Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          ITVYBlyDZXS+g5+y9u4u6u/9Vka/YwJUkAicxiOilpI=
Subject key identifier:   EC:AE:08:CC:87:78:9A:B7:A5:C4:E2:FC:14:D7:66:94:7A:94:D9:2B
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       0192B4BEB1D782185D8A68E4508F27EB24D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          7A
Signing time:             Tue 22 Oct 2024 15:00:49 +0000
Manifest this update:     Tue 22 Oct 2024 15:00:49 +0000
Manifest next update:     Wed 23 Oct 2024 15:00:49 +0000
Files and hashes:         1: 8sJ26ivXixcrMxFSRjNwqFmfcN4.roa (hash: Q0VnJ3nIOvd3ftcF3NH5hzfM8Q94jyMHrfiKGij2p80=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: /uH6zXB4/g806FAzNCwljyE3cdXzokauyWiks1j2oUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b4:be:b1:d7:82:18:5d:8a:68:e4:50:8f:27:eb:24:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Oct 22 15:00:49 2024 GMT
            Not After : Oct 23 15:00:49 2024 GMT
        Subject: CN=ecae08cc87789ab7a5c4e2fc14d766947a94d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:7f:16:82:d6:6e:ea:85:3b:db:8c:38:21:
                    62:fe:da:6f:f4:fb:2f:19:23:d8:8b:68:ee:89:a4:
                    34:d8:36:ac:3b:77:78:fc:43:7d:1e:9e:89:2a:44:
                    e1:08:68:7d:29:8e:c0:8b:65:98:9d:4f:52:95:d0:
                    c9:df:1e:9e:a9:e3:7f:74:13:f9:ca:70:38:cd:41:
                    01:5a:bf:29:ec:20:42:0e:73:ff:b3:81:73:26:30:
                    95:ed:45:91:ed:92:75:74:ef:8e:21:5a:a0:ce:2a:
                    c1:46:74:27:2d:32:e1:5d:17:ef:35:65:75:a1:5c:
                    f8:53:28:f6:51:b1:7a:2a:44:17:4b:3e:75:da:33:
                    b7:db:f1:68:e4:f5:ae:42:2b:2b:74:c2:e6:35:54:
                    ab:f6:55:9d:96:59:c3:43:16:c8:95:93:ad:5d:5d:
                    78:9f:a5:cf:28:0d:bd:bc:76:8e:b7:07:8c:36:f2:
                    c8:de:8a:d3:77:8d:4a:b6:c5:ae:89:55:3c:5d:1e:
                    7d:cb:27:a7:2a:20:c4:7d:43:4e:0f:83:ad:00:c0:
                    a7:f0:f9:b9:62:65:8f:cd:fc:04:e7:33:46:2c:a4:
                    0d:22:b2:70:7e:09:69:f2:29:0c:12:76:5b:f1:4b:
                    f8:33:a2:43:07:5f:0f:c4:00:6b:e4:d1:43:08:2b:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:08:CC:87:78:9A:B7:A5:C4:E2:FC:14:D7:66:94:7A:94:D9:2B
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:87:e9:28:e6:7d:43:25:74:b9:c6:7e:fa:42:f1:89:71:1c:
         03:bf:d4:2a:97:ea:f0:e4:96:82:e7:2e:7c:cf:96:84:a1:b9:
         aa:d6:90:6c:52:8b:9d:5e:9e:7b:8c:85:62:d4:60:f8:5a:70:
         5e:c2:01:11:6d:84:b7:fd:e1:af:87:d5:12:9e:50:20:6a:4a:
         c0:ea:e3:fb:46:62:e0:29:f4:5d:78:bf:20:ab:64:d9:0b:c0:
         97:de:f7:33:27:93:16:86:44:71:13:31:1f:e0:18:95:3b:ca:
         e4:a3:53:33:86:06:f1:5f:2f:66:09:4f:c1:de:e8:de:04:36:
         ff:91:f3:aa:98:04:92:ed:9d:ec:74:ca:15:4f:a2:15:1e:ea:
         1f:aa:09:b2:e0:d9:3a:12:96:ef:9d:e1:e1:00:80:bc:67:ef:
         6b:6c:31:45:7b:16:a5:a5:95:31:37:6d:d1:b3:b3:51:eb:b3:
         d6:aa:bf:6f:cf:0b:2d:41:2b:c5:bb:77:2d:b5:12:b7:31:40:
         6c:82:62:38:9a:e3:63:14:9e:d8:a9:67:14:fb:96:86:c9:96:
         e4:c8:4d:68:9e:f2:59:42:ba:2a:27:bb:6e:9d:83:32:52:e1:
         d8:fa:63:20:b0:e3:cd:5f:c8:c4:7b:cf:9d:5b:e9:77:be:83:
         c8:d8:66:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZK0vrHXghhdimjkUI8n6yTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjlmYzUwNGE0ZDIxNzhhZTRmNzNjODc3YzVmOTA3YmI0
NzZiZjgwHhcNMjQxMDIyMTUwMDQ5WhcNMjQxMDIzMTUwMDQ5WjAzMTEwLwYDVQQD
EyhlY2FlMDhjYzg3Nzg5YWI3YTVjNGUyZmMxNGQ3NjY5NDdhOTRkOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOZ/FoLWbuqFO9uMOCFi/tpv9Psv
GSPYi2juiaQ02DasO3d4/EN9Hp6JKkThCGh9KY7Ai2WYnU9SldDJ3x6eqeN/dBP5
ynA4zUEBWr8p7CBCDnP/s4FzJjCV7UWR7ZJ1dO+OIVqgzirBRnQnLTLhXRfvNWV1
oVz4Uyj2UbF6KkQXSz512jO32/Fo5PWuQisrdMLmNVSr9lWdllnDQxbIlZOtXV14
n6XPKA29vHaOtweMNvLI3orTd41KtsWuiVU8XR59yyenKiDEfUNOD4OtAMCn8Pm5
YmWPzfwE5zNGLKQNIrJwfglp8ikMEnZb8Uv4M6JDB18PxABr5NFDCCs0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyuCMyHeJq3pcTi/BTXZpR6lNkrMB8GA1UdIwQY
MBaAFLe5/FBKTSF4rk9zyHfF+Qe7R2v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEt
YmIyOTA2M2Y0ODgxLzEvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEtYmIyOTA2M2Y0ODgx
LzEvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIfpKOZ9
QyV0ucZ++kLxiXEcA7/UKpfq8OSWgucufM+WhKG5qtaQbFKLnV6ee4yFYtRg+Fpw
XsIBEW2Et/3hr4fVEp5QIGpKwOrj+0Zi4Cn0XXi/IKtk2QvAl973MyeTFoZEcRMx
H+AYlTvK5KNTM4YG8V8vZglPwd7o3gQ2/5HzqpgEku2d7HTKFU+iFR7qH6oJsuDZ
OhKW753h4QCAvGfva2wxRXsWpaWVMTdt0bOzUeuz1qq/b88LLUErxbt3LbUStzFA
bIJiOJrjYxSe2KlnFPuWhsmW5MhNaJ7yWUK6Kie7bp2DMlLh2PpjILDjzV/IxHvP
nVvpd76DyNhm6A==
-----END CERTIFICATE-----
Generated at Tue Oct 22 23:15:41 2024 by rpki-client on console-fra.rpki-client.org