Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File:                     t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier:          nFZE6JF/RGV1vNJ//6E900et47SGfHnKxnFhVH1EB+U=
Subject key identifier:   27:3F:DE:DA:82:5C:FC:75:EB:15:09:75:7B:D4:5A:A1:3A:39:A4:9C
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer:       /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial:       0191FAB50BE3E8EB78E692D8260F9E746386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number:          0110
Signing time:             Mon 16 Sep 2024 12:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:54 +0000
Files and hashes:         1: _o-lX4o7n_d_Im-PD0zZi4tiGW8.roa (hash: TIXWSOWjFTwMqRG9cXJs3IUchUjJUr17yLA88JP6rgY=)
                          2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: wQf/1J01SKIolne+2cSytxfUnpaPSgplO8J7ujQo1Hg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:0b:e3:e8:eb:78:e6:92:d8:26:0f:9e:74:63:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
        Validity
            Not Before: Sep 16 12:00:54 2024 GMT
            Not After : Sep 17 12:00:54 2024 GMT
        Subject: CN=273fdeda825cfc75eb1509757bd45aa13a39a49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:ec:86:43:a4:33:4f:57:1a:08:92:c0:4f:
                    9b:6e:97:0a:39:21:e1:6d:e5:6c:0b:e6:2d:05:04:
                    86:27:06:ca:18:fe:1d:ab:31:0f:1f:52:37:44:79:
                    1c:a5:d2:e3:15:dc:6e:36:14:c9:42:64:ae:a1:87:
                    e0:2d:01:60:4b:ea:cc:8f:8a:b0:e3:ee:56:66:d6:
                    d0:fc:5a:77:bc:92:5d:85:de:cc:60:bc:da:bf:6c:
                    d8:39:23:4d:78:80:4d:bd:67:12:e6:46:9a:f0:48:
                    e9:2a:3b:33:bf:61:d7:f5:7d:ab:b7:6f:be:db:da:
                    2e:af:02:c0:04:49:61:e8:39:9b:77:cf:f7:dd:ff:
                    27:8b:0f:fb:92:b3:7d:cf:4a:27:2d:fd:f0:c6:e6:
                    4d:b7:c5:2e:9b:76:a2:8d:53:f6:fc:26:b4:a0:64:
                    0c:5d:96:e2:03:73:67:2b:45:cf:fb:a4:ee:36:92:
                    10:ac:c2:b1:e5:93:b6:2d:a7:47:0f:ee:36:62:9c:
                    a4:c7:4f:77:8f:47:15:81:28:3c:51:95:05:d9:0f:
                    98:b4:a5:6b:03:d5:ec:3f:8c:b4:0a:7b:9c:00:00:
                    ee:e1:d7:dc:08:d4:64:91:9e:60:8b:b9:22:36:a3:
                    27:ce:f9:b4:e7:ab:0c:d4:e3:82:ab:51:82:f9:1c:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:DE:DA:82:5C:FC:75:EB:15:09:75:7B:D4:5A:A1:3A:39:A4:9C
            X509v3 Authority Key Identifier:
                keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:16:cd:a8:5e:d0:07:c4:67:e4:51:61:98:e7:19:5b:f7:
         0f:ec:34:69:2c:36:9a:c8:1b:52:ed:85:78:00:45:77:2c:fa:
         d9:fd:0f:6e:25:25:6f:8a:ee:23:5a:d5:cf:f6:18:83:9b:cb:
         6f:ba:6d:8e:63:29:e9:97:0e:3e:ca:37:67:94:c7:05:c0:9e:
         09:4c:5d:27:74:ea:20:8a:99:e4:e1:ef:6a:3d:10:9c:bc:5a:
         ce:72:72:00:4c:26:78:d6:e8:a3:6e:00:82:e0:4e:c5:38:43:
         aa:54:9b:42:14:a5:7b:5d:1a:a8:67:54:ba:15:7e:20:56:4a:
         cf:c8:8e:3e:ff:00:32:e9:0d:ba:2e:05:2c:6f:fe:46:47:40:
         32:cb:4f:a2:e0:ba:95:81:1d:8f:3c:7d:25:3f:83:80:ae:c3:
         35:f5:46:dd:00:83:80:72:e1:7c:41:cc:22:0f:3c:12:6c:da:
         60:23:33:3d:79:81:59:7d:45:06:4d:c0:9c:36:3e:b9:65:17:
         8a:d8:25:d5:c6:03:35:88:fd:57:4e:e9:ea:0c:f3:36:ad:73:
         82:59:4d:c8:cc:54:d8:f1:16:56:e4:14:08:40:f3:81:fe:18:
         fa:29:ba:9a:38:0e:a1:04:59:7f:42:c9:86:84:41:24:4f:d8:
         96:67:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:43 2024 by rpki-client on console-ams.rpki-client.org