Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          Sl8wzfUFONvJR/QajdySisBIjVa074oDo9TI5bNyLn8=
Subject key identifier:   F7:B6:D8:10:28:28:0E:AA:8E:2C:80:82:46:BE:7C:BD:11:99:E0:12
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019352078667F382C42DEBF3AAF81CCC0FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0827
Signing time:             Fri 22 Nov 2024 04:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:44 +0000
Files and hashes:         1: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: 2fzmkbiX5A8mTnhGGYAIfLew7foiES3xweon2TKA+4s=)
                          2: 74jXiLa-_j0hesRpncVsl5vAk7s.roa (hash: ElJXA9lbidyaqFEjqQR964bVwEa8s9eopJlA87X8KhQ=)
                          3: DhrlB7neJqQZRO6i8Pk1OcKUz5c.roa (hash: B/yjzWjDC0S21hGC1d48bLLtU3moyrTtEGqcy5v8Ixk=)
                          4: FOKoh0IQ4s8V9jUM8fkJZR5fGEM.roa (hash: UMD1Krq+vANtJKJ2lsU92uVWqISyZHvA1+yiToPspCw=)
                          5: OTjUxtS7gQCgl4u5TD_sgDSmQqA.roa (hash: VTRei/43uySJsxfkuR3TXVDP9oBTAo/bmdI59gxOGfw=)
                          6: QrsxFuX8qVNl4hrZtV8LeWEn6E4.roa (hash: Y3KGG9mcWpFpaX8hd/rS5mO5V29UCVA8x5BjvsKXy78=)
                          7: ZI8rq77mouzqetwO7UQMcBMpOvo.roa (hash: Rea2PWL9Ql6pI+PLqgmfy/esPnpWSdGXycWXdWgvh5s=)
                          8: mTn0N1QuPF-QIpasgBu_qx2E0-o.roa (hash: sf4UH4oHcbsgbNqyW3zKrIE0pmSLJD0+jf6Wkyq+ND4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:86:67:f3:82:c4:2d:eb:f3:aa:f8:1c:cc:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Nov 22 04:00:44 2024 GMT
            Not After : Nov 23 04:00:44 2024 GMT
        Subject: CN=f7b6d81028280eaa8e2c808246be7cbd1199e012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:a6:ce:41:ea:3b:7a:0d:17:ff:ec:85:46:
                    89:e9:9a:d2:b7:58:6f:35:a7:1c:33:74:ba:99:f7:
                    27:1f:ee:41:bc:f7:08:0d:88:c0:c5:22:54:25:a7:
                    e8:4e:f4:31:a0:96:42:ac:f4:9e:5a:1f:24:fb:67:
                    e4:ac:5d:87:4e:5c:ed:04:95:1f:6f:02:16:f1:d7:
                    da:93:9b:a9:80:45:0e:ea:2f:b8:6c:f9:d1:c4:f2:
                    63:43:e9:9e:63:e9:f4:ea:fc:be:fb:f9:b6:0e:6b:
                    db:9d:cc:9f:f5:55:e7:3f:d1:8f:38:30:21:54:97:
                    fd:3c:4e:1a:4b:5e:19:fc:88:6a:e6:69:25:dc:25:
                    ab:1a:d9:41:a3:78:e9:9a:9b:88:0c:63:02:89:4e:
                    ee:1c:24:9b:87:21:c5:a0:36:76:10:3a:50:d3:d3:
                    b6:b0:d8:88:36:6c:10:c7:83:f8:ec:81:3b:50:c6:
                    36:a4:07:e1:1b:46:ba:72:3c:03:89:29:3e:cc:86:
                    c7:fe:d4:a6:67:11:96:8b:87:18:51:3f:b6:bb:1b:
                    47:b5:ae:ac:7a:68:00:1e:8d:01:db:46:06:16:92:
                    11:3b:53:f4:16:d7:bf:60:37:e6:d8:0a:1c:d0:11:
                    a6:c7:ad:48:53:d1:6f:bd:2a:a4:09:89:20:2c:50:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:D8:10:28:28:0E:AA:8E:2C:80:82:46:BE:7C:BD:11:99:E0:12
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:52:9d:32:0e:b0:3c:72:72:6d:ee:2c:19:c9:6f:3a:09:d5:
         f6:3f:f1:fe:5f:d4:f6:78:08:f8:3c:48:bd:5b:e8:12:43:7a:
         53:fb:31:78:d5:26:55:46:ff:10:64:f4:7e:58:b2:9e:5d:90:
         78:a6:38:fe:7a:93:27:77:2f:dd:8a:35:53:ab:bc:8c:fe:82:
         e5:ee:a9:ec:d9:f2:f5:ca:da:cb:c5:2e:16:7e:d4:91:21:35:
         f4:87:3a:bc:12:32:ff:80:fa:a2:25:08:c6:82:f0:d9:73:e5:
         57:6e:01:21:69:23:12:9d:f1:85:77:b4:81:f6:bf:6d:8b:5f:
         31:ab:ae:a7:91:6d:a6:f0:ee:c1:5f:a7:b5:cb:48:bb:d2:59:
         99:7e:6f:c3:ad:e1:63:ce:c3:da:8f:98:68:6a:3b:8c:24:a4:
         f6:94:33:3f:9f:cc:35:cb:c0:5b:c5:2e:47:df:04:9e:02:59:
         96:39:e4:e2:50:99:c0:e8:cc:f4:01:35:3e:a1:38:ae:ba:d4:
         c3:d0:de:bf:fa:a5:13:ad:8f:55:9e:2d:1b:d3:45:9d:0e:fb:
         4a:9a:eb:63:3c:8d:c2:61:9e:ca:ee:ae:46:4e:98:3e:cf:9c:
         cf:8c:7b:65:b6:14:b6:eb:dc:a0:75:b2:92:01:d5:da:64:da:
         c9:85:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----