Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File:                     7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier:          xOXKEVpkfAsYGBfj7AUkwh2hXxb+cHVWje4iVwKo6i0=
Subject key identifier:   29:E1:80:F3:E6:1F:68:61:AE:DB:CC:1C:D5:05:71:EB:69:88:9F:87
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer:       /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial:       01925C1FF01939047A6CB115F46B4040BDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number:          12F0
Signing time:             Sat 05 Oct 2024 10:00:49 +0000
Manifest this update:     Sat 05 Oct 2024 10:00:49 +0000
Manifest next update:     Sun 06 Oct 2024 10:00:49 +0000
Files and hashes:         1: 1-lz0nFUI1y0v8SBY_R-4Uq8-BY0.roa (hash: VG/JnKZElYNIGh89HVAngmxCEcurmKg7MzHOLkoTCUU=)
                          2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: RY3r/nyGSK9OkjaBKUZcZY2bvXEaD1NgdyyEwFgBSck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Oct 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:5c:1f:f0:19:39:04:7a:6c:b1:15:f4:6b:40:40:bd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
        Validity
            Not Before: Oct  5 10:00:49 2024 GMT
            Not After : Oct  6 10:00:49 2024 GMT
        Subject: CN=29e180f3e61f6861aedbcc1cd50571eb69889f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:a1:8d:7d:e2:cb:85:56:54:95:4e:2c:e8:
                    32:07:0f:87:ac:46:3f:95:81:46:40:a1:98:72:1a:
                    27:62:9a:39:a5:5b:08:36:74:83:8a:d2:00:59:13:
                    0b:38:80:70:46:4c:b8:62:02:ad:79:08:bc:56:53:
                    17:b5:36:9a:02:61:46:5a:33:2c:e9:2d:c5:10:95:
                    e1:67:5f:82:9f:61:86:87:f1:e1:12:8b:2a:6e:18:
                    02:9a:6b:9d:c1:b6:c9:5f:d8:08:55:5c:fe:35:3f:
                    cc:f3:86:72:92:e2:61:98:68:93:49:e5:a5:b3:43:
                    d0:4d:78:9d:60:71:a4:a0:0a:3b:3d:a4:93:a4:a9:
                    bf:a7:07:3f:b2:56:73:cf:cd:76:b3:9e:2a:0f:48:
                    b7:e3:42:26:9b:15:e5:1e:59:8e:9d:af:c1:53:7f:
                    c9:e9:9e:f0:5b:90:66:cc:5c:91:fa:88:e7:8a:a7:
                    e9:20:32:08:8c:2f:71:a7:a4:99:c1:52:5b:12:28:
                    7e:0a:4f:98:24:7f:65:ba:b4:a7:8b:94:96:f8:77:
                    43:b4:91:bb:8d:0e:1c:ef:7b:11:c3:f1:ea:1f:60:
                    81:d7:72:1d:ee:fe:c6:28:f1:3d:91:40:51:b6:78:
                    11:a7:15:ed:9b:1d:24:6c:e4:82:a5:b4:7a:0a:87:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E1:80:F3:E6:1F:68:61:AE:DB:CC:1C:D5:05:71:EB:69:88:9F:87
            X509v3 Authority Key Identifier:
                keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:1e:d7:1a:f3:6d:21:7e:44:14:3d:0c:38:63:be:f1:c9:
         16:28:06:a8:45:28:be:89:4e:28:38:91:59:cf:86:82:70:a1:
         cc:be:51:36:09:be:f7:39:e0:8f:07:e0:3a:c3:71:6a:e9:d2:
         63:01:ef:37:51:04:d1:37:ca:b7:94:0b:92:bd:81:d4:02:61:
         0e:89:79:bd:2b:eb:27:dd:00:49:bb:b0:1a:f3:39:34:71:09:
         4c:13:02:b2:bd:1f:5b:bf:42:53:a1:5d:56:bd:16:46:2a:05:
         39:58:04:c0:25:8b:76:d0:52:ba:da:d9:2c:94:ac:d6:14:a6:
         37:7e:4f:07:1b:45:97:07:8d:7b:ff:c1:ea:7e:0f:c6:b6:66:
         a3:12:48:1b:46:0b:ff:0f:52:d0:a4:78:0b:04:1f:9c:dc:1d:
         56:a5:9e:f7:d5:a0:e9:cd:e5:88:6b:71:ac:6c:33:3a:7f:85:
         73:b8:ee:a3:42:50:da:b6:c7:55:f9:32:78:1b:38:63:ce:29:
         18:2e:ab:48:e3:3e:3e:a8:4f:87:bb:96:d1:28:a6:bc:8f:89:
         06:bc:2d:04:df:65:45:fb:3d:9b:0c:6d:d1:fa:68:fb:17:75:
         cc:df:45:ec:fb:80:f4:0c:71:1b:19:2d:07:ba:31:fa:5d:a1:
         46:e6:d3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJcH/AZOQR6bLEV9GtAQL3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk
NDBlMWQwHhcNMjQxMDA1MTAwMDQ5WhcNMjQxMDA2MTAwMDQ5WjAzMTEwLwYDVQQD
EygyOWUxODBmM2U2MWY2ODYxYWVkYmNjMWNkNTA1NzFlYjY5ODg5Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJGhjX3iy4VWVJVOLOgyBw+HrEY/
lYFGQKGYchonYpo5pVsINnSDitIAWRMLOIBwRky4YgKteQi8VlMXtTaaAmFGWjMs
6S3FEJXhZ1+Cn2GGh/HhEosqbhgCmmudwbbJX9gIVVz+NT/M84ZykuJhmGiTSeWl
s0PQTXidYHGkoAo7PaSTpKm/pwc/slZzz812s54qD0i340ImmxXlHlmOna/BU3/J
6Z7wW5BmzFyR+ojniqfpIDIIjC9xp6SZwVJbEih+Ck+YJH9lurSni5SW+HdDtJG7
jQ4c73sRw/HqH2CB13Id7v7GKPE9kUBRtngRpxXtmx0kbOSCpbR6CoeNDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnhgPPmH2hhrtvMHNUFcetpiJ+HMB8GA1UdIwQY
MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt
NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl
LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOy8e1xrz
bSF+RBQ9DDhjvvHJFigGqEUovolOKDiRWc+GgnChzL5RNgm+9zngjwfgOsNxaunS
YwHvN1EE0TfKt5QLkr2B1AJhDol5vSvrJ90ASbuwGvM5NHEJTBMCsr0fW79CU6Fd
Vr0WRioFOVgEwCWLdtBSutrZLJSs1hSmN35PBxtFlweNe//B6n4PxrZmoxJIG0YL
/w9S0KR4CwQfnNwdVqWe99Wg6c3liGtxrGwzOn+Fc7juo0JQ2rbHVfkyeBs4Y84p
GC6rSOM+PqhPh7uW0SimvI+JBrwtBN9lRfs9mwxt0fpo+xd1zN9F7PuA9AxxGxkt
B7ox+l2hRubTcw==
-----END CERTIFICATE-----
Generated at Sat Oct 5 13:22:59 2024 by rpki-client on console-fra.rpki-client.org