Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          u0LJhbSQ7T916Hrdb2qd/iKb8StBwxqebviZL/dj9u8=
Subject key identifier:   7E:CD:84:0E:5B:36:73:77:0E:16:50:DD:BE:0F:CE:DF:1A:DF:93:00
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       0191FA10C34E6E96A5126066FBD418AA47F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          12BE
Signing time:             Mon 16 Sep 2024 09:01:28 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:28 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:28 +0000
Files and hashes:         1: 3q1itMbFui44nBJsKaLgDLNVtX0.roa (hash: YhfZdmd9WdUngCRaheiecQTZd4Il1X7xddupn/bFUGo=)
                          2: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: 5YigewaBfw1wRB4TUg2F+4WuO3kvgpqJImLh4/KfWB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:c3:4e:6e:96:a5:12:60:66:fb:d4:18:aa:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Sep 16 09:01:28 2024 GMT
            Not After : Sep 17 09:01:28 2024 GMT
        Subject: CN=7ecd840e5b3673770e1650ddbe0fcedf1adf9300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:d8:b8:74:df:91:67:2d:04:a0:74:8e:e4:
                    5f:ec:7a:85:a6:57:61:d2:59:73:32:9b:07:69:f2:
                    69:6a:4f:57:73:36:ec:74:df:d2:c5:09:d1:7e:54:
                    2e:06:4d:af:b4:d0:b1:f6:c7:7e:bd:5f:a3:6b:38:
                    7c:fb:d7:06:9a:fe:f6:ec:79:7d:9f:19:1c:20:f1:
                    f0:55:8b:6e:f8:17:22:e4:eb:eb:aa:22:03:0c:45:
                    d7:6c:6f:17:65:f4:65:9d:91:06:6e:2e:db:91:95:
                    05:73:30:05:1a:3e:fe:74:ce:e0:74:b7:a4:c0:b1:
                    97:eb:df:75:58:90:b4:87:e6:20:8a:db:7a:be:7d:
                    64:b1:d3:37:c5:27:88:7b:55:af:7c:4c:bb:41:e8:
                    d9:14:b4:07:21:f3:1c:b5:0b:4c:0a:4b:e1:bd:b4:
                    0c:27:84:ce:59:30:f5:c6:27:62:ee:a7:64:1c:29:
                    23:94:38:a1:e7:35:78:4c:73:db:bd:a4:e6:0a:56:
                    0e:e5:69:50:1a:81:61:c5:34:36:bd:04:de:d3:81:
                    67:5b:28:cd:ad:31:bc:e8:26:cd:89:3e:ec:dd:d1:
                    cc:28:db:ac:34:7a:52:8c:6d:77:7e:fe:03:59:0c:
                    01:e4:90:a2:a9:f3:e7:ff:21:b5:fc:13:af:57:ec:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:84:0E:5B:36:73:77:0E:16:50:DD:BE:0F:CE:DF:1A:DF:93:00
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:71:36:25:e6:34:0f:71:d6:52:66:9f:3a:7a:8e:4c:83:
         e0:53:d1:ab:f3:f4:c3:b0:ec:4c:35:d5:30:85:3a:72:26:4d:
         18:33:a6:c1:49:4d:9e:61:77:d8:6e:26:98:28:b0:5e:4a:06:
         fd:6e:f1:6e:f8:c4:30:48:67:88:50:2b:0f:58:06:03:e5:5b:
         c8:e7:ce:ad:cf:26:d1:9f:fd:c6:08:c7:b2:22:35:1e:84:b0:
         b0:86:e6:ca:8d:52:55:a9:68:a6:45:93:5d:e3:a1:4c:7f:7b:
         b5:ad:38:c6:19:8f:c6:a2:ea:16:a4:c7:30:4d:06:8e:07:e6:
         ed:78:79:0a:a6:8a:d6:e1:55:ab:6b:3f:34:e1:d3:81:08:05:
         c0:85:a9:4b:76:63:50:ea:ac:4c:3d:7a:59:d3:4b:aa:61:68:
         27:a8:6a:71:a6:a9:b5:9a:ed:b7:e0:48:0f:7f:c8:c0:5e:5d:
         6f:1e:06:53:62:35:1a:83:36:82:af:0b:69:83:60:bc:74:55:
         d0:2d:e3:ad:02:38:39:02:3e:86:70:5c:a8:9c:e7:45:2b:7b:
         d6:e0:f0:35:92:a3:a3:5c:3a:e7:ad:8d:11:40:a1:42:31:c6:
         50:e7:2d:d5:2b:ac:82:a3:10:74:88:7c:db:92:27:e1:fa:67:
         2f:52:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:27:18 2024 by rpki-client on console-fra.rpki-client.org