Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          AWTr/QPA2loKVUwHN85kfspCJ4jCK2Ph5H2ZRbPG1pQ=
Subject key identifier:   20:41:F7:C7:5A:06:60:2F:35:58:E1:12:80:AA:E4:CC:70:8F:5D:5A
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       0194BB295EC37483B221CB76066A2FE764D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          071D
Signing time:             Fri 31 Jan 2025 07:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:38 +0000
Files and hashes:         1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: 3vWIRWBzms1DzRKyruFKU4lKn8oe4eqWMQbEDxgRySA=)
                          2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:5e:c3:74:83:b2:21:cb:76:06:6a:2f:e7:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Jan 31 07:00:38 2025 GMT
            Not After : Feb  1 07:00:38 2025 GMT
        Subject: CN=2041f7c75a06602f3558e11280aae4cc708f5d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:cf:a2:45:37:14:45:b7:ee:e4:eb:41:e3:
                    cc:a2:b5:ad:2c:7a:2b:9f:ce:f2:7c:de:03:f0:03:
                    be:fc:0d:f5:e6:c2:1d:87:39:24:09:11:80:b4:48:
                    c8:07:85:45:ee:2f:76:5b:50:d1:e0:e2:16:8c:13:
                    bb:24:bb:8e:b3:50:24:9e:e3:2b:e1:37:82:2f:28:
                    a1:6c:fb:73:66:38:5e:de:1e:89:ae:ba:ce:f7:b6:
                    7c:b7:52:fd:fb:45:e6:24:d9:f9:2a:d7:61:b7:4c:
                    e0:51:46:80:f0:3c:20:49:bd:3f:c9:04:ff:c1:73:
                    36:26:0f:c7:f6:98:7a:02:f0:65:12:bd:23:c5:7b:
                    26:3a:47:55:fe:39:74:b0:e6:fb:e8:92:81:ff:d2:
                    bb:ab:be:21:dc:2a:1c:df:3a:cb:a6:18:38:89:a0:
                    62:cb:1e:79:b7:1a:7f:2e:19:a3:e2:33:8e:fb:24:
                    f7:af:6e:f7:1e:22:99:e6:5d:2b:2e:62:48:7e:3c:
                    e6:88:ff:9e:b8:9f:61:e0:9d:af:85:ba:94:68:49:
                    bc:ad:ba:c4:a1:cc:7b:fa:92:7c:b0:b7:16:f8:06:
                    21:26:47:04:77:92:03:2e:b5:91:86:fa:d1:1c:40:
                    4c:20:f2:f6:3b:fb:1d:3d:2c:3d:5f:09:55:a1:1c:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:41:F7:C7:5A:06:60:2F:35:58:E1:12:80:AA:E4:CC:70:8F:5D:5A
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:ff:bf:88:b2:f3:40:c6:37:44:65:c4:9d:0e:7d:f2:b2:
         ce:d9:f0:d3:f2:ae:4d:f2:55:c2:6a:2d:31:4d:fc:a5:78:28:
         1f:75:0e:f0:85:c4:e7:3d:0d:ee:20:49:1a:8a:fa:65:ad:06:
         58:06:61:20:1f:b2:ab:3b:5a:d1:ef:4c:bb:8f:d1:09:35:9a:
         6a:64:79:a5:90:c8:e4:55:d0:c2:83:39:4d:42:7d:25:ce:be:
         66:7f:8a:95:b2:cf:e8:ca:8a:07:74:2c:72:46:4d:0f:a5:f1:
         5b:d9:84:42:88:02:6e:f1:8b:d7:69:63:64:59:da:a3:c2:a4:
         f0:1b:d0:3f:17:be:f2:ad:eb:cc:48:fe:0c:41:53:9a:a6:e4:
         c5:88:c9:25:a5:71:50:b4:34:e2:b8:ae:96:f5:c9:9e:59:b4:
         ea:9e:97:47:e9:8b:69:8d:53:d6:6d:cd:9d:bc:d4:84:be:36:
         3c:91:bc:41:7d:68:9b:29:85:8d:44:c3:9b:e1:af:8c:2c:c0:
         d8:42:08:44:f3:1f:54:89:a3:3c:1c:03:36:08:eb:2b:58:ac:
         ca:7c:dd:ef:32:3f:de:05:ac:b9:05:fc:49:26:3e:5f:f4:fd:
         6b:7c:82:eb:8a:ea:43:74:46:2b:ac:04:16:52:aa:37:53:af:
         df:1d:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:29 2025 by rpki-client on console-fra.rpki-client.org