Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File:                     IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier:          Md3uy0gvkVDA+6ofILL7p7q7GKkoaH+PpZGmdO4aUHU=
Subject key identifier:   27:72:C9:64:C5:56:75:2B:25:07:56:FE:AD:A4:A1:D7:03:FC:3F:E2
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer:       /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial:       018F4F4AA8ED54411B3958AC25F5293BC585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number:          0972
Signing time:             Mon 06 May 2024 19:04:03 +0000
Manifest this update:     Mon 06 May 2024 19:04:03 +0000
Manifest next update:     Tue 07 May 2024 19:04:03 +0000
Files and hashes:         1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: 8RGSguOSbAVzcB1cVCsGWVNlmskX68QcOoACI7lyq/4=)
                          2: OnnK7Gpfkdg677hPdFUAC74Slbw.roa (hash: vKBQUn41hyzX9vQKbp6gVTVfeK53morsZzwwcyyq+xM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:4a:a8:ed:54:41:1b:39:58:ac:25:f5:29:3b:c5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
        Validity
            Not Before: May  6 19:04:03 2024 GMT
            Not After : May  7 19:04:03 2024 GMT
        Subject: CN=2772c964c556752b250756feada4a1d703fc3fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:44:50:9b:2f:4b:95:11:7d:fe:88:d0:9f:
                    9a:25:6d:d5:fc:a2:d0:d6:a8:d5:2e:a4:d8:eb:f4:
                    01:38:b4:89:9c:df:29:de:6d:12:d2:0d:1b:e5:22:
                    9d:5a:ba:f8:61:c5:9d:b7:6b:f1:4c:91:e1:34:c2:
                    e2:e4:2f:bb:79:e4:a6:a5:1f:ce:b2:bf:2c:3c:45:
                    56:87:b2:db:10:56:be:b8:90:e9:de:0d:86:be:8a:
                    e3:c8:98:82:45:4a:5e:38:db:f9:ca:f1:16:d7:f5:
                    90:ec:2d:3e:cf:23:92:8f:25:0d:d7:dd:8a:0a:24:
                    8b:9d:5a:3f:7a:76:3a:b5:89:9a:a8:a0:f1:81:25:
                    19:a6:81:8a:df:40:58:85:59:49:11:b7:d3:50:73:
                    90:95:90:35:db:10:eb:dd:9e:17:ac:3b:56:78:64:
                    75:c2:97:55:b0:fb:3b:7a:52:27:9b:e5:6a:ad:f5:
                    fd:a0:37:ea:02:3d:86:c6:69:01:11:b7:8d:a4:5c:
                    8a:63:6e:a9:10:b6:c1:82:2b:5c:74:4d:ff:99:e8:
                    1e:5b:42:c3:4c:82:6e:5d:c8:a0:17:54:80:f0:b0:
                    92:46:ec:45:d3:e7:42:3f:e4:a4:fb:f7:10:77:22:
                    5f:16:62:e8:64:10:97:6f:79:14:af:9e:0b:2c:28:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:C9:64:C5:56:75:2B:25:07:56:FE:AD:A4:A1:D7:03:FC:3F:E2
            X509v3 Authority Key Identifier:
                keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:a9:1c:95:8b:c7:46:ff:84:1c:d3:a4:ef:b4:18:61:a9:
         8c:83:bb:5c:38:90:6b:3e:88:dd:77:84:92:fe:c5:18:4d:df:
         ae:93:a5:b5:31:f2:4a:cc:8a:64:22:5a:90:cc:54:39:aa:3e:
         5c:76:a1:7e:ea:65:27:dc:06:dd:0b:d0:47:f0:a2:cf:0a:de:
         d5:ca:8c:9b:1a:ba:c7:8e:34:d9:a6:31:65:72:e3:78:b5:b0:
         01:c1:f2:da:32:09:22:e7:ad:1f:b0:4e:b6:5d:fa:cb:4b:84:
         d1:bb:14:2d:c1:06:96:f2:df:9d:64:34:c3:2a:9c:5c:f4:d1:
         e3:45:33:13:7b:c9:f4:35:9d:4b:f8:12:3a:18:7a:63:d1:d9:
         d5:f5:dc:dd:94:8c:ce:0d:aa:65:64:c5:f7:d9:f9:82:69:e9:
         01:af:23:42:de:44:e5:39:dc:29:8e:c5:ac:a2:d2:73:0d:27:
         57:e0:97:e1:3c:76:e3:25:c4:20:f6:07:32:3d:59:f5:93:f4:
         9e:45:00:9a:6b:51:db:09:b0:bb:40:ca:5c:a3:c9:aa:e6:66:
         ce:4a:e5:23:56:8f:3d:0b:1f:8b:f6:4d:2c:91:90:6d:e3:61:
         79:7b:75:36:29:9a:00:9c:50:aa:92:f5:a3:2a:ae:c4:a5:81:
         e7:54:e6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9PSqjtVEEbOVisJfUpO8WFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmVkMTNiMWFiN2RhMDkwYWVlNDJmNmFlZGRkZmRiYjE1
NmE1ZjgwHhcNMjQwNTA2MTkwNDAzWhcNMjQwNTA3MTkwNDAzWjAzMTEwLwYDVQQD
EygyNzcyYzk2NGM1NTY3NTJiMjUwNzU2ZmVhZGE0YTFkNzAzZmMzZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL1EUJsvS5URff6I0J+aJW3V/KLQ
1qjVLqTY6/QBOLSJnN8p3m0S0g0b5SKdWrr4YcWdt2vxTJHhNMLi5C+7eeSmpR/O
sr8sPEVWh7LbEFa+uJDp3g2GvorjyJiCRUpeONv5yvEW1/WQ7C0+zyOSjyUN192K
CiSLnVo/enY6tYmaqKDxgSUZpoGK30BYhVlJEbfTUHOQlZA12xDr3Z4XrDtWeGR1
wpdVsPs7elInm+VqrfX9oDfqAj2GxmkBEbeNpFyKY26pELbBgitcdE3/megeW0LD
TIJuXcigF1SA8LCSRuxF0+dCP+Sk+/cQdyJfFmLoZBCXb3kUr54LLChUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdyyWTFVnUrJQdW/q2kodcD/D/iMB8GA1UdIwQY
MBaAFCEu0Tsat9oJCu5C9q7d39uxVqX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MjY4NjktYmQ1My00ZDc1LWI3ZTIt
MzQzNDkzMzFkMTA0LzEvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83MjY4NjktYmQ1My00ZDc1LWI3ZTItMzQzNDkzMzFkMTA0
LzEvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni+pHJWL
x0b/hBzTpO+0GGGpjIO7XDiQaz6I3XeEkv7FGE3frpOltTHySsyKZCJakMxUOao+
XHahfuplJ9wG3QvQR/Cizwre1cqMmxq6x4402aYxZXLjeLWwAcHy2jIJIuetH7BO
tl36y0uE0bsULcEGlvLfnWQ0wyqcXPTR40UzE3vJ9DWdS/gSOhh6Y9HZ1fXc3ZSM
zg2qZWTF99n5gmnpAa8jQt5E5TncKY7FrKLScw0nV+CX4Tx24yXEIPYHMj1Z9ZP0
nkUAmmtR2wmwu0DKXKPJquZmzkrlI1aPPQsfi/ZNLJGQbeNheXt1NimaAJxQqpL1
oyquxKWB51TmBA==
-----END CERTIFICATE-----
Generated at Mon May 6 21:33:50 2024 by rpki-client on console-ams.rpki-client.org