Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          kwqokuv4jXC5aSdGkKpMA1BHzX/Nhta3jR8Oy7EnRWA=
Subject key identifier:   32:17:17:1E:88:2E:E3:07:2F:94:98:E8:25:3B:64:A9:E2:91:A1:9E
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       0191FA10B8303C53A5F2312EC2F7956F052C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          0A21
Signing time:             Mon 16 Sep 2024 09:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:25 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: xkReyXFlNHEYNxMYj1jm4o2Y/boDe//Uw8zXrDq5uoU=)
                          2: IySF5Am5OV30qDlkGcLBOvBMsOU.roa (hash: B3PpCBDcJEhuQFuPDlKjD/t46HJA/B2Gf97IspXbqfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:b8:30:3c:53:a5:f2:31:2e:c2:f7:95:6f:05:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Sep 16 09:01:25 2024 GMT
            Not After : Sep 17 09:01:25 2024 GMT
        Subject: CN=3217171e882ee3072f9498e8253b64a9e291a19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:5f:81:bc:9e:97:36:28:fd:f9:6c:b2:f3:
                    89:aa:c6:4f:85:0e:e0:a5:46:c4:10:05:7b:55:40:
                    15:57:1c:e7:19:d9:ed:87:72:37:1c:3e:e5:a7:87:
                    c2:bf:81:1e:40:e0:af:a1:34:51:b0:dc:6a:0b:7b:
                    7d:84:f5:1f:80:21:fa:1e:21:50:c4:15:6e:d1:e0:
                    ab:5a:58:43:56:1a:1e:1f:ca:de:55:4e:a3:e7:41:
                    db:b6:dc:63:5f:c0:cf:ba:f5:e2:17:d8:28:cb:ab:
                    fe:0a:de:64:c6:57:88:c4:0d:19:54:97:10:f2:41:
                    f1:89:07:e4:b5:1b:3d:a7:2f:b4:94:a5:d3:5f:14:
                    05:57:9f:4e:10:f8:eb:d2:bf:20:58:9f:f4:7b:49:
                    7a:ea:4b:62:f7:b8:67:a5:85:5d:36:95:e5:54:62:
                    b5:75:cf:a4:77:bd:24:90:7d:84:54:af:e7:28:0b:
                    71:02:e0:07:34:9b:53:4a:bb:9b:28:fd:1e:19:71:
                    fa:72:d5:91:30:bf:68:46:32:ea:c0:04:ff:a9:57:
                    05:11:70:dd:a8:76:55:da:2e:09:4c:39:7d:bc:fc:
                    c7:73:7e:c5:c4:e9:be:0d:c8:77:f5:cc:7e:57:c4:
                    46:ef:e1:1f:72:70:17:5b:3f:fc:53:d3:dc:5c:58:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:17:1E:88:2E:E3:07:2F:94:98:E8:25:3B:64:A9:E2:91:A1:9E
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:ac:21:f4:e8:ac:f4:35:91:1b:99:59:ab:bb:b7:88:33:
         3b:b8:28:ba:15:a2:c6:fc:f6:a3:25:f1:f6:80:99:65:b4:a9:
         43:54:48:e3:9d:60:7b:de:72:d4:ca:01:30:3c:fe:c3:08:1e:
         79:cd:d1:54:95:b7:ca:73:0d:66:02:0e:b1:57:15:14:ec:14:
         e1:bd:97:56:5b:5e:4c:0b:ad:b9:69:a6:e4:60:38:c4:05:bd:
         67:65:3d:10:f5:e4:35:88:a6:4b:3b:a1:1f:5f:6e:ed:09:2e:
         eb:f5:4b:30:7f:53:26:5a:58:02:18:7f:dd:15:07:14:84:30:
         33:c5:59:02:a0:fd:5d:a6:39:0d:ad:08:e3:0e:ff:6d:b5:e9:
         fc:f8:5d:bf:bc:97:16:57:d4:41:ed:c6:ab:23:f9:87:2a:d2:
         4c:7a:e4:69:02:b5:d3:dc:cf:b4:39:ae:02:56:85:d2:6e:12:
         38:f5:8d:f8:57:85:15:e1:19:51:c8:2d:52:e6:aa:c2:6f:f5:
         3a:97:8b:5a:ae:58:44:4b:08:c9:b9:61:b3:92:2f:2c:d7:04:
         ff:ae:48:54:99:1a:e3:7e:0f:72:cc:0a:71:b5:77:bb:44:a0:
         03:71:8c:5b:66:7d:1e:70:29:f5:25:41:77:70:a2:a0:43:20:
         3a:3c:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:12:15 2024 by rpki-client on console-fra.rpki-client.org