
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
File:                     jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft (raw, json)
Hash identifier:          GtWywwPPntEC5kj2JL8HLGqGFeXOIn4+B66cGw01hqk=
Subject key identifier:   7D:F5:8B:A5:C4:19:A9:23:3D:CF:3B:12:93:B6:AA:8D:7E:44:0F:46
Authority key identifier: 8D:72:7F:54:FD:72:50:73:68:45:F7:EF:B1:5F:C5:DE:FE:5F:07:4C
Certificate issuer:       /CN=8d727f54fd7250736845f7efb15fc5defe5f074c
Certificate serial:       0194BA843F4AACD4018537F23CC43FBA8B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
Manifest number:          F7
Signing time:             Fri 31 Jan 2025 04:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:16 +0000
Files and hashes:         1: jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl (hash: RDv7BRYgZvdpXTqlnybdNLs3Dojf3NpSLJ/ISfKtWq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:16 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:3f:4a:ac:d4:01:85:37:f2:3c:c4:3f:ba:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d727f54fd7250736845f7efb15fc5defe5f074c
        Validity
            Not Before: Jan 31 04:00:16 2025 GMT
            Not After : Feb  1 04:00:16 2025 GMT
        Subject: CN=7df58ba5c419a9233dcf3b1293b6aa8d7e440f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:cc:3d:bd:fc:f0:b2:2f:d3:b0:10:fd:d4:
                    76:bd:15:f3:23:08:f1:dd:ab:49:ac:8e:0c:52:65:
                    45:66:1c:d2:04:68:71:3d:0e:6b:ec:3e:eb:2a:53:
                    da:ce:f0:66:82:3e:df:f7:b5:df:0f:c6:97:f0:39:
                    e7:2f:53:1a:43:b2:ad:e9:fb:3b:c5:ad:44:7e:9f:
                    77:70:74:8b:3a:ee:5b:f3:c3:ba:68:b1:fc:39:56:
                    19:8e:83:42:5e:6c:5d:d1:e2:11:e4:6c:29:f8:64:
                    5b:cc:c8:f2:c5:d1:06:89:b1:4f:4f:ba:ea:74:cb:
                    25:b0:48:31:a8:53:43:49:d5:5f:f1:af:fb:06:78:
                    3f:bc:a5:7d:35:86:21:61:49:d3:cd:d3:bf:a2:b2:
                    e9:c8:c4:a8:41:5a:b0:3f:05:9c:56:7a:06:63:a8:
                    fd:e1:bb:b7:71:d9:f5:18:80:c4:ff:26:bf:8d:b0:
                    8b:d4:5c:a8:f9:eb:28:0a:38:51:4c:35:73:72:c7:
                    ae:3a:57:e5:e6:96:59:14:44:60:56:ca:87:3d:cc:
                    f1:d2:22:80:49:9a:da:f4:cd:07:e4:7e:79:84:24:
                    c4:9a:3b:23:54:8c:df:18:19:94:29:3a:f5:9b:6f:
                    92:d1:c8:7b:9c:85:89:ed:1a:eb:1f:96:c8:95:67:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:8B:A5:C4:19:A9:23:3D:CF:3B:12:93:B6:AA:8D:7E:44:0F:46
            X509v3 Authority Key Identifier:
                keyid:8D:72:7F:54:FD:72:50:73:68:45:F7:EF:B1:5F:C5:DE:FE:5F:07:4C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6d:70:2e:0a:66:59:ac:32:7c:4b:d9:23:99:df:d9:04:85:52:
         eb:7d:84:3f:6d:db:28:3e:58:70:04:da:3b:cb:7b:c2:6c:34:
         b5:ac:86:bb:27:9b:5c:17:7a:60:87:70:75:09:17:48:06:85:
         b7:cc:52:10:cb:54:5a:ed:7c:56:59:57:12:d8:4f:cf:85:40:
         2e:d3:3f:25:5f:7a:e6:11:6f:cd:28:ca:9b:2f:e3:b8:eb:fe:
         fc:45:c3:f0:58:2f:0c:3e:93:28:95:33:af:09:6c:63:b1:f6:
         fb:03:bf:07:70:61:5b:82:0e:c8:bf:85:82:d6:c7:b1:50:16:
         cc:95:2c:c4:ff:8e:46:75:86:34:ca:0b:4b:56:40:f4:ff:93:
         50:f8:75:5d:cf:5f:1d:2b:ba:e6:50:0c:da:0e:30:1a:16:9d:
         33:b1:c4:13:74:41:62:0d:53:9a:a8:32:5b:45:9e:30:e0:6b:
         d2:f0:6e:87:78:cb:68:78:4e:d4:cb:99:26:56:b3:67:dc:ab:
         d4:74:a4:3e:12:c9:80:29:c5:e4:19:98:e0:d7:01:bc:2d:fc:
         fc:0e:af:03:5e:41:0a:38:de:83:1e:b0:7e:94:e4:fe:7a:e6:
         d0:31:70:82:68:43:22:5d:9f:b4:00:a4:c4:e7:ae:de:cc:b6:
         64:77:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:08 2025 by rpki-client on console-fra.rpki-client.org