Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
File:                     7KLpXDl5RMPObT9DcUiLc55C5C4.mft (raw, json)
Hash identifier:          Lp3Eu0MSNHc7VErdejPmm9/iguR7qPnQCanoAOg1k6c=
Subject key identifier:   7B:A5:CE:63:22:83:4C:64:B6:79:1F:A1:32:17:94:1D:CF:8A:A8:E4
Authority key identifier: EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E
Certificate issuer:       /CN=eca2e95c397944c3ce6d3f4371488b739e42e42e
Certificate serial:       019095A67F34A0E20C80C059EE43B9C5DBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
Manifest number:          0B81
Signing time:             Tue 09 Jul 2024 04:00:35 +0000
Manifest this update:     Tue 09 Jul 2024 04:00:35 +0000
Manifest next update:     Wed 10 Jul 2024 04:00:35 +0000
Files and hashes:         1: 7KLpXDl5RMPObT9DcUiLc55C5C4.crl (hash: pS7KR09rMpPqzrBCCEgqnPM/FyP9am1Gt9HNTkjE3Y0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:a6:7f:34:a0:e2:0c:80:c0:59:ee:43:b9:c5:db:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca2e95c397944c3ce6d3f4371488b739e42e42e
        Validity
            Not Before: Jul  9 04:00:35 2024 GMT
            Not After : Jul 10 04:00:35 2024 GMT
        Subject: CN=7ba5ce6322834c64b6791fa13217941dcf8aa8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:cb:ae:10:97:17:7f:fd:65:e3:cb:1c:2c:
                    5f:26:16:56:e6:20:49:5a:35:23:a9:a2:b8:c1:db:
                    61:ff:d5:0a:23:b1:83:65:b8:fc:1c:ff:87:9b:b8:
                    ca:fe:f4:46:27:15:b6:b4:1b:c8:1f:a5:78:2a:27:
                    97:71:c4:60:71:d9:9d:88:c2:98:cb:53:fd:56:2c:
                    99:c3:49:3c:67:cf:ce:0f:84:2c:f4:33:10:60:8c:
                    d9:67:83:83:86:d1:70:1c:41:bd:af:b7:87:a9:ab:
                    2a:47:8c:0a:42:54:c0:8e:86:32:cd:ce:a8:f3:05:
                    98:a1:be:65:13:84:6e:e2:23:97:db:fc:e7:55:b1:
                    15:51:aa:34:11:80:ca:80:58:4f:6a:75:73:7a:f7:
                    25:dc:42:f4:5f:ae:ea:6c:48:73:69:ff:55:78:8d:
                    80:eb:57:98:3e:0a:40:38:28:c8:a7:0d:1b:ab:93:
                    33:90:23:47:ff:80:7b:8e:aa:da:ce:0a:d3:4f:03:
                    dd:5e:c3:60:c5:bc:f4:b9:7d:ec:7f:5c:1e:3d:61:
                    7c:d0:92:fc:5a:82:0e:dd:63:61:5b:70:f0:bf:86:
                    c9:ca:57:48:b7:e3:22:f4:7d:6d:e7:e6:49:80:bc:
                    ba:a6:7b:da:6e:f3:85:e3:0b:d4:03:c0:d1:c2:7b:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:CE:63:22:83:4C:64:B6:79:1F:A1:32:17:94:1D:CF:8A:A8:E4
            X509v3 Authority Key Identifier:
                keyid:EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:0e:0b:27:5c:ce:ad:58:fb:c2:5a:29:cb:bc:53:5e:f5:
         c6:e2:68:1d:93:81:a6:19:b2:a5:02:fd:5c:39:35:f5:38:b0:
         d7:7a:bf:86:79:75:3f:b3:ef:b8:2f:41:f0:99:34:80:94:af:
         fa:7a:7f:70:c9:be:5b:94:f1:d5:c4:13:6d:b6:53:43:9d:1d:
         bb:0e:e6:38:23:7e:43:b3:17:c7:6e:31:3c:14:03:17:b0:88:
         ef:74:41:54:ce:08:3e:46:ce:1e:df:76:ca:68:b3:09:0d:dd:
         69:d1:12:9b:31:91:ec:e8:09:d2:91:78:19:70:40:5e:0f:3c:
         1b:cb:6b:20:48:15:f1:3b:16:31:d1:e9:ee:87:d5:2b:f0:cf:
         d1:36:de:82:e0:9b:7f:9c:b7:e3:43:5c:63:5b:a7:1f:6f:a3:
         40:2e:82:89:1f:70:66:ba:a3:1a:97:b3:92:61:d9:e7:a5:a9:
         d8:1b:d4:82:41:2b:9d:22:2f:b2:fa:b9:58:52:de:58:fa:31:
         db:2a:73:f4:6c:59:e7:4c:66:4d:88:ab:80:b5:ad:1d:6b:bf:
         d5:b9:c0:5e:44:8e:e0:cb:54:46:f6:88:0b:ff:4d:8a:73:12:
         2b:d9:e0:cd:78:4f:39:dd:df:75:91:e4:f1:9b:f1:51:0b:a9:
         72:99:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:43:02 2024 by rpki-client on console.sobornost.net