Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File:                     D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier:          NQFFod3GXvBVhQz5r39+1Xd6nLVhrUIuupi99EY16KY=
Subject key identifier:   68:28:E0:DE:92:7E:DD:C5:43:2A:70:DD:0E:C2:8D:67:6E:E1:88:19
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer:       /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial:       0194BABB667BEDF913E96EAF4BFF409F657A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number:          0584
Signing time:             Fri 31 Jan 2025 05:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:31 +0000
Files and hashes:         1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: 1NZ7KIOgD0rgjo6W36sEnVUIgsYOa4W55C2291WJB2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:66:7b:ed:f9:13:e9:6e:af:4b:ff:40:9f:65:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
        Validity
            Not Before: Jan 31 05:00:31 2025 GMT
            Not After : Feb  1 05:00:31 2025 GMT
        Subject: CN=6828e0de927eddc5432a70dd0ec28d676ee18819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:1e:b1:2a:c9:5c:e3:14:77:f5:d6:12:a8:
                    0d:a9:b9:8e:cb:60:15:ae:c3:3c:f6:d0:89:37:a2:
                    07:ee:95:7a:25:7a:82:6f:f3:ad:87:3e:ea:12:2d:
                    61:be:13:ad:d5:ed:7f:60:78:60:06:2d:33:fc:77:
                    be:4c:19:06:6d:c1:24:08:10:c8:7a:7b:6a:26:95:
                    2b:a6:3a:9d:64:60:2b:f8:6b:74:5e:b7:7a:e9:9d:
                    45:47:d7:45:0f:ae:fb:a0:c0:f8:d5:c0:48:67:a8:
                    cf:e2:dc:fd:c5:3e:5a:7e:2a:3a:e7:0e:fc:24:38:
                    8d:48:fb:dc:bc:26:ef:95:d1:6e:53:81:3e:b3:61:
                    fe:b8:cf:db:07:69:47:b9:8e:ce:8d:7d:4b:94:78:
                    fe:7e:ff:82:a4:74:06:49:bd:6d:5a:68:51:f3:df:
                    1f:3b:95:46:59:4a:48:32:e4:c9:91:a5:98:f9:c6:
                    4b:5e:14:76:48:ff:76:2b:d0:16:6d:72:e3:87:f1:
                    83:42:d6:0a:f2:87:52:a1:f4:3b:a8:89:8a:5d:2d:
                    21:2c:93:cf:32:96:b0:a9:7a:7d:ae:97:2d:f4:48:
                    39:14:a1:99:c7:90:02:d3:54:10:c9:51:ea:20:c2:
                    95:b9:62:c2:5e:8b:0f:0f:de:e5:99:bf:91:6b:43:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:28:E0:DE:92:7E:DD:C5:43:2A:70:DD:0E:C2:8D:67:6E:E1:88:19
            X509v3 Authority Key Identifier:
                keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:03:41:54:d7:0e:23:18:04:5e:da:22:6a:6f:ca:29:d2:10:
         f4:f7:08:f3:7e:d0:e1:29:51:8b:84:34:ea:77:55:61:5f:9a:
         b1:86:aa:d4:5f:e8:ec:5c:f8:37:ff:c8:7d:52:42:50:6f:de:
         c8:12:7b:c4:a9:a7:38:b1:66:15:ae:b9:7d:33:2a:57:57:2e:
         80:d1:e9:af:29:b3:0a:77:02:f4:ba:01:2a:bb:ea:7e:45:a5:
         17:f2:33:d2:14:7b:41:f2:ab:ff:d6:72:d9:cd:f4:b3:29:48:
         21:b9:59:95:91:b3:7d:64:08:cc:43:7b:8e:57:1d:31:bd:6e:
         ad:72:a5:c8:56:ff:2d:13:f1:a5:c6:66:ce:86:b3:f8:8a:d1:
         08:94:95:69:c8:d1:85:72:21:12:c4:cc:0c:70:d6:46:56:33:
         fe:e7:b0:91:76:a5:1a:43:45:de:15:78:1d:89:b9:70:e4:2d:
         4a:b6:93:b3:41:ef:d0:82:2e:1f:a6:2f:86:f1:63:48:f7:72:
         d9:4d:c3:0d:a4:63:49:aa:98:f7:ed:1d:31:3b:91:ce:bb:af:
         c5:02:ce:14:cf:3a:5d:c9:21:9b:3c:55:f2:c6:1d:b2:d0:b3:
         d0:f2:93:04:71:5b:05:db:be:b0:67:57:b2:a1:36:d9:a7:c9:
         a2:35:d3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:51 2025 by rpki-client on console-fra.rpki-client.org