Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File:                     lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier:          A5Ln2H2hvhSV422DisvMNz6GBO5Qdz3G9kW6kTwQPg4=
Subject key identifier:   E2:9F:BF:24:36:E5:79:51:AA:8C:C6:FE:A6:72:C3:A7:D1:70:26:67
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer:       /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial:       019357D22D17EE696BCD4C3D90038C548E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 07:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:11 +0000
Files and hashes:         1: h-_HO7ltEUIaizV_k_7QYQmXsQY.roa (hash: pywYnMcbGoSgVxVP2r5A0HUEelAOaXvFvyqMzWimmJs=)
                          2: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: L76xmfmBgxMShGRKSlCQV+IXQBPax+fexLjB7XO76i4=)
                          3: mWXMa4dC33KXdbyhmRJVNcEMCXQ.roa (hash: Ex032lvTGot1BocrdW+67w/RPUOcm3iOvnPMdEQ/twk=)
                          4: s9aryt5k6Su7DV6LcTInlHGn1jY.roa (hash: 1IbCxnrzPzghGWZoFO01f9dmKnDs6cdq9xjYj/RLFNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:2d:17:ee:69:6b:cd:4c:3d:90:03:8c:54:8e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
        Validity
            Not Before: Nov 23 07:00:11 2024 GMT
            Not After : Nov 24 07:00:11 2024 GMT
        Subject: CN=e29fbf2436e57951aa8cc6fea672c3a7d1702667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:d3:06:3c:6f:a4:e0:a7:ec:fa:79:f4:05:
                    35:01:7a:47:c7:02:6e:73:36:6b:07:6c:0d:b9:2c:
                    f7:7d:2b:f5:9c:3a:90:e7:00:88:b0:61:5c:1a:a8:
                    d2:7c:82:67:51:1e:25:e9:a0:c8:68:1e:59:60:ed:
                    db:96:71:c2:10:e6:8a:c1:42:a8:db:77:11:3e:cd:
                    6a:ac:8f:42:64:a2:dd:7d:da:82:d8:72:70:30:46:
                    8f:76:dc:62:d0:bc:c9:cf:0c:5e:7c:3f:93:08:d1:
                    f1:aa:da:c2:96:7e:50:a9:73:4a:eb:3c:97:1f:01:
                    d4:80:09:f5:ce:bb:a6:f7:38:c3:63:be:d9:e8:b1:
                    16:31:56:ae:24:1e:58:6c:e6:94:38:68:49:7e:d2:
                    8e:42:54:fd:0b:32:5c:e1:00:d9:23:53:f8:c9:97:
                    13:db:35:40:aa:f1:33:bf:49:58:8b:1b:bb:3e:9a:
                    ff:fc:f4:ea:1b:3c:87:60:8d:af:d4:31:be:c1:9f:
                    a6:46:b2:cb:e5:e8:73:48:6c:b0:93:fd:5c:1a:25:
                    20:07:ed:0a:63:f5:4c:25:9f:d2:10:cf:bd:2b:8a:
                    dc:c9:a7:06:4a:64:f9:b1:df:73:a5:28:b3:38:0b:
                    65:45:9f:58:32:18:5c:4d:c1:6c:00:18:4f:3d:47:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:BF:24:36:E5:79:51:AA:8C:C6:FE:A6:72:C3:A7:D1:70:26:67
            X509v3 Authority Key Identifier:
                keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f6:46:18:8b:3b:f2:40:86:20:ce:60:21:9b:4d:e8:9c:f0:
         76:2f:04:01:9b:0f:ea:6b:2c:7d:1e:71:0a:85:3c:93:a3:0d:
         a9:c0:43:07:c0:83:3b:12:89:c2:a1:ae:ef:ae:67:bc:a9:b8:
         e7:24:2a:cb:6a:25:8b:80:0a:dc:a7:e2:0f:ff:2a:39:19:60:
         2f:03:05:dc:83:d7:f1:cc:02:fa:41:0f:b2:a4:c2:2a:18:51:
         7e:a7:ae:c3:97:13:fc:22:a1:8c:5c:dc:d4:2e:4b:e7:26:17:
         0c:50:de:24:2c:84:4e:4a:ec:4f:27:80:71:ea:e3:3f:35:b1:
         c5:4f:86:0d:e4:57:39:d1:0e:fc:4d:3d:8f:90:f4:06:9a:aa:
         bd:7d:e7:dc:b4:c3:3e:da:47:28:7a:5e:01:0f:e1:dc:8a:a4:
         10:f5:51:f0:69:0c:30:2b:1c:5f:49:be:70:c3:e9:05:de:b8:
         92:f9:48:56:9d:80:16:68:de:20:46:e9:b1:d2:7d:6f:1f:e0:
         e7:f7:3d:36:6f:88:26:4b:2b:43:de:30:e5:83:1e:3c:5a:ce:
         eb:e4:ba:41:89:09:76:bd:79:74:e9:63:5a:e3:eb:c5:29:84:
         33:dd:28:ff:e9:ef:0c:9c:3f:e3:b7:39:63:1c:f5:84:cf:8f:
         b1:68:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----