Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File:                     7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier:          X3InRO467arvQBAiuQPu3PAb/mPkPQMyH96dLnz1sQw=
Subject key identifier:   E4:3C:93:BC:55:BD:E3:E7:B1:EB:97:54:CB:54:BA:63:F2:18:0A:2A
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer:       /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial:       018F40B1607F83119CE0964D4418E13273FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number:          0E9D
Signing time:             Fri 03 May 2024 23:01:57 +0000
Manifest this update:     Fri 03 May 2024 23:01:57 +0000
Manifest next update:     Sat 04 May 2024 23:01:57 +0000
Files and hashes:         1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: HwauM4sv1WE1ihiyKzvaiIQI+fvSraFduSIuibsJi5I=)
                          2: RUchl6RJ-QP8M_bpG2X71JadwEs.roa (hash: D0oeXmYRGX4rGGFs7jME4gZ5roQHPt9hUvWdIvPcVs4=)
                          3: tBoZ9FLRyW5vW6K1ObtwxHtR9QA.roa (hash: TPyD1cqaiW+DEXomwbUoIGzWb7Q474kP7dJiDcMv7mQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b1:60:7f:83:11:9c:e0:96:4d:44:18:e1:32:73:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
        Validity
            Not Before: May  3 23:01:57 2024 GMT
            Not After : May  4 23:01:57 2024 GMT
        Subject: CN=e43c93bc55bde3e7b1eb9754cb54ba63f2180a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:a4:02:04:1b:1c:60:99:e6:a2:c7:70:e3:
                    b1:47:89:80:8e:bc:a1:48:e7:66:fc:29:41:d8:f6:
                    5b:4a:f0:2a:7e:a2:ed:c3:30:49:be:2e:3f:f2:f3:
                    63:8b:68:cb:18:ad:ff:f4:2d:84:f4:d4:1e:80:10:
                    80:2b:94:87:fa:6e:8e:07:c0:cd:db:9a:14:21:da:
                    4d:78:0c:33:eb:a8:79:53:79:65:4e:64:7b:b9:00:
                    06:85:c8:4c:e2:46:8a:05:83:4b:a6:d0:86:15:49:
                    ed:11:e1:14:36:9c:7d:56:80:89:fa:e0:a0:9c:ef:
                    c6:c1:fa:6f:ea:eb:d3:4c:9e:fe:1d:ab:58:47:b3:
                    d0:d7:6a:ba:e0:1d:e4:b0:16:dc:a3:61:45:82:26:
                    d5:98:0c:f7:36:19:e9:35:4c:37:91:e7:9c:51:e5:
                    9c:4a:cc:ad:30:bd:a3:73:78:ad:9e:8b:f7:f7:e7:
                    ce:8a:3d:4f:77:61:bb:f6:9c:6d:9d:f1:fb:fe:f0:
                    b9:c3:29:85:d3:9e:58:75:a3:8e:ad:ef:0c:8b:14:
                    0a:80:a2:ed:85:b5:a4:e1:50:ca:26:64:0c:99:34:
                    c9:36:85:01:b1:b7:6c:f8:0e:d3:b3:00:07:b9:3e:
                    77:a4:f1:8d:bb:60:4d:41:4e:08:6d:61:d9:ca:1c:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:93:BC:55:BD:E3:E7:B1:EB:97:54:CB:54:BA:63:F2:18:0A:2A
            X509v3 Authority Key Identifier:
                keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:78:d5:8f:6d:69:ed:84:a4:b6:c1:ed:ca:38:99:a7:5a:6b:
         fc:a3:e0:a2:92:7c:8c:2b:4e:4d:c3:5a:11:23:ae:3a:2c:17:
         1d:03:de:0a:ae:6c:ff:66:2d:49:5f:22:64:7d:67:1e:c4:fe:
         32:f6:62:cf:53:fe:e0:cd:89:4b:7b:7d:ab:a8:ca:88:8a:1b:
         1c:40:25:d4:0e:63:53:5d:cc:6e:37:18:8a:f4:5b:48:b3:83:
         b5:e8:f2:ca:b1:d4:a1:1b:44:34:84:e1:03:af:9e:ce:40:65:
         51:2e:41:9f:8f:e2:64:62:99:f2:e0:cd:41:81:0d:b1:da:ec:
         6b:ed:c8:67:fa:16:f1:3e:17:59:5d:bc:ca:d9:a7:e8:c1:a9:
         9f:30:ce:11:19:29:91:1f:50:a1:61:8f:a6:53:46:01:2f:e7:
         84:be:96:7f:be:af:f3:39:35:ae:8e:cd:06:dc:41:c9:62:98:
         48:ff:b9:7d:e6:cf:7b:be:7e:a0:33:bc:58:5d:25:14:f5:0d:
         53:f2:ab:59:ee:f5:33:d0:be:06:b7:4b:0f:0e:da:fa:a3:4b:
         3e:f4:fd:d6:75:2d:a6:be:53:80:e7:c2:4e:9e:f5:0a:19:50:
         78:53:3b:31:37:5f:96:24:ec:05:8a:65:18:01:c4:40:bd:d9:
         b4:d7:21:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AsWB/gxGc4JZNRBjhMnP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjQwNTAzMjMwMTU3WhcNMjQwNTA0MjMwMTU3WjAzMTEwLwYDVQQD
EyhlNDNjOTNiYzU1YmRlM2U3YjFlYjk3NTRjYjU0YmE2M2YyMTgwYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDekAgQbHGCZ5qLHcOOxR4mAjryh
SOdm/ClB2PZbSvAqfqLtwzBJvi4/8vNji2jLGK3/9C2E9NQegBCAK5SH+m6OB8DN
25oUIdpNeAwz66h5U3llTmR7uQAGhchM4kaKBYNLptCGFUntEeEUNpx9VoCJ+uCg
nO/Gwfpv6uvTTJ7+HatYR7PQ12q64B3ksBbco2FFgibVmAz3NhnpNUw3keecUeWc
SsytML2jc3itnov39+fOij1Pd2G79pxtnfH7/vC5wymF055YdaOOre8MixQKgKLt
hbWk4VDKJmQMmTTJNoUBsbds+A7TswAHuT53pPGNu2BNQU4IbWHZyhxxwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ8k7xVvePnseuXVMtUumPyGAoqMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnjVj21p
7YSktsHtyjiZp1pr/KPgopJ8jCtOTcNaESOuOiwXHQPeCq5s/2YtSV8iZH1nHsT+
MvZiz1P+4M2JS3t9q6jKiIobHEAl1A5jU13MbjcYivRbSLODtejyyrHUoRtENITh
A6+ezkBlUS5Bn4/iZGKZ8uDNQYENsdrsa+3IZ/oW8T4XWV28ytmn6MGpnzDOERkp
kR9QoWGPplNGAS/nhL6Wf76v8zk1ro7NBtxByWKYSP+5febPe75+oDO8WF0lFPUN
U/KrWe71M9C+BrdLDw7a+qNLPvT91nUtpr5TgOfCTp71ChlQeFM7MTdfliTsBYpl
GAHEQL3ZtNch1A==
-----END CERTIFICATE-----
Generated at Sat May 4 01:29:01 2024 by rpki-client on console-fra.rpki-client.org