Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File:                     t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier:          lmzV2jqzGuOTzMrzeRnUbfLT73ca0UniKBichTVgwwI=
Subject key identifier:   B1:42:D2:88:66:01:19:2F:95:13:00:AD:B9:49:14:E1:F3:B3:96:2B
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer:       /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial:       019358404C4782760DD7671306EF64C713FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number:          01C5
Signing time:             Sat 23 Nov 2024 09:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:29 +0000
Files and hashes:         1: _o-lX4o7n_d_Im-PD0zZi4tiGW8.roa (hash: TIXWSOWjFTwMqRG9cXJs3IUchUjJUr17yLA88JP6rgY=)
                          2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: B/V0von7aRcwr2AXqdgcNrcZtH98n0wysd4HlT1hVwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:4c:47:82:76:0d:d7:67:13:06:ef:64:c7:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
        Validity
            Not Before: Nov 23 09:00:29 2024 GMT
            Not After : Nov 24 09:00:29 2024 GMT
        Subject: CN=b142d2886601192f951300adb94914e1f3b3962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:32:ec:d5:f6:33:01:24:e6:d2:83:fd:01:
                    b5:96:e2:56:3e:fe:77:8a:e8:3d:90:7b:00:fa:6e:
                    2d:ad:f5:2f:77:07:7a:a1:07:00:04:82:5d:d5:97:
                    44:3d:ad:49:03:24:21:0e:00:ad:4b:67:ac:f4:6c:
                    5c:53:82:d1:26:6b:82:30:1f:f9:5b:36:12:32:3b:
                    be:89:fe:0c:de:79:bd:bd:25:04:91:79:28:b7:73:
                    21:db:ef:af:12:c3:34:8d:b0:9d:4d:5c:13:41:da:
                    07:52:48:63:32:8f:83:70:84:08:d6:d2:bd:83:c6:
                    42:f2:2a:53:fb:e1:e2:a0:ca:9a:5c:58:01:bb:19:
                    d5:d0:fb:14:db:95:bd:9c:7d:2f:d5:3f:d3:45:29:
                    13:b2:d3:29:0a:50:a0:ef:bc:00:a5:ac:d5:d3:a7:
                    f3:78:c4:0e:45:ca:47:f7:59:43:d0:90:52:ec:6b:
                    55:1e:d5:c7:e3:16:17:a3:b1:85:c7:52:a3:f6:65:
                    59:69:ce:e6:ee:40:70:ac:de:df:a1:74:41:a2:83:
                    0f:a2:fd:3e:66:27:7d:db:09:17:ac:61:cf:58:c8:
                    6d:88:a5:75:a2:e9:d1:d6:07:3f:18:bb:0d:24:dc:
                    80:0a:74:c5:e1:14:db:62:c4:46:fa:20:db:80:5b:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:D2:88:66:01:19:2F:95:13:00:AD:B9:49:14:E1:F3:B3:96:2B
            X509v3 Authority Key Identifier:
                keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:79:1b:5b:6f:03:4d:72:ee:db:12:2a:e1:08:40:77:d1:
         b6:0f:73:b6:77:38:10:c3:2b:ec:02:01:11:a6:fb:64:bb:be:
         03:7e:58:c0:ac:3f:34:4c:e0:51:99:d2:ab:eb:ad:b8:7f:b4:
         f9:e7:f9:4c:c9:b1:38:0e:7d:a1:b8:ad:9a:28:26:65:a6:5f:
         4d:74:8c:be:f1:fa:91:c0:e8:6f:0f:95:f3:ab:01:2a:89:ad:
         a6:22:09:8b:4e:3e:02:29:3a:f7:ca:4b:e8:09:23:66:b6:98:
         bb:2b:29:d7:22:cd:18:b0:fa:2d:a0:87:3f:3d:23:6c:21:15:
         59:58:e1:9a:3c:dd:c5:23:0f:b4:8f:53:6c:42:f8:75:0f:64:
         fb:19:a5:01:c9:94:ef:68:32:83:6e:0b:7b:8a:69:5f:93:1e:
         8f:d5:cb:50:8d:1a:26:7f:d5:66:83:ad:55:cd:46:c9:57:73:
         d5:20:93:49:16:bc:2b:6c:8f:d2:23:f9:d2:0a:31:37:ad:e9:
         30:57:53:4f:2f:58:57:53:35:c6:1d:d2:7d:aa:b6:6d:a7:31:
         d2:43:c1:19:e4:fc:76:c7:b7:63:34:d6:7b:4e:70:d9:b5:a5:
         a2:18:c9:d3:2e:25:00:f7:b1:be:cc:5e:0d:41:84:2b:13:63:
         7c:04:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:13 2024 by rpki-client on console-ams.rpki-client.org