Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          q3UGmlCU4GkRMM3my8l9uDMPKecBTtZ5PfJFLqZi1Sw=
Subject key identifier:   66:60:37:FF:52:34:DE:C4:AA:26:9B:4D:AD:6D:A5:09:B2:5D:69:51
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       0193572DA6889E41D996C0FD078E9A8345D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          06F1
Signing time:             Sat 23 Nov 2024 04:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:29 +0000
Files and hashes:         1: b51WSo76tNx1EVorAemwzf_9PDM.roa (hash: 3qhGUv8rMbnpVtsBjk5d/kflZTyGqCG2s8ulwQdBDJ4=)
                          2: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: d781hRrO5Q+YUHzAMChV5yEFH1eONH74YNLKMrash+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a6:88:9e:41:d9:96:c0:fd:07:8e:9a:83:45:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Nov 23 04:00:29 2024 GMT
            Not After : Nov 24 04:00:29 2024 GMT
        Subject: CN=666037ff5234dec4aa269b4dad6da509b25d6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:8f:47:19:8b:c2:3e:46:e1:b6:4d:11:1e:
                    82:f6:30:e0:da:eb:48:42:b3:8c:59:f5:a9:16:37:
                    aa:1d:0b:ac:25:2a:43:23:fd:97:80:eb:a5:4f:43:
                    e2:3d:48:f5:8e:59:f2:8a:b0:66:9e:91:ed:ee:8b:
                    51:cc:d5:21:03:a5:6a:89:5b:e7:15:d1:d6:ea:f8:
                    66:c4:89:71:8e:ee:3a:03:a1:9f:a6:98:3c:c4:37:
                    83:70:eb:95:79:8b:18:49:a0:93:04:cf:5c:70:3b:
                    32:f6:06:8d:2d:a4:43:d1:ca:88:37:2f:f2:19:23:
                    73:52:cc:33:8c:33:9f:34:55:74:e2:80:bb:15:d0:
                    cd:95:1d:55:30:e4:ef:41:72:65:a6:e4:40:dc:3c:
                    ae:f9:41:f5:b0:9f:5f:e9:4e:0b:65:46:97:a0:c2:
                    3a:e0:75:6d:32:48:52:a2:5a:72:b4:bf:48:42:8a:
                    2b:b8:36:60:07:36:b4:e1:ce:4b:10:1e:68:08:58:
                    53:ca:2e:95:a4:4e:99:0e:a3:59:3b:5c:d6:cc:e0:
                    0e:c4:95:0e:a7:f1:07:fd:51:f0:e6:1b:f0:ff:b0:
                    23:5e:d4:b2:3c:a9:01:61:74:51:0c:2b:27:f5:57:
                    6b:6e:fd:03:a9:e8:3b:7e:ad:a5:70:a6:0a:30:f5:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:37:FF:52:34:DE:C4:AA:26:9B:4D:AD:6D:A5:09:B2:5D:69:51
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:98:58:52:65:8f:2c:13:86:cf:e1:66:19:df:34:26:9c:64:
         b7:77:27:c8:a5:04:b4:33:42:c6:49:51:a2:3c:ab:b4:1e:de:
         8e:3e:24:38:a6:56:50:50:4e:4e:1d:98:0d:b2:d2:85:cc:32:
         ec:8c:39:72:55:52:5f:8a:3f:26:80:ae:95:61:09:ae:2f:4a:
         07:0d:57:04:e6:38:bf:e0:35:22:15:64:71:ee:96:5f:79:d9:
         f4:2b:37:41:5d:17:3d:5b:39:bd:18:b7:5a:fe:0a:83:28:04:
         5c:af:dc:e0:bc:ec:0c:a8:ed:b3:1e:89:48:73:63:cd:02:16:
         3f:7f:ba:1d:a1:f9:8d:b3:6d:1f:da:e8:50:b9:da:8c:f5:c4:
         6d:1a:25:8d:db:31:ea:a5:d1:b8:89:de:d7:f8:e3:70:84:63:
         c1:49:9e:1d:b7:f2:f4:74:32:37:24:a3:3d:33:2f:3f:92:9f:
         e6:40:b4:2a:20:0a:6d:9a:70:7f:b1:3c:76:0f:75:4d:13:7e:
         82:84:79:6e:e9:36:78:23:5c:75:67:95:87:33:8b:38:a6:b5:
         35:ec:de:80:56:b8:67:af:e8:db:16:c6:d5:c6:b8:7c:f9:7a:
         0a:0f:1e:dd:f0:5a:73:d7:54:fa:4c:1e:b9:c5:fb:cb:60:b6:
         42:46:30:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaaInkHZlsD9B46ag0XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYjMxNGQ3ZTM2OTAxZjZkZWE3YzAyOTFhNTE1MzNiYjIy
NGYzYjMwHhcNMjQxMTIzMDQwMDI5WhcNMjQxMTI0MDQwMDI5WjAzMTEwLwYDVQQD
Eyg2NjYwMzdmZjUyMzRkZWM0YWEyNjliNGRhZDZkYTUwOWIyNWQ2OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPqPRxmLwj5G4bZNER6C9jDg2utI
QrOMWfWpFjeqHQusJSpDI/2XgOulT0PiPUj1jlnyirBmnpHt7otRzNUhA6VqiVvn
FdHW6vhmxIlxju46A6Gfppg8xDeDcOuVeYsYSaCTBM9ccDsy9gaNLaRD0cqINy/y
GSNzUswzjDOfNFV04oC7FdDNlR1VMOTvQXJlpuRA3Dyu+UH1sJ9f6U4LZUaXoMI6
4HVtMkhSolpytL9IQooruDZgBza04c5LEB5oCFhTyi6VpE6ZDqNZO1zWzOAOxJUO
p/EH/VHw5hvw/7AjXtSyPKkBYXRRDCsn9Vdrbv0Dqeg7fq2lcKYKMPXrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZgN/9SNN7EqiabTa1tpQmyXWlRMB8GA1UdIwQY
MBaAFLuzFNfjaQH23qfAKRpRUzuyJPOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWIt
Zjk4ZWM3NGFiZmQ1LzEvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWItZjk4ZWM3NGFiZmQ1
LzEvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZhYUmWP
LBOGz+FmGd80Jpxkt3cnyKUEtDNCxklRojyrtB7ejj4kOKZWUFBOTh2YDbLShcwy
7Iw5clVSX4o/JoCulWEJri9KBw1XBOY4v+A1IhVkce6WX3nZ9Cs3QV0XPVs5vRi3
Wv4KgygEXK/c4LzsDKjtsx6JSHNjzQIWP3+6HaH5jbNtH9roULnajPXEbRoljdsx
6qXRuIne1/jjcIRjwUmeHbfy9HQyNySjPTMvP5Kf5kC0KiAKbZpwf7E8dg91TRN+
goR5buk2eCNcdWeVhzOLOKa1NezegFa4Z6/o2xbG1ca4fPl6Cg8e3fBac9dU+kwe
ucX7y2C2QkYw2w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:29 2024 by rpki-client on console-fra.rpki-client.org