b3:61:67:b4:f2:ad:
         d8:17:b4:7b:2c:4b:07:af:57:a6:5e:c8:87:4e:e0:cd:1d:6d:
         56:d2:0c:84:0d:6c:d0:99:07:76:96:83:24:fe:ca:08:18:6f:
         99:fc:1e:56:9f:31:25:83:08:2d:f7:02:92:ca:55:bd:ec:7c:
         cd:5e:75:27:73:8c:7e:7a:c0:63:9c:be:1a:75:54:3c:d4:a9:
         08:6d:10:df:d1:41:0d:b0:1d:24:8d:f0:ab:40:d4:e1:a2:ad:
         54:8e:af:07:fd:16:fe:dd:42:33:fb:d5:25:69:c4:54:de:cd:
         e9:63:67:15:66:9b:6c:c8:ad:0b:69:45:c4:b1:4b:1b:3f:14:
         85:84:bf:6b:6c:f7:7e:a0:0f:25:ac:7c:5a:88:a5:77:67:26:
         e2:75:81:d2:eb:e6:a7:0a:79:35:6a:e1:28:dc:5b:61:ae:04:
         fe:a5:46:90:9f:41:57:7d:e4:ec:0c:70:ce:cc:55:d4:14:d9:
         25:b1:72:08:31:4c:82:ef:15:cb:d4:bc:e9:b0:4d:82:cb:5a:
         73:c3:fe:ac:93:07:96:bf:24:f7:71:b4:c6:6d:8a:c6:f8:43:
         3a:06:a2:f1:b6:96:bd:36:66:1e:14:cb:f8:87:13:f2:47:17:
         ba:5b:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:33 2024 by rpki-client on console-fra.rpki-client.org