Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          +YJEHJSV2RY2kXfFtW7hOWfUQkGx7h9FN8Je+/7v/z0=
Subject key identifier:   1F:24:9D:71:BD:B9:3B:AD:6A:27:57:D6:62:00:ED:10:99:84:63:23
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       019407220B9460DE24B7B21F2D73A4B1C479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          093C
Signing time:             Fri 27 Dec 2024 08:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:59 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: cW8hTvsoGExh8Oueo9ePbGnArWzKM/k3OjOkNSl2GB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:0b:94:60:de:24:b7:b2:1f:2d:73:a4:b1:c4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Dec 27 08:00:59 2024 GMT
            Not After : Dec 28 08:00:59 2024 GMT
        Subject: CN=1f249d71bdb93bad6a2757d66200ed1099846323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:dc:2d:48:9a:52:f2:b8:66:81:d5:98:6a:
                    ba:2e:03:7c:a9:4d:90:07:76:bc:28:a7:ae:09:51:
                    d0:89:c7:46:98:73:01:e7:2c:ad:96:ed:87:99:cf:
                    0d:58:27:ed:c0:fe:33:5d:d5:b6:1a:1a:5e:ea:13:
                    9b:c9:46:fa:0d:6b:78:73:58:74:7e:1f:46:d0:68:
                    ad:bc:94:b4:b8:29:d8:20:1c:65:3c:e4:b9:7e:c9:
                    e8:fc:c2:98:fc:f7:8a:57:b1:5a:70:0c:05:fe:b7:
                    81:19:35:1c:da:70:b6:da:46:d8:83:7b:c1:ba:4b:
                    d5:27:bb:64:2f:55:24:2d:75:c1:ea:dd:48:6c:0f:
                    63:e3:08:5d:f3:cc:a7:6c:5c:23:df:d1:44:30:71:
                    78:8d:d0:fe:56:da:24:3e:39:86:dc:80:d5:38:b7:
                    10:84:7f:62:19:c3:44:a9:a2:3c:19:58:fd:fe:af:
                    cf:3e:da:ca:9d:fe:5a:93:e8:86:86:39:5f:e7:f6:
                    a8:0e:ab:44:ab:db:78:6b:9c:70:49:00:9a:b1:35:
                    ee:6e:2d:c0:44:51:65:b4:82:88:a6:9c:b8:00:e0:
                    e3:d1:ff:ff:97:65:59:a1:19:d5:9c:32:49:96:b3:
                    57:5f:27:3b:51:4d:39:ff:a5:ed:d1:c7:8b:0c:37:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:9D:71:BD:B9:3B:AD:6A:27:57:D6:62:00:ED:10:99:84:63:23
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:32:9a:b3:4d:25:49:5d:03:28:6b:d1:2c:08:7c:bc:5d:
         f5:fc:3c:5b:dc:f4:73:e5:1b:4d:ab:7b:de:84:8c:9a:1f:a6:
         6a:d5:d5:cc:98:6e:96:59:3c:52:65:cf:0f:66:9b:ee:f1:fb:
         2e:9f:4d:8e:98:fe:17:1c:80:05:b9:03:1b:d1:8a:9c:a4:0e:
         e8:96:a0:ec:08:72:3e:12:38:86:c0:87:6d:ad:c7:93:bd:3f:
         f8:80:0d:02:d8:ce:30:e1:8d:be:f3:7b:6e:a9:5b:83:8c:24:
         1e:1e:f6:53:6a:1e:c3:20:10:ff:c1:bd:22:a4:f2:58:92:97:
         56:d6:84:57:e5:1e:64:d4:d9:83:e7:cd:af:f4:34:ef:71:48:
         dd:1a:d6:86:f2:f8:3e:33:9f:47:ba:6a:81:79:23:02:1b:3f:
         4c:df:e3:f8:5e:d0:b7:45:49:38:89:78:28:55:96:77:b3:44:
         1e:99:95:69:69:49:65:6c:87:33:f9:58:cb:e6:8e:9b:cb:6c:
         51:42:f9:34:f9:fd:1c:71:a0:5c:58:37:ba:ee:69:08:1b:d9:
         ba:92:d8:81:9f:82:c1:f9:50:4a:a3:cd:93:86:13:9a:69:fc:
         e0:eb:98:18:8d:4b:00:8e:fa:00:af:9a:11:ac:78:0a:44:2a:
         fc:62:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:06:25 2024 by rpki-client on console-ams.rpki-client.org