Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          M8gJokIRiAObbOlLiRw7FQEhSJIxxaDGZ5bLeleG318=
Subject key identifier:   7A:1E:7E:90:58:40:9F:11:C7:AA:C2:3D:51:C6:6A:57:D6:46:84:DA
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       01935A6659C2EEE0BCB93365A3E4066865AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0C18
Signing time:             Sat 23 Nov 2024 19:01:17 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:17 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:17 +0000
Files and hashes:         1: 3pfVgFLkg2TMIc7JovHte5RB3LQ.roa (hash: j4B7Ylwr/iwmSITFsOtorwc6XSZcp3QAqhv7YbCMN5c=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: y/M6no5MPkFWSQL2bfEOPgbBnPciJuRb0IHvvmbA/C4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:59:c2:ee:e0:bc:b9:33:65:a3:e4:06:68:65:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: Nov 23 19:01:17 2024 GMT
            Not After : Nov 24 19:01:17 2024 GMT
        Subject: CN=7a1e7e9058409f11c7aac23d51c66a57d64684da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:25:f3:78:61:ea:70:e4:ba:87:06:19:31:
                    52:ab:f0:fc:86:8b:f5:74:77:e3:a9:e8:d1:74:33:
                    c3:56:ec:f7:5a:ec:c0:7c:54:86:34:6f:67:08:3b:
                    fa:4f:e8:58:6b:5e:97:9b:e4:1c:e2:94:51:8a:f9:
                    e5:bf:07:81:4c:2b:92:95:17:f9:9e:a9:4b:21:ce:
                    04:f7:71:bf:cf:06:9e:df:49:d3:c4:17:a8:f6:ca:
                    cc:6f:15:e2:29:d7:96:bc:12:2f:e1:d6:72:47:0e:
                    6e:e6:b6:9c:bd:14:2a:d7:8b:2b:22:5c:a2:b2:8f:
                    31:cb:1e:d4:e3:25:f3:bf:3b:a6:30:18:5a:31:5e:
                    c2:03:1d:86:b5:a1:84:f2:8e:7a:cc:59:5d:0c:09:
                    45:d6:a6:a9:ec:35:4a:ed:96:55:92:b8:14:ab:32:
                    f3:f6:d7:02:f5:6c:68:7b:b7:0d:2b:59:b3:1a:a0:
                    c2:21:a1:06:00:a1:5e:ae:42:27:a3:ec:01:d2:66:
                    45:6d:62:bc:8d:99:13:c7:ec:d9:17:99:4e:69:6c:
                    08:7f:53:33:6d:db:24:2e:aa:ec:bc:23:d1:96:bc:
                    ef:4b:35:63:41:85:28:4b:c2:c1:1e:0c:57:0c:6d:
                    97:a1:a1:aa:83:92:79:75:1b:3c:71:e4:24:b2:98:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1E:7E:90:58:40:9F:11:C7:AA:C2:3D:51:C6:6A:57:D6:46:84:DA
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:86:69:b4:65:14:c3:81:2b:98:f7:19:95:ca:df:8b:0b:4a:
         8f:45:ff:04:23:ca:e1:48:c4:f1:94:e9:69:fd:07:b5:54:74:
         4d:3d:ff:79:38:52:fe:fa:3b:1c:22:a5:13:40:ef:58:48:1c:
         e0:65:d5:0b:3c:72:a0:38:36:b0:66:a1:72:52:24:d1:5e:02:
         f6:cc:10:02:71:7b:fe:7c:55:15:3d:dc:95:a4:3a:5d:19:42:
         c4:35:77:65:69:3a:29:0a:6d:44:2b:cb:76:77:24:34:2a:bc:
         d9:6c:e9:89:33:bb:b2:db:81:c3:6e:68:5f:4e:7a:30:56:50:
         a1:69:15:3f:76:eb:73:85:97:55:af:70:d0:2d:9e:d7:f4:e6:
         63:1d:01:68:c2:a8:6a:54:4e:1e:b7:9c:05:b6:73:cd:96:86:
         f8:3a:b8:4f:5c:22:b9:8c:d7:40:38:2d:42:d1:1d:41:f8:83:
         3d:ae:5d:85:8a:59:65:96:8b:ae:f6:b5:73:ab:9a:21:b3:1e:
         f8:4e:0e:a0:a2:c0:99:97:20:88:c5:e5:42:12:05:fb:99:79:
         58:d0:e4:39:5f:32:8c:da:0f:4a:e3:70:d1:94:0a:fc:c7:a5:
         04:3f:ac:d2:18:a9:d9:db:36:74:3f:b4:05:d7:2a:60:b2:bd:
         4f:b2:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----