Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          gF0urkxYk6CPvU2Rm4VOeY7AsksnJ16hVYYDrqXADTk=
Subject key identifier:   F0:8A:A0:9F:07:2D:36:65:A3:D2:BF:B5:79:4E:71:84:D9:3B:7F:3D
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       05B2BE9379D38A9479A11DD596D81047A1B5D2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          C8
Signing time:             Thu 21 Nov 2024 06:38:32 +0000
Manifest this update:     Thu 21 Nov 2024 06:33:32 +0000
Manifest next update:     Fri 22 Nov 2024 07:10:32 +0000
Files and hashes:         1: AS215849.asa (hash: 9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: UfmFv6aS/fysoOfAXRperRmaquM/bu94/2NbnZXXK6w=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:be:93:79:d3:8a:94:79:a1:1d:d5:96:d8:10:47:a1:b5:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Nov 21 06:33:32 2024 GMT
            Not After : Nov 22 07:10:32 2024 GMT
        Subject: CN=F08AA09F072D3665A3D2BFB5794E7184D93B7F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:25:8c:94:bf:5d:73:e4:a9:89:ea:b4:bb:18:
                    b6:a3:65:70:d4:3e:a5:84:cd:5f:1a:d5:13:19:2c:
                    c5:b9:3c:d0:57:69:18:71:eb:b1:15:dd:d3:d6:74:
                    28:7c:00:e2:0b:bf:b7:78:08:66:9b:ad:e7:bf:57:
                    fb:9e:12:db:1c:60:c9:0c:76:c4:64:01:05:5f:e8:
                    f1:cf:c1:ee:25:c9:c1:6f:e2:79:c0:ce:53:e6:db:
                    4d:72:ea:1b:80:01:bd:12:e4:ad:d5:33:f9:c5:03:
                    4d:7c:60:86:14:4a:39:48:df:8a:c9:24:0a:7f:76:
                    6a:fc:d2:fb:09:8d:a5:4e:4d:f2:9e:e1:c6:03:18:
                    3b:16:06:9d:15:fe:b2:61:05:fd:d8:c5:3c:3f:ab:
                    29:af:6b:32:8b:e6:79:f1:aa:7f:b0:c9:fa:86:06:
                    69:1c:82:cd:92:37:b6:cd:1d:90:ad:07:9a:34:4f:
                    41:58:22:fc:ee:97:7f:9e:56:b2:0b:7b:03:75:fb:
                    79:9a:39:68:39:e0:5e:b0:7e:0f:21:3c:da:7d:3d:
                    cc:eb:4c:e6:27:0b:83:20:6b:b0:97:f9:d7:29:08:
                    03:d4:19:e0:45:b0:4d:eb:ef:78:d9:63:7c:75:4e:
                    c0:08:cf:e5:18:14:fa:54:57:19:c2:30:f0:a5:5e:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8A:A0:9F:07:2D:36:65:A3:D2:BF:B5:79:4E:71:84:D9:3B:7F:3D
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:50:9a:3c:05:11:ab:24:c6:06:01:6b:a0:32:06:8a:5f:0b:
         cd:86:b1:2b:77:60:6e:e1:6d:72:ea:57:1b:c2:4a:d3:4a:33:
         87:8d:b6:38:dc:b4:6d:28:10:36:6a:04:66:6c:a4:5e:02:f6:
         50:98:c4:5f:3b:d9:eb:b2:88:aa:5b:74:5c:ff:b4:54:97:b7:
         15:3f:d2:6f:47:ab:37:93:de:84:f9:75:a0:3f:62:68:e1:96:
         b8:d7:21:5b:50:ef:42:93:fa:7b:a3:82:ed:22:db:f6:82:d7:
         ab:2d:2a:6c:94:c5:a1:af:4c:92:79:82:1c:7a:62:6e:93:0f:
         3f:05:dd:a1:92:62:06:4a:8d:95:a1:ac:fc:d0:85:fc:7d:9e:
         c3:24:9c:49:dc:f9:55:7c:d5:02:98:ad:44:d3:26:1e:d1:a6:
         52:ec:fb:52:3d:d9:a7:aa:13:72:43:a2:1a:74:d2:fb:a1:86:
         34:f7:a0:8c:c2:c3:4e:84:66:6c:fe:8d:fd:51:1e:46:63:22:
         55:e3:d6:74:10:d2:0f:9e:e0:39:a5:3d:8f:4c:c7:76:95:f5:
         78:23:f0:ae:fa:3f:ee:5f:a0:62:36:96:a8:0d:00:04:36:99:
         f3:d0:9e:8e:b8:a0:4f:ba:97:ff:a4:56:ec:09:20:40:89:72:
         6f:da:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:29 2024 by rpki-client on console-ams.rpki-client.org