Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File:                     v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier:          RtK9ygClL9pRs5QXkJdHkGkf2bIleHWbyHhqqCoyoGo=
Subject key identifier:   3D:8B:22:3B:13:B0:51:42:A3:15:F6:78:BA:F8:5B:E2:2C:E3:B9:CA
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       0192121ADC07CC4F75EF0F668AB4ED3F242D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number:          12D9
Signing time:             Sat 21 Sep 2024 01:03:22 +0000
Manifest this update:     Sat 21 Sep 2024 01:03:22 +0000
Manifest next update:     Sun 22 Sep 2024 01:03:22 +0000
Files and hashes:         1: 1-mTIpifqGGuetW7O65aGqC14PdI.roa (hash: xsu9jJIKUjptQptSEr0fS8KvLdUeDd+Us7kynUh+Kt8=)
                          2: 1-pidP3Ie3B_dZsu5BQm1HlyXHEM.roa (hash: nHGRlh3ljxHkgL+XSAc+UiRxMpE+QdYpUDtMmEI6X/I=)
                          3: 7z-coQEMjtiCrDoG_9Fjeu6gTM8.roa (hash: zQIjvTdnrxriM+ypw/fpIubVgc6iGVdC5GET9xB41cs=)
                          4: Bznr5KOUJrVuR7aiMFfF4Zwzw1E.roa (hash: Z3M5ZIoFGewg1F/Yi0d+EZLmt4bVSdsxUuaEtWTXgXY=)
                          5: H4CRwTeLla254FAPcXCFofxqVnw.roa (hash: G/j73AVRwzxDaVslCN0bErw46/RxitGTVi5ZF52ARtU=)
                          6: HchE6Q3vZUUOQLd7k9lL15A7tcM.roa (hash: n1Nxx25MBWUw9NzqxqgBPFgdi4hdZJMlaR0dwwu1MS0=)
                          7: JDgoSG4Gm5mRrsOW6a5reMjHods.roa (hash: iIVy15KZVm+4APma0pRDWPbbYPKLU+oi2nxsDe2h62Q=)
                          8: N95SjD9jaTMzN3i0kRDtPRPjEes.roa (hash: JIYeWSh4NX8SK1c+Gvd6/hm/hW3f4xL03mxmhqbLCUU=)
                          9: NP08pz_FABM2pKG2F9tUDIbGvnQ.roa (hash: JuwVvNRx9/uPTnHMrdQ/of9PjzB81I8V7Nnxgvxx+BE=)
                          10: RAjQIXD5NfJwy1fw7UGZEfMpd-g.roa (hash: mOpz4+gzcfSDFZF7WDt2pmWr8S21vEe8P/3yJbxuKI4=)
                          11: Ui-Rat2MUK3NnEwNsRpH6RDEZio.roa (hash: uhvWQIQXKRycViH6j7reHHm0rqGCNBmBot9A5e3R3GI=)
                          12: W55eSvc_gsSvENsDF6ynBmxVclw.roa (hash: FDImxjK7BvdDtilI5hb0jqt/j+ES8h3hjWvTvGzDRXc=)
                          13: Xg9JwWwVpvDS4eDNz0b2wLpM7jU.roa (hash: YaIk+1MeovJ3Zs0C2ktxsmlsGcwR2z394FeK+mzZ1dE=)
                          14: YBaps3fk3ayyrGpmLCwdeEN7Bp0.roa (hash: CPY05p82aPamJlTXNey/WnTvZAQ7hXao3KoVsyf6gxQ=)
                          15: _RGblB1GOKWIMsKXKpvofZOFLmc.roa (hash: RDd6IsD0tWX4RNiP/LQzTjACJx0E5y6bh2Sxlnbv2C4=)
                          16: bheHp8Z0is1VSBEzmg9STp37tXM.roa (hash: K3wFKKjeSon5EkKfGzGpwSVqVhYU7S390QD5ERMMABg=)
                          17: ctUWeERR7eF7n1WDEfo9dhUI0e0.roa (hash: +CQ5UhusWKqlAttfTMSYKEVRBQEFey1Epy3cZFFmorM=)
                          18: hHz0t8URtIwc9lvmCm9qFgIMZxQ.roa (hash: snUKZI6Y/f7u0IWzFpeOdUy9ANqe1Gr5dymzpj4q48s=)
                          19: p5HeCIOr5hEJVzUQ9epz6ENzoUA.roa (hash: l/AKzMagv0EyRArhqAb3J9ITIRgNZAvmq+Q4qvOFme4=)
                          20: r56Ny3zXT0sX1XY1AAOzEo05FUI.roa (hash: 41ZhEZGGDHduPIQaOtKlIDtzlfA9kNoRfe4hb37oiXs=)
