Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          O31RaQ8FS1E/WYQaNS7Ynq/vAhSbtBl1K+R49qBcg/E=
Subject key identifier:   DF:97:34:7E:4C:45:14:D3:02:65:77:B8:9B:7F:B1:CA:25:3F:34:6D
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01935877B44FC47459311A9B2C7B62978EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          0D3A
Signing time:             Sat 23 Nov 2024 10:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:00 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: Yl4CPwK8fxNTbfaIqI0kVDAY040/MP3Q1TCFgtiGW5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:b4:4f:c4:74:59:31:1a:9b:2c:7b:62:97:8e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Nov 23 10:01:00 2024 GMT
            Not After : Nov 24 10:01:00 2024 GMT
        Subject: CN=df97347e4c4514d3026577b89b7fb1ca253f346d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:22:38:d4:ca:86:30:4c:60:0f:94:a4:d4:
                    91:dc:24:ec:74:d4:66:d6:b5:bc:89:a9:01:5f:28:
                    cd:6d:64:6b:4f:40:94:8c:9c:4d:bc:5e:19:1a:5a:
                    b5:1a:fc:75:cf:1d:ca:f3:18:1b:d7:0c:f4:b3:28:
                    0a:bc:23:9e:07:96:9e:4f:fc:50:e5:d1:22:87:0f:
                    6e:3e:78:15:01:be:1b:87:72:58:0c:f2:2a:ea:e2:
                    3a:ee:d0:87:65:70:9c:c0:db:b7:fa:86:07:41:d8:
                    0b:b3:6c:f8:85:fa:1d:0b:6e:08:bd:8a:cb:e4:d4:
                    0d:5f:b8:57:db:2f:f5:5b:9f:81:03:c3:e2:a6:5f:
                    3f:c7:d3:2e:27:bf:9e:86:bd:56:40:40:c8:10:5b:
                    a4:85:a6:9e:f5:b4:4b:2f:05:7a:30:93:2c:ff:d6:
                    4e:1d:39:65:85:d3:7f:b7:0e:31:66:1f:de:3b:e8:
                    de:c7:49:27:1e:a9:90:57:ae:9a:fd:8d:86:cb:31:
                    b1:b2:8c:e9:b1:6d:ac:14:fa:a4:43:23:60:52:79:
                    22:23:d4:cf:eb:f5:d8:20:c6:78:1e:6a:ed:e4:eb:
                    55:b2:06:0b:f0:af:43:9a:78:b8:a0:53:b8:ad:ed:
                    ed:53:7e:77:2d:8b:19:c1:b3:45:64:dc:a8:f2:5f:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:34:7E:4C:45:14:D3:02:65:77:B8:9B:7F:B1:CA:25:3F:34:6D
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:35:eb:b6:c1:2c:83:e1:b7:70:4c:8f:14:1a:37:2a:33:
         85:71:24:0b:f0:27:77:4e:a2:dd:54:25:31:cb:50:02:bc:35:
         74:25:2e:14:03:53:e4:c5:33:87:30:9b:26:18:93:fb:93:2d:
         f9:35:37:6d:72:ea:18:08:ea:a2:f5:7a:b9:09:0f:03:62:43:
         ee:d6:c2:96:21:f4:91:1b:04:83:3e:e2:b1:78:ae:bb:c3:ab:
         0d:76:b6:5a:14:04:97:3d:f1:2c:ed:17:13:3c:56:5d:fd:56:
         a0:9c:e4:65:ca:01:8e:39:bd:59:ae:86:d5:1a:33:7a:91:cd:
         22:65:0e:49:d0:8a:64:aa:50:ee:7c:f9:0b:95:ed:11:c8:99:
         25:51:1b:d8:47:c4:44:29:7a:c3:17:23:ee:94:07:e2:37:a2:
         08:af:8d:eb:55:bc:7f:bc:f5:dd:01:d1:5b:fa:c8:a1:65:76:
         1f:40:3b:42:57:d8:14:e7:42:85:d9:e0:11:1d:85:8a:52:26:
         60:e5:d0:fa:8e:d9:3b:80:16:a2:ba:9a:28:38:aa:ee:bb:89:
         d2:77:a8:d9:14:cd:13:24:67:79:a6:e9:3f:18:a7:ab:e4:fa:
         df:62:24:8b:2a:ec:6a:99:aa:62:69:be:42:a2:4d:53:76:64:
         d7:e0:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:56 2024 by rpki-client on console-fra.rpki-client.org