Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File:                     7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier:          HQCc28dAOqYtxB6WzgbsdVO2jI1CTEXkZY3tvVfSLig=
Subject key identifier:   13:87:0D:20:1A:AF:F3:C1:82:F0:93:92:F9:9F:C3:EB:F9:A8:34:07
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer:       /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial:       019358ADF0539EE82C515D7EC192A01CB326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 11:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:14 +0000
Files and hashes:         1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: O8AnoSGcvzSDsbKW42w8QNZ6NkxH8v7G6Rr93f2cfME=)
                          2: y4_wgVzwUNX_K2PSeU-Nys7BM58.roa (hash: V1u6tfe1lPofb980Khn7LGZjnfw/LKmwaIIzLoIkp7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:f0:53:9e:e8:2c:51:5d:7e:c1:92:a0:1c:b3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
        Validity
            Not Before: Nov 23 11:00:14 2024 GMT
            Not After : Nov 24 11:00:14 2024 GMT
        Subject: CN=13870d201aaff3c182f09392f99fc3ebf9a83407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:88:2e:07:8d:85:42:79:f4:f0:c6:00:5c:
                    bc:67:3e:76:42:e3:d0:fc:42:e1:0b:ac:52:3c:1c:
                    36:28:3c:4c:a3:64:78:72:09:6a:aa:93:cd:b3:a8:
                    b8:f5:7b:e4:0f:41:3c:d2:05:b7:3f:01:c7:6d:fc:
                    d4:20:84:d4:70:cd:d3:f4:9c:ce:fd:a2:95:9b:b3:
                    3d:13:8c:9a:80:38:7c:29:bc:9e:0c:c2:aa:d5:7b:
                    1d:7c:81:e4:80:a8:98:52:01:cb:a5:11:f4:3d:93:
                    cc:47:8a:ee:b8:9a:16:46:cf:2e:c1:ce:39:27:d4:
                    72:8a:b6:60:af:c6:01:28:ce:95:b7:0d:90:89:46:
                    fc:ea:81:42:aa:36:c4:0e:87:8a:65:a3:dd:e2:a6:
                    04:19:9f:13:a4:c0:67:d2:87:bc:e5:dd:01:3a:e6:
                    7e:37:e1:9a:7b:5d:0e:13:8e:40:8c:21:d2:8c:3b:
                    af:e1:33:bd:08:36:68:a9:14:78:e9:a6:43:18:e6:
                    70:39:42:f0:f4:df:c3:e8:7a:55:2c:24:7c:2d:a4:
                    e4:ae:db:23:4e:66:ed:e7:86:fa:f1:dd:33:3f:3e:
                    80:44:45:b3:8e:29:9b:3b:16:d3:d8:2d:22:8e:49:
                    3c:47:2b:b7:1a:7d:c5:40:78:ef:d5:95:ab:0a:32:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:0D:20:1A:AF:F3:C1:82:F0:93:92:F9:9F:C3:EB:F9:A8:34:07
            X509v3 Authority Key Identifier:
                keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:11:e1:8e:70:17:fc:90:bd:0c:95:34:cd:0b:d2:dc:18:
         d4:3b:84:cd:1e:3b:3c:53:ac:9a:46:cb:aa:3a:e6:ac:8e:cf:
         ea:93:46:9f:fe:6b:4e:2d:f2:e1:ee:cf:d6:1c:04:57:09:1e:
         34:d4:f6:d0:7c:ca:95:c5:cc:a1:4d:b8:76:bd:fd:5a:46:32:
         80:53:2b:4d:24:c6:32:09:09:48:44:7e:ce:c5:5c:72:8b:c7:
         86:85:b3:ce:f2:fa:ad:c6:bf:23:93:97:89:59:58:2e:3f:ef:
         88:df:b3:b9:ed:cb:bb:cd:83:b0:99:4b:11:73:c0:f1:7d:ff:
         68:2e:15:68:12:12:06:de:ef:f5:af:c3:06:de:42:b0:fe:22:
         19:79:7a:95:49:d3:7d:fe:30:e4:14:e9:38:36:db:5c:b4:e1:
         80:bb:2a:2e:23:46:f5:06:af:2a:26:af:aa:b3:98:39:f1:4c:
         87:cb:28:f8:a4:97:15:e2:96:03:cf:7e:42:04:af:00:8e:64:
         c2:ee:9c:bb:bb:0d:95:7d:1c:4a:06:9a:9a:9d:9f:34:8b:57:
         79:5e:63:5b:c9:8b:59:32:22:ce:ff:9a:05:cb:1e:7b:dc:d2:
         7c:94:ec:1d:d4:59:96:93:10:16:fd:ee:68:f2:b0:2b:42:18:
         32:bd:ac:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYrfBTnugsUV1+wZKgHLMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjQxMTIzMTEwMDE0WhcNMjQxMTI0MTEwMDE0WjAzMTEwLwYDVQQD
EygxMzg3MGQyMDFhYWZmM2MxODJmMDkzOTJmOTlmYzNlYmY5YTgzNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nGILgeNhUJ59PDGAFy8Zz52QuPQ
/ELhC6xSPBw2KDxMo2R4cglqqpPNs6i49XvkD0E80gW3PwHHbfzUIITUcM3T9JzO
/aKVm7M9E4yagDh8KbyeDMKq1XsdfIHkgKiYUgHLpRH0PZPMR4ruuJoWRs8uwc45
J9RyirZgr8YBKM6Vtw2QiUb86oFCqjbEDoeKZaPd4qYEGZ8TpMBn0oe85d0BOuZ+
N+Gae10OE45AjCHSjDuv4TO9CDZoqRR46aZDGOZwOULw9N/D6HpVLCR8LaTkrtsj
Tmbt54b68d0zPz6AREWzjimbOxbT2C0ijkk8Ryu3Gn3FQHjv1ZWrCjJdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOHDSAar/PBgvCTkvmfw+v5qDQHMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3IR4Y5w
F/yQvQyVNM0L0twY1DuEzR47PFOsmkbLqjrmrI7P6pNGn/5rTi3y4e7P1hwEVwke
NNT20HzKlcXMoU24dr39WkYygFMrTSTGMgkJSER+zsVccovHhoWzzvL6rca/I5OX
iVlYLj/viN+zue3Lu82DsJlLEXPA8X3/aC4VaBISBt7v9a/DBt5CsP4iGXl6lUnT
ff4w5BTpODbbXLThgLsqLiNG9QavKiavqrOYOfFMh8so+KSXFeKWA89+QgSvAI5k
wu6cu7sNlX0cSgaamp2fNItXeV5jW8mLWTIizv+aBcsee9zSfJTsHdRZlpMQFv3u
aPKwK0IYMr2s9Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:58:04 2024 by rpki-client on console-fra.rpki-client.org