                          21: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: u4rMzhV942gSZlrP/auYcpjGW/7a+MZxbcaiKUo3Vts=)
                          22: wsvv44cgnrzfqOmIBHWPiBZXJHA.roa (hash: CVrhBbuHHkY4ap42pYfM5+nwyZEOL9kIopRaRq0Vp4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Sep 2024 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:12:1a:dc:07:cc:4f:75:ef:0f:66:8a:b4:ed:3f:24:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Sep 21 01:03:22 2024 GMT
            Not After : Sep 22 01:03:22 2024 GMT
        Subject: CN=3d8b223b13b05142a315f678baf85be22ce3b9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:e1:d7:7d:fd:83:36:86:cd:0e:c8:91:2b:
                    bd:e5:a5:2f:67:f7:d3:db:3f:93:ed:76:e2:9b:55:
                    ea:42:21:8e:37:79:cc:a4:2b:a9:34:81:71:b5:1d:
                    34:7f:e3:bc:ea:c9:bb:69:f6:f5:f9:a2:a0:d2:a0:
                    23:3e:07:95:fd:59:a3:62:1b:6d:76:89:56:ed:6f:
                    6d:f1:b5:b3:d7:cb:50:36:c8:85:26:9e:b0:4e:d3:
                    12:dc:0c:90:95:a7:80:23:5c:d5:0e:bd:a3:0e:e8:
                    ca:b9:5d:6f:c5:7a:f8:dd:1e:6c:40:3f:92:d0:b8:
                    3d:8a:7f:63:10:c3:38:1b:70:99:0b:3c:d0:ff:65:
                    ff:a4:b8:c4:d8:f7:a3:58:d8:69:da:8b:36:6f:76:
                    d4:3b:fa:f5:7b:9b:7e:09:38:ab:a6:db:d9:4b:9f:
                    89:32:41:36:35:b4:05:6c:1d:43:0c:08:be:9d:34:
                    2d:a8:32:1d:f4:32:9a:9f:35:72:98:69:67:76:d7:
                    a9:78:46:1a:5c:44:15:5a:87:05:92:28:fa:da:87:
                    0e:13:0b:bc:8f:53:e9:14:14:ef:c4:ac:7f:19:e1:
                    f8:85:e2:00:77:7f:e3:40:ad:eb:da:1a:96:6a:10:
                    99:6c:4a:9c:28:b4:c7:02:76:4e:03:1c:64:76:83:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:22:3B:13:B0:51:42:A3:15:F6:78:BA:F8:5B:E2:2C:E3:B9:CA
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:cf:db:0e:37:f0:2e:39:9d:f1:9e:17:ec:9b:79:4d:c2:
         c4:9f:b8:6f:93:d6:13:13:f2:84:73:ba:b8:4b:39:fa:d0:76:
         3d:b2:3c:d0:21:d5:1b:fc:27:1c:e9:f4:a5:fa:f5:34:2a:6a:
         45:f9:23:fb:a3:c9:86:a8:2a:60:ef:9b:94:91:4b:2c:f5:26:
         d5:7b:8f:41:6b:a0:d9:ab:b1:94:4a:19:7a:04:6a:8e:b9:39:
         7f:06:6e:ff:29:da:66:d0:38:e1:84:b3:d2:8f:b3:12:ee:c4:
         01:31:42:26:12:d0:50:98:15:15:90:5e:f7:01:eb:8f:ea:56:
         5e:9d:06:5c:18:d8:8f:85:4b:e0:cb:8f:a6:40:f0:4d:87:8e:
         37:79:7e:fa:8f:2f:66:d7:9a:5e:a3:c0:11:97:ee:07:4f:a4:
         5b:13:b3:b6:39:c5:ee:25:1d:c8:b9:33:47:4d:e0:a7:fb:71:
         dd:e3:0b:8f:44:e6:f3:c9:10:a7:ce:e4:39:4a:ee:57:9d:74:
         95:8d:a4:f1:9f:25:6f:11:47:dc:ff:b2:59:81:9a:f1:0a:91:
         0b:37:8a:82:48:27:1f:3b:e3:4d:f1:00:38:72:c9:11:8a:d1:
         69:fa:13:66:c2:b4:be:85:25:3e:fe:87:8a:4e:30:58:c7:a2:
         92:91:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 09:05:17 2024 by rpki-client on console-ams.rpki-client.org