Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          IFjq8dOSKvZMiMVeLKlK6qqsO1Oou1Xb/9V9Jbmq0KU=
Subject key identifier:   40:05:A4:84:4A:77:B7:20:BD:8A:63:25:7A:C0:D8:DB:EA:07:F4:44
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       019369A17CB29AFDA46DB492C4C28477891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          029F
Signing time:             Tue 26 Nov 2024 18:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:11 +0000
Files and hashes:         1: 3HP-_QGZkx4FEsGSxuLA8J9CrDM.roa (hash: B2OI5vQLaQpkW06eYqVQHh0Dx2uVzunJdHkAZmwhRsA=)
                          2: IBxHLexGPIDYbWmV2bbwOY0sNu0.roa (hash: KJ2WIgJohuhqKFXfbVuKAlsgVN1DO6ZcQKcVdFbmsQs=)
                          3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: 8l3UvU89YRWSz+5kbmBcZ60KNu+mSy5mZV4v7VChpRQ=)
                          4: Xye5_EOiaCZP2CpeBr_Ub-ss2bY.roa (hash: 4vUskcztMX7wz/g2TBZWUWX9aKuuGpFz8/pf6Hep5ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:7c:b2:9a:fd:a4:6d:b4:92:c4:c2:84:77:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Nov 26 18:00:11 2024 GMT
            Not After : Nov 27 18:00:11 2024 GMT
        Subject: CN=4005a4844a77b720bd8a63257ac0d8dbea07f444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:31:cd:06:41:36:09:65:b2:57:f7:3c:12:
                    94:55:49:ee:3c:69:63:0a:03:13:de:7b:1d:c6:21:
                    d6:a7:1d:95:f4:48:88:cd:77:8f:a4:eb:78:b9:b2:
                    5f:48:a2:66:77:43:44:9a:f1:fb:42:ae:e1:4a:62:
                    71:93:9e:2a:5e:73:59:9a:7f:f9:e4:83:e3:b1:35:
                    4b:ee:28:bd:ad:5a:45:43:f7:18:aa:fe:dd:f0:9b:
                    67:c7:8b:0e:9c:a6:2f:1b:a9:6b:9c:a5:34:30:eb:
                    70:c8:ec:0d:bf:62:2f:39:f5:8a:57:7e:1a:6e:3d:
                    e5:44:fa:dc:b4:ee:75:cb:77:f6:e3:62:21:ed:d4:
                    a1:f3:4f:51:22:dc:1b:43:a1:96:ac:9f:68:cd:c1:
                    54:bb:2f:29:01:9d:60:89:ef:33:21:97:0e:9d:25:
                    44:2c:9a:c1:48:16:48:c4:05:fb:56:3c:05:c0:eb:
                    e6:87:e2:2b:42:b8:32:c0:f2:e6:69:eb:75:0a:21:
                    bc:3e:12:7e:98:59:29:bb:5b:d5:74:d0:5b:52:71:
                    24:13:23:ec:09:b4:22:44:0f:68:c5:d3:b5:96:f1:
                    4f:d5:93:63:9b:d7:15:aa:3e:ae:d9:e4:a2:49:46:
                    7c:77:e1:93:99:5b:a4:0b:d7:5b:42:b6:dc:8d:fe:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:05:A4:84:4A:77:B7:20:BD:8A:63:25:7A:C0:D8:DB:EA:07:F4:44
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:12:13:97:b9:61:76:e3:14:39:94:56:0e:50:1c:9f:7a:
         8d:a2:90:d2:0c:6f:6b:3c:34:10:f1:48:9b:5a:4c:c4:8a:6b:
         fe:96:3b:8f:c3:b4:d1:a0:66:0a:fe:05:06:cd:bc:12:4f:29:
         7b:d1:c4:6f:cf:14:b8:64:18:c9:66:cb:14:1c:f6:e4:af:a2:
         a1:b5:bd:25:af:f6:82:ba:99:fd:9a:63:3b:1a:ed:35:65:88:
         1e:a0:bc:46:a9:3e:ff:2e:f2:4a:77:0c:c7:d0:98:18:8d:f4:
         d9:16:b8:e3:f1:b6:be:f5:01:d8:3f:3d:1e:66:4e:77:a8:c0:
         d7:88:a4:3d:0b:75:65:49:d1:e5:2e:3a:51:90:fa:ce:9a:a9:
         00:1e:9d:ec:46:7d:5e:81:06:4f:ce:a1:8f:3b:e8:87:99:0b:
         c4:29:6c:29:88:23:85:0d:f7:9d:cf:b1:c4:80:db:9f:68:66:
         d6:40:b2:80:53:c4:13:a0:f4:dd:c7:97:bd:8c:7c:f7:97:c8:
         2a:d5:6f:fc:f9:65:13:12:d2:1c:53:02:22:ee:6f:a8:86:8f:
         17:43:40:48:c9:0d:e8:51:0a:7e:ff:02:39:17:40:66:f7:66:
         da:7b:80:a7:3b:c3:ce:9e:dc:c6:c2:09:8d:75:e6:bb:81:69:
         49:38:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----