Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          vwgOFyukdjREK5iYycdR/N4i9AHFqOr5DFzfoiltB9s=
Subject key identifier:   E3:09:4B:2D:FC:52:AD:EC:20:13:8C:75:D4:D5:4A:06:3D:4B:3A:9D
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       01936A0F96CC55C4F4A5CE1DB29D175ED745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          04E9
Signing time:             Tue 26 Nov 2024 20:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:26 +0000
Files and hashes:         1: jLVYTPqiK-Odf1onSnsO9bPFPpY.roa (hash: C2HbNUOuO4xm0hiQYPxzAy1vqqhneTw/J6sQw3c1uc4=)
                          2: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: 7tbyv2PZVUMOV0n0CMOvH1gjw/bWHxwHpcxKvas7TMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:96:cc:55:c4:f4:a5:ce:1d:b2:9d:17:5e:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: Nov 26 20:00:26 2024 GMT
            Not After : Nov 27 20:00:26 2024 GMT
        Subject: CN=e3094b2dfc52adec20138c75d4d54a063d4b3a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:98:a4:3a:65:25:ce:eb:cc:a6:4c:7f:21:
                    29:49:1a:c5:75:ca:0e:83:e1:39:4d:61:c9:b0:bc:
                    ed:10:fb:c8:be:91:80:6d:4e:cb:3b:c1:cf:91:7a:
                    5b:67:54:fb:16:fd:80:24:bc:20:04:76:0b:f1:66:
                    36:21:d1:f5:f4:77:81:a7:6f:3f:00:f2:5e:f9:aa:
                    d4:ec:f5:29:1c:5f:98:c8:37:4c:0e:ed:8c:1c:ff:
                    ee:32:77:0d:57:62:17:22:85:3b:3f:28:a2:51:97:
                    a5:f4:65:d4:0a:43:7a:44:f7:ce:19:3f:a9:9c:66:
                    c3:6a:d2:68:9e:b9:c8:5d:1d:bb:ec:f2:62:8e:bc:
                    b5:55:09:a4:75:1a:07:a4:2f:cf:f7:1a:85:82:d5:
                    fd:ed:ae:1a:66:71:d1:32:e5:cd:df:87:1e:dc:31:
                    e2:ac:f5:5a:3f:45:a2:22:8c:d9:f8:0a:97:3c:fb:
                    1d:20:46:f3:54:2f:e9:fb:c8:95:92:c1:3d:61:df:
                    92:97:66:91:6a:29:bf:fd:53:0c:0d:1a:49:a9:45:
                    30:7f:82:e4:f6:6d:0c:7c:fe:c1:a7:c1:58:7d:f6:
                    33:5e:11:04:00:82:bf:83:ed:b4:53:37:f9:32:4d:
                    e1:f7:15:ba:a2:fd:eb:85:f2:d4:ba:f8:de:0c:36:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:4B:2D:FC:52:AD:EC:20:13:8C:75:D4:D5:4A:06:3D:4B:3A:9D
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:08:a2:20:e1:9c:f0:d5:b3:d8:da:da:f0:d4:1e:ba:df:
         0c:a6:2a:21:d4:f9:57:89:40:94:a4:1c:a1:e8:f3:ca:6a:c6:
         a6:64:c0:39:b1:1e:7a:f1:26:98:96:7e:b9:6f:c5:44:13:b5:
         92:cc:66:f0:b7:26:d5:d7:9d:fe:35:ce:be:19:4d:b7:cb:bd:
         76:e1:9c:a2:75:9b:12:50:78:4c:6c:c9:29:05:9a:bd:88:96:
         be:d7:7e:52:37:5c:b9:09:8d:92:6f:b5:49:95:65:37:e2:d9:
         32:90:a0:e3:fa:15:ec:9c:28:e6:4b:26:22:11:4b:b2:a8:4a:
         c0:32:fe:27:7f:86:bb:c6:82:0d:28:3e:7e:49:93:b7:a5:5d:
         70:ac:90:79:51:a8:f3:b9:ef:7b:6e:ad:1d:39:5f:14:36:34:
         4e:38:cd:30:bd:a6:71:60:71:91:2b:5c:0b:ad:15:1c:55:39:
         bc:09:16:57:34:9e:e6:1a:8f:c0:56:2e:65:6d:73:61:a9:cd:
         3c:90:4c:ae:14:9d:09:dd:82:f4:4a:44:e6:ac:dd:24:0d:16:
         f6:0a:7f:49:f2:56:da:ea:95:1b:2e:70:4f:d2:13:97:6e:84:
         0a:c2:17:cd:7c:81:e5:ab:04:55:49:82:64:c4:d6:43:fc:ad:
         69:18:65:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqD5bMVcT0pc4dsp0XXtdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjc3ZTUyY2M3NzdhMWVhZmU2OWE1MTdmOTVkMmMyMTlj
MTkwODAwHhcNMjQxMTI2MjAwMDI2WhcNMjQxMTI3MjAwMDI2WjAzMTEwLwYDVQQD
EyhlMzA5NGIyZGZjNTJhZGVjMjAxMzhjNzVkNGQ1NGEwNjNkNGIzYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeSYpDplJc7rzKZMfyEpSRrFdcoO
g+E5TWHJsLztEPvIvpGAbU7LO8HPkXpbZ1T7Fv2AJLwgBHYL8WY2IdH19HeBp28/
APJe+arU7PUpHF+YyDdMDu2MHP/uMncNV2IXIoU7PyiiUZel9GXUCkN6RPfOGT+p
nGbDatJonrnIXR277PJijry1VQmkdRoHpC/P9xqFgtX97a4aZnHRMuXN34ce3DHi
rPVaP0WiIozZ+AqXPPsdIEbzVC/p+8iVksE9Yd+Sl2aRaim//VMMDRpJqUUwf4Lk
9m0MfP7Bp8FYffYzXhEEAIK/g+20Uzf5Mk3h9xW6ov3rhfLUuvjeDDajSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMJSy38Uq3sIBOMddTVSgY9SzqdMB8GA1UdIwQY
MBaAFLO3flLMd3oer+aaUX+V0sIZwZCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUt
YjRhZWU4YzVkNDhlLzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUtYjRhZWU4YzVkNDhl
LzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw4IoiDh
nPDVs9ja2vDUHrrfDKYqIdT5V4lAlKQcoejzymrGpmTAObEeevEmmJZ+uW/FRBO1
ksxm8Lcm1ded/jXOvhlNt8u9duGconWbElB4TGzJKQWavYiWvtd+UjdcuQmNkm+1
SZVlN+LZMpCg4/oV7Jwo5ksmIhFLsqhKwDL+J3+Gu8aCDSg+fkmTt6VdcKyQeVGo
87nve26tHTlfFDY0TjjNML2mcWBxkStcC60VHFU5vAkWVzSe5hqPwFYuZW1zYanN
PJBMrhSdCd2C9EpE5qzdJA0W9gp/SfJW2uqVGy5wT9ITl26ECsIXzXyB5asEVUmC
ZMTWQ/ytaRhlEA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:17 2024 by rpki-client on console-ams.rpki-client.org