Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File:                     7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier:          PvITMi4EcaQm4Dg8MgN2aO2l5xov7IDI8NQAccyNcNo=
Subject key identifier:   57:7A:2F:D0:DA:57:D5:9A:21:A4:B3:51:BB:9D:66:4B:50:10:00:6E
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer:       /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial:       018F49EB90F13C1A21849F9D40808A54FC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number:          0B75
Signing time:             Sun 05 May 2024 18:02:05 +0000
Manifest this update:     Sun 05 May 2024 18:02:05 +0000
Manifest next update:     Mon 06 May 2024 18:02:05 +0000
Files and hashes:         1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: TfuxVuDUFupyvMyD7CAtNkZDTL8AZziO5rAVqKueBHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:eb:90:f1:3c:1a:21:84:9f:9d:40:80:8a:54:fc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
        Validity
            Not Before: May  5 18:02:05 2024 GMT
            Not After : May  6 18:02:05 2024 GMT
        Subject: CN=577a2fd0da57d59a21a4b351bb9d664b5010006e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:7d:39:d2:d6:2c:d1:9b:76:ae:8d:20:66:
                    cd:1c:9d:62:b2:dc:10:57:a9:25:ca:84:a1:6c:91:
                    1b:66:a8:39:79:e7:f5:3f:35:11:b6:a8:a2:32:bf:
                    71:0e:01:6b:ad:69:4b:10:26:e1:95:37:16:a5:27:
                    de:d7:40:0b:c7:5b:35:32:7e:79:37:86:a5:0e:ca:
                    0d:90:b7:64:a6:4c:d9:2c:8f:fe:5a:40:62:cb:25:
                    81:15:cc:2f:ea:26:d4:6d:61:31:91:c2:e4:4b:0c:
                    e5:73:07:74:6b:8c:e1:20:86:ea:9c:b5:62:17:6c:
                    21:2a:6e:a9:12:2b:04:0f:8d:01:96:a5:d2:f8:3c:
                    c9:c9:c9:95:7c:9c:1a:b0:6e:c9:78:2b:8e:80:af:
                    6e:e5:8d:77:4e:f2:f2:27:0d:65:05:af:83:6d:9a:
                    7d:77:34:4d:ec:40:1b:43:6b:24:13:f9:3f:14:c0:
                    ef:15:e3:fc:8c:e7:24:6a:1c:fe:27:3d:56:c9:3d:
                    5f:67:6f:33:35:d8:36:c7:39:c6:4b:28:2b:a6:1c:
                    e1:71:97:36:53:60:3a:2d:2b:74:ad:5a:91:e9:6f:
                    cc:3a:cc:fb:15:3f:c5:df:32:0b:10:2b:55:86:18:
                    fb:c7:39:91:5f:40:78:cd:86:cd:22:51:d6:92:4c:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:2F:D0:DA:57:D5:9A:21:A4:B3:51:BB:9D:66:4B:50:10:00:6E
            X509v3 Authority Key Identifier:
                keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e5:3a:6c:91:e5:07:9e:39:14:c5:bb:8d:bb:79:9d:7a:73:
         9e:0f:38:ad:36:4e:48:1b:bf:d6:82:9c:e8:7a:9b:25:f8:76:
         56:b1:b3:e4:0a:33:77:39:43:f6:e3:ba:55:b8:ad:e5:ab:27:
         16:09:34:91:95:0d:24:44:5f:20:7f:d1:24:db:44:86:83:c1:
         32:76:9c:3f:e6:0f:16:1c:db:86:71:68:18:c2:06:90:b4:fd:
         6d:27:d3:79:cd:f8:59:92:08:49:23:1b:46:58:e6:d5:37:80:
         9c:e8:bb:cd:dd:6c:9d:7d:99:ea:11:77:c0:ed:f0:73:0e:87:
         ce:ff:58:d0:f2:39:4a:41:3f:40:c5:8a:90:a1:e8:60:0a:f7:
         3a:b6:29:67:8e:8e:3f:2e:db:a0:4a:32:15:43:7b:b0:cd:cc:
         f1:b2:95:4d:e8:6f:e1:ee:15:5e:89:7b:62:60:72:a1:56:aa:
         fb:fd:d0:aa:84:3c:3a:49:97:33:f7:65:44:15:67:28:69:0c:
         c7:f1:64:cd:07:36:10:a9:65:c7:c9:56:c2:14:a6:67:cf:55:
         1b:a9:2f:f1:76:e0:d9:72:e0:4e:1d:d3:ea:7c:bf:35:e4:4b:
         c7:3e:23:58:35:51:3a:a7:18:03:0a:6c:99:52:67:07:35:50:
         7e:ef:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:10:28 2024 by rpki-client on console-fra.rpki-client.org