Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          rPGqyc7Ki+iBVHC3WcMP/vccqVQnnvWoTfai7nCNxXc=
Subject key identifier:   85:31:4D:B2:6A:DE:EF:1C:4D:B9:13:15:C9:F3:0F:FD:E5:AF:DD:66
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       019352079141C0459F110C4CAB646E4B2193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          1388
Signing time:             Fri 22 Nov 2024 04:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:47 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: xixHktZtDSKmRLKQ4OFerZCKZlzwNuEKizihyJ1YBnk=)
                          2: 8EzU7uXsVYYAfWT-cw2E26nSgls.roa (hash: HQO6THTE6kN45kcG5piCkDUCb9wLCd2DZPke1rfXx84=)
                          3: FQzfY2nh31SLyVUJKcCkPBBfGpk.roa (hash: 7a6vyy72kM+d6nNUhYH/+vCR7Vzt71A6pphcUhhl8CI=)
                          4: aW2pswfyFoRSx1GYnGoKm5n1eXM.roa (hash: KkBxksAcMbyRpgx9+ihsRUjJalQqEOCm1CY7VULFiIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:91:41:c0:45:9f:11:0c:4c:ab:64:6e:4b:21:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: Nov 22 04:00:47 2024 GMT
            Not After : Nov 23 04:00:47 2024 GMT
        Subject: CN=85314db26adeef1c4db91315c9f30ffde5afdd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:85:c1:d3:08:bb:ad:ce:61:e3:0d:ab:f6:
                    be:77:7a:f8:65:a0:81:fd:24:a4:eb:9b:c4:8c:66:
                    b0:c1:10:d5:60:de:80:06:fc:83:90:41:8a:ac:1b:
                    c6:6e:a0:52:44:72:81:48:3b:5d:42:94:58:7a:81:
                    1e:34:f4:c6:ec:f4:b6:93:7b:65:38:75:ba:97:f3:
                    11:83:51:02:58:cc:7e:ef:58:58:54:a6:57:fc:f8:
                    00:89:3a:17:9e:6a:85:c8:e2:81:d0:5c:50:2a:b9:
                    51:f1:7f:22:18:9c:1c:8a:cf:95:a1:e5:72:c2:03:
                    c3:c9:41:7d:c7:12:7a:40:71:8d:b3:bf:0e:08:cb:
                    c4:ef:39:91:6b:89:1e:d9:d2:cf:a8:51:06:64:15:
                    25:0a:cc:78:fd:c7:0f:01:44:dd:a8:67:95:f5:a6:
                    06:f3:ff:d4:14:70:49:1e:cd:53:ab:f0:70:4d:42:
                    f9:f9:7e:16:c0:f9:1e:b7:5f:bd:17:2d:64:a9:d8:
                    3f:fc:df:e7:d5:64:e7:4b:aa:81:7e:ee:a0:a3:16:
                    5e:77:3d:74:7c:8e:83:b1:1c:bc:d8:16:03:b2:57:
                    d8:58:9b:38:10:71:41:fe:1b:aa:ae:91:54:9b:d8:
                    14:2d:02:3a:da:1b:64:ef:72:e0:7f:32:91:22:ab:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:31:4D:B2:6A:DE:EF:1C:4D:B9:13:15:C9:F3:0F:FD:E5:AF:DD:66
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:fe:a8:54:cb:d4:db:7e:73:cb:5f:36:38:51:19:3e:88:
         91:02:29:26:f0:2a:4b:e8:f9:5b:ff:5e:9e:1f:0a:11:a6:0d:
         a9:e7:f6:14:cf:4b:b3:f1:16:55:62:1a:97:e8:be:50:9f:bc:
         69:9d:55:6b:e5:0b:24:63:45:2a:e9:8b:42:eb:13:fb:62:54:
         7d:c8:f7:a2:31:1d:72:28:cc:b4:98:ad:03:bb:a3:f0:b7:02:
         bf:ef:ba:81:87:f9:11:02:45:d0:4e:99:3d:f6:5c:f6:39:62:
         c4:a7:2e:0d:92:f1:99:62:0f:df:48:c2:1a:ff:98:8b:fd:73:
         91:30:de:f3:c5:b7:98:d9:50:f6:aa:87:b0:16:e4:b7:3e:ac:
         74:6c:ea:a6:58:e0:26:cf:c4:b1:e5:36:a4:14:62:df:a8:54:
         5a:e7:1f:95:3d:3b:8d:f2:f1:8f:8e:35:ba:bc:05:21:7a:df:
         79:59:a9:01:f1:c9:9a:17:c6:33:e4:df:a7:08:c5:b4:b7:19:
         01:1a:2e:6f:e1:96:a8:a8:2e:1a:7f:b8:44:54:64:ac:d7:94:
         0d:ce:5b:10:9d:16:95:ae:04:e6:72:6f:9f:bf:f0:1f:72:06:
         1a:69:43:26:93:2e:53:50:7d:d4:b4:81:dc:db:ad:30:1e:4e:
         75:f7:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----