Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File:                     UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier:          L82F68HDzbJdA2SSTPjtSSqkDtTJq5B3XKVqMUzS7Q0=
Subject key identifier:   78:55:8E:F8:68:3C:89:FF:C5:D9:C8:2D:81:E4:14:B5:3C:CE:9C:3D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01936B2CFCA0C887D58FE7E59E670A8D5E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number:          22DD
Signing time:             Wed 27 Nov 2024 01:12:09 +0000
Manifest this update:     Wed 27 Nov 2024 01:12:09 +0000
Manifest next update:     Thu 28 Nov 2024 01:12:09 +0000
Files and hashes:         1: E5qUi8QhVsJOBuHye51ce5Wliqg.roa (hash: 2OHqgQPZ9ufBETEIJ6ZRqY1wNwZTOfkSjP4R4yteYiA=)
                          2: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: UzVKc9sP6IxLHs/MfIoMC3WD1F5Z8I9xWjOsd5pJ7ik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:2c:fc:a0:c8:87:d5:8f:e7:e5:9e:67:0a:8d:5e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Nov 27 01:12:09 2024 GMT
            Not After : Nov 28 01:12:09 2024 GMT
        Subject: CN=78558ef8683c89ffc5d9c82d81e414b53cce9c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:0a:a6:50:1b:3a:df:c0:75:52:bb:43:e4:
                    33:35:5f:ec:ad:84:3a:f3:33:73:21:a4:6e:ec:02:
                    0d:1c:c5:07:f2:d8:c9:99:1e:1a:d2:05:ec:d9:6b:
                    f8:87:fe:ba:e0:08:77:92:aa:76:ae:14:83:d7:60:
                    4d:87:dc:3b:d9:e9:db:63:8c:b3:a0:bb:59:1b:60:
                    12:28:30:35:c9:c8:c0:37:36:79:d7:cd:df:4a:26:
                    45:5e:f5:0e:87:97:41:5f:83:d6:a9:6e:16:80:9b:
                    32:28:f7:0c:53:68:89:07:b3:13:e3:6c:1b:28:af:
                    5c:5d:24:b3:ea:9e:0e:ae:7f:0f:e3:3f:44:d2:74:
                    29:aa:67:e4:7d:84:2c:12:90:76:5e:1f:77:08:34:
                    43:75:70:fb:15:cb:3d:8a:08:79:25:13:61:b7:f3:
                    ba:80:c9:65:98:aa:7c:7d:63:af:99:c8:82:88:63:
                    57:33:80:af:68:a5:7c:b8:8c:0e:88:bd:37:eb:a7:
                    e2:ea:7d:e8:4a:9e:d5:3e:20:1c:39:aa:a8:87:7e:
                    d2:59:c7:35:24:2b:d6:d2:a2:6d:88:c2:ea:3b:73:
                    1f:f1:4e:6f:73:a1:ad:3b:0b:5e:6e:0a:c4:82:af:
                    02:b3:07:da:af:99:33:68:d0:ec:68:19:89:6c:87:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:8E:F8:68:3C:89:FF:C5:D9:C8:2D:81:E4:14:B5:3C:CE:9C:3D
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:06:7c:11:99:8d:6c:3b:95:11:2c:e0:93:3e:bc:c6:e7:
         4e:d0:c1:8e:b6:d9:a5:68:53:22:cc:78:2e:06:2c:67:23:56:
         a4:55:73:a6:02:3f:a4:58:5b:14:54:63:bd:ce:f6:92:b4:22:
         69:cd:2c:61:98:a9:ab:c7:6f:f4:29:9d:4a:48:1e:2e:4d:8b:
         f1:01:d9:29:1e:74:4b:67:7c:83:50:02:20:f5:0f:16:e1:53:
         1e:a8:e1:2a:bd:69:57:7b:7c:4c:dd:85:ed:fb:e9:4a:b0:f5:
         96:28:75:e4:31:1c:a6:07:ae:7a:07:6f:fc:cd:ff:db:06:ab:
         e5:d6:a4:cf:29:74:a2:e0:12:8a:73:f8:bc:73:d3:d4:b4:44:
         d6:81:cf:d0:67:a0:12:81:6e:65:ff:29:88:cc:14:76:19:ef:
         f7:27:2d:e9:ce:64:cf:07:47:7f:3b:9c:fd:63:d3:fe:b8:54:
         5c:9a:4c:d6:48:51:1a:df:82:52:32:f1:4f:21:f3:e1:c5:1a:
         3e:17:29:bd:31:72:28:68:5d:ac:31:b3:f4:d1:55:1f:c1:a0:
         84:90:7e:8c:fc:c4:8b:e3:f8:3e:fb:8f:83:8b:ae:e8:2e:dc:
         9f:41:1f:51:b8:58:ab:c5:21:59:60:c6:35:0b:92:3e:f6:d7:
         a9:4f:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----