Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          m5xV62W0wWKYi4ltqgs+11oUETh/tdfxtKVoojNDS6w=
Subject key identifier:   35:53:30:5F:9B:99:C9:0C:14:BB:CD:C6:50:10:9C:85:70:02:68:CB
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       0193651FEDC9860B0720E04C1B67E6980AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          0ADD
Signing time:             Mon 25 Nov 2024 21:00:11 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:11 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:11 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: ZeJ3WUin9pWx3x9zVojtmZTycQkq2qajI2+mlA7MY/k=)
                          2: IySF5Am5OV30qDlkGcLBOvBMsOU.roa (hash: B3PpCBDcJEhuQFuPDlKjD/t46HJA/B2Gf97IspXbqfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:1f:ed:c9:86:0b:07:20:e0:4c:1b:67:e6:98:0a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Nov 25 21:00:11 2024 GMT
            Not After : Nov 26 21:00:11 2024 GMT
        Subject: CN=3553305f9b99c90c14bbcdc650109c85700268cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:54:02:ce:c5:49:e3:12:a2:e9:82:e1:15:
                    38:a6:9d:9a:9a:7a:1d:ca:66:d7:a2:72:5b:27:6f:
                    b1:22:36:f5:1e:c3:89:a6:3f:e9:f8:1c:1c:0e:42:
                    5f:b5:99:9f:fc:04:ac:9e:51:16:cc:5d:b9:1e:2d:
                    f2:47:ac:01:9e:d6:f5:d7:4c:c2:ee:71:73:37:43:
                    87:79:63:40:3d:1a:ce:2b:1e:c5:e5:45:1e:58:c3:
                    01:72:24:60:7a:79:da:09:ce:67:cd:65:74:03:d5:
                    ab:ac:67:53:1a:9b:70:24:06:85:b4:e8:85:61:01:
                    7a:6c:cf:5d:d0:f6:85:5e:74:43:d6:2b:72:a2:b3:
                    ce:87:9d:7d:49:5d:b8:39:ea:7e:06:b9:8c:72:b3:
                    b4:b2:c0:b6:d3:53:11:ad:5f:27:78:8c:56:f5:2b:
                    1f:3b:d8:a1:0b:f8:1d:2f:83:8e:af:58:71:32:60:
                    f5:07:eb:1d:c3:0b:05:1c:ff:b3:51:39:d5:82:6f:
                    07:bf:d1:2a:eb:c0:d8:67:d1:4f:62:d4:5b:3b:8f:
                    0b:ea:80:dd:13:51:76:d2:e6:83:67:02:0b:7a:fa:
                    e3:29:ea:d4:81:2b:ce:10:dd:16:8f:06:81:ed:70:
                    d6:5c:37:79:95:ff:1f:04:ff:c0:a2:fe:01:08:4f:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:30:5F:9B:99:C9:0C:14:BB:CD:C6:50:10:9C:85:70:02:68:CB
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:53:43:92:7c:71:b3:3b:3d:fe:0c:58:20:1b:87:3c:27:
         2a:6d:06:4c:db:4a:0a:5e:f0:2b:4d:52:32:16:28:75:f1:5f:
         de:dd:39:ea:eb:96:36:19:e7:e1:3a:ef:e3:b4:a3:ab:74:bc:
         e5:2c:79:a7:27:5e:d7:6c:d1:01:15:99:f3:59:4a:da:39:65:
         76:52:ba:73:50:00:5e:0d:b9:fd:98:71:6d:61:69:a0:c4:c9:
         da:14:27:2e:13:9a:7d:59:ae:85:48:ea:e2:c5:75:d1:4d:2f:
         02:92:53:e9:36:be:d2:d9:ad:ef:69:44:1d:ed:34:29:84:dd:
         eb:e1:75:aa:ac:a6:45:59:66:96:42:f6:0c:0d:5d:49:c8:0b:
         7b:84:04:cb:03:f0:1a:22:8c:78:48:1f:33:16:4f:25:52:76:
         c3:01:19:b9:8b:33:57:35:1c:3f:79:98:62:dc:59:e8:e3:b7:
         fb:b0:52:6c:6d:f3:15:ed:65:bb:52:6c:fa:ba:74:d6:fc:f6:
         81:73:f5:2d:00:ec:76:09:95:ab:ee:79:fc:88:f7:b3:48:cf:
         fb:d8:31:ce:ad:e3:5c:ce:bb:fe:88:2c:64:4e:d2:0e:7e:ea:
         96:eb:d9:34:04:a4:02:b0:08:da:cd:5e:77:16:d3:fb:d3:52:
         a5:9f:58:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlH+3JhgsHIOBMG2fmmAqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz
MDhmM2EwHhcNMjQxMTI1MjEwMDExWhcNMjQxMTI2MjEwMDExWjAzMTEwLwYDVQQD
EygzNTUzMzA1ZjliOTljOTBjMTRiYmNkYzY1MDEwOWM4NTcwMDI2OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw9UAs7FSeMSoumC4RU4pp2amnod
ymbXonJbJ2+xIjb1HsOJpj/p+BwcDkJftZmf/ASsnlEWzF25Hi3yR6wBntb110zC
7nFzN0OHeWNAPRrOKx7F5UUeWMMBciRgennaCc5nzWV0A9WrrGdTGptwJAaFtOiF
YQF6bM9d0PaFXnRD1ityorPOh519SV24Oep+BrmMcrO0ssC201MRrV8neIxW9Ssf
O9ihC/gdL4OOr1hxMmD1B+sdwwsFHP+zUTnVgm8Hv9Eq68DYZ9FPYtRbO48L6oDd
E1F20uaDZwILevrjKerUgSvOEN0WjwaB7XDWXDd5lf8fBP/Aov4BCE/zkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVTMF+bmckMFLvNxlAQnIVwAmjLMB8GA1UdIwQY
MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt
MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy
LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCNTQ5J8
cbM7Pf4MWCAbhzwnKm0GTNtKCl7wK01SMhYodfFf3t056uuWNhnn4Trv47Sjq3S8
5Sx5pyde12zRARWZ81lK2jlldlK6c1AAXg25/ZhxbWFpoMTJ2hQnLhOafVmuhUjq
4sV10U0vApJT6Ta+0tmt72lEHe00KYTd6+F1qqymRVlmlkL2DA1dScgLe4QEywPw
GiKMeEgfMxZPJVJ2wwEZuYszVzUcP3mYYtxZ6OO3+7BSbG3zFe1lu1Js+rp01vz2
gXP1LQDsdgmVq+55/Ij3s0jP+9gxzq3jXM67/ogsZE7SDn7qluvZNASkArAI2s1e
dxbT+9NSpZ9YDA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:05:54 2024 by rpki-client on console-ams.rpki-client.org