Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          VhO8SLzwsjQrUiW8E3XJapfu5OEd0dKydv7NIP9kbKU=
Subject key identifier:   BF:91:BE:E1:F3:A3:1F:91:FF:84:0C:57:66:0E:E3:DC:5F:05:69:F2
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       019357D276121F056C14F319EB19A431708A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 07:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:30 +0000
Files and hashes:         1: 1-a8xEfNCcJbw_POpxQC7vrqCuLc.roa (hash: XdOuBwVVzj27fs8dR+YDZqCXcK6mT99flkpVL+loDKI=)
                          2: O_nWXTxp4B7ZFpwErFFLvlWgEhI.roa (hash: XvRINtgGqUzW6Lkj+0R8yuHePRW4d5CVk5EGOMC79gQ=)
                          3: QULADlVaFkMkGPkwn75YSVW2jjo.roa (hash: Pdhg6mv72WC/M2dgvihGiiCg/pLzNKgcVhlR32+64co=)
                          4: XaKOLigeN-V93hb5_LmjUY0ky8M.roa (hash: rtGFnrRDKCveDc68Rgzg2Sdn9euHWItbTUgeJplUsRg=)
                          5: kCg9WFKo3GKon-AvXzKjrVj2YVU.roa (hash: 9rdBOn9rDBOONIOIiYQ9srUByIIvYKf8KYO2fcsNd/I=)
                          6: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: yY1RZi6FNuE0UQnFuN2RHiJ3Qfz0bH+lj7dHMgBkln0=)
                          7: wbXhMKzENi5zRqOPyYc8wYfOYR0.roa (hash: 1Qg6Bwi0Ej3fti3LmKtf+DPwk5NBBoTNl15M0T44xe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:76:12:1f:05:6c:14:f3:19:eb:19:a4:31:70:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Nov 23 07:00:30 2024 GMT
            Not After : Nov 24 07:00:30 2024 GMT
        Subject: CN=bf91bee1f3a31f91ff840c57660ee3dc5f0569f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:5f:62:b0:64:5d:65:35:eb:af:3a:35:ae:
                    0c:6a:a6:4e:35:ec:d5:95:89:4a:28:af:bf:03:9b:
                    1e:1f:a8:df:da:cc:d2:a1:ee:16:a4:12:9c:32:a0:
                    fc:95:80:fe:c1:f4:50:4e:d1:13:94:24:ab:3d:97:
                    a4:4e:72:9a:ae:c8:bc:84:81:da:7a:52:b6:4a:a0:
                    ef:ad:d1:d2:84:cf:da:35:39:31:ab:8b:76:b8:36:
                    0e:a8:1b:cf:f1:2d:70:cb:3b:3b:29:cb:a3:75:7b:
                    be:b0:2c:6f:3c:f6:9e:00:fd:75:1b:ab:e2:a6:af:
                    44:d5:77:72:38:68:48:9d:9a:3c:1b:25:aa:11:34:
                    60:3a:ed:90:ea:03:d7:70:51:af:ae:4f:43:53:4b:
                    8c:a3:51:4d:98:5c:d8:a6:48:27:a2:99:cb:f9:44:
                    da:91:e2:53:c2:d1:c3:2e:12:c8:8e:2c:16:e8:6b:
                    c6:de:b8:83:09:e6:28:b1:86:2d:63:6f:35:87:f2:
                    63:26:07:5d:57:3d:e2:4c:af:94:8d:88:0b:eb:0b:
                    ec:70:17:99:93:0a:5d:8e:98:21:ba:66:a7:84:ea:
                    a1:c8:9f:1c:4c:0e:2e:24:28:a3:10:c0:0c:d9:5a:
                    c8:28:59:75:9c:12:fc:18:2c:d6:10:a8:01:ec:f7:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:BE:E1:F3:A3:1F:91:FF:84:0C:57:66:0E:E3:DC:5F:05:69:F2
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:7f:57:72:82:ae:52:da:8a:cc:06:c8:1c:e5:0b:72:d8:
         4d:37:25:ac:bd:96:1f:8a:9a:9d:42:58:1e:e5:71:fe:75:6e:
         e2:4a:1f:bb:72:5c:20:93:a8:b2:77:f0:98:4b:99:0c:7d:25:
         66:66:64:86:21:27:83:c2:8d:4d:d7:9c:ea:90:ec:cc:82:12:
         61:34:60:31:fa:6c:de:0d:fd:89:73:2b:06:3f:5c:4a:5c:63:
         e9:e6:9e:98:b2:04:15:01:99:fc:40:fd:da:0c:97:99:f7:0c:
         ea:6e:8f:a2:46:94:fa:f0:a9:96:dc:4d:b8:14:d4:ec:4e:ea:
         a3:f9:09:3b:1b:f5:bb:be:73:ef:1e:59:f7:df:a2:28:f0:4e:
         17:e7:c9:54:5c:d6:d8:a3:2b:5b:7d:e3:ee:ea:05:c1:4d:85:
         4e:fa:15:d2:0b:fb:99:22:10:38:c7:72:cd:b4:6b:c3:1c:f1:
         20:d9:29:b2:33:09:27:af:a8:89:8a:6e:23:d1:eb:89:ee:32:
         d8:b9:29:fc:f3:db:d5:83:f8:d4:63:2b:07:fb:d8:ed:44:ac:
         08:9f:86:51:10:b3:9b:49:14:3b:92:ff:e1:46:9a:4f:db:b9:
         05:97:44:cf:f7:ce:6d:31:02:78:17:47:6b:c2:d4:31:80:33:
         7f:a1:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----