Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          SbZtU1+K4BQ5jazYu1bpCuW4wS9NaQOPYpIb4RaV0Mo=
Subject key identifier:   85:88:31:CF:D0:22:98:1D:F6:2E:18:FF:37:86:CF:2C:7B:D7:D2:88
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019352AD177F357BE0CCB37655F2292E7BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          0EAE
Signing time:             Fri 22 Nov 2024 07:01:35 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:35 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:35 +0000
Files and hashes:         1: 4JzgTC3OZ5HTTYA8TSczNgMRI0s.roa (hash: LWb+fXIwTwBhm7xD6ldZwihz5ry1lRkdiTdGQ1rkqro=)
                          2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: qsOmWTSS0/vvSrnmS1KIvkhVbP3Fe++plqS7/xzHyPo=)
                          3: NxoMKFeXdg4eH4dApgQF5eGA_qQ.roa (hash: xqStYIF0oXo/tJk6AlDXDx1t3kzCR4JpCBSFW7S9BAg=)
                          4: e4OoxymcplF2t96_Jif4Sfncn44.roa (hash: /NughOs45Nu+HARUwH7tDl3MvtHJsP5Kp5idWCFXI60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:17:7f:35:7b:e0:cc:b3:76:55:f2:29:2e:7b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Nov 22 07:01:35 2024 GMT
            Not After : Nov 23 07:01:35 2024 GMT
        Subject: CN=858831cfd022981df62e18ff3786cf2c7bd7d288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:0b:8a:d4:33:2b:d6:ce:be:55:3b:cc:04:
                    53:ab:b2:b6:7e:d5:45:07:ef:78:02:a4:92:3f:d9:
                    0a:15:69:fe:f5:a2:9c:aa:07:6b:81:50:99:34:c3:
                    e8:40:2a:e4:b3:89:81:08:0a:1e:71:f5:b0:52:0f:
                    be:5a:78:cc:6b:52:63:f8:11:66:de:15:ba:f2:fe:
                    f6:96:52:fa:00:f1:40:2e:23:32:04:d7:41:39:93:
                    62:5c:3d:a8:77:ce:a1:50:73:33:16:b8:53:72:85:
                    c9:36:02:0e:d6:01:23:47:4b:ef:0e:7b:66:6c:97:
                    81:15:7c:21:a0:37:87:43:9e:54:4b:aa:af:84:54:
                    5f:8a:ef:99:f8:9a:5a:44:da:9d:76:68:b9:a0:d3:
                    74:c4:d7:00:7c:18:02:21:64:9c:a7:fd:4a:9f:22:
                    bc:45:1b:d7:e3:83:4e:f9:8e:22:da:af:05:64:b7:
                    be:e0:67:1c:dc:09:ea:cb:89:49:49:ea:ef:17:5f:
                    ce:0e:a5:ed:a7:7f:1a:20:94:ec:19:0d:36:74:19:
                    e9:24:67:0b:14:97:a0:70:4f:9b:93:7d:f1:b2:d6:
                    3b:70:35:bf:8a:cb:93:f7:73:f7:2f:d2:fd:d7:b7:
                    02:05:92:04:db:84:8d:a3:26:ee:87:22:7c:01:a0:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:31:CF:D0:22:98:1D:F6:2E:18:FF:37:86:CF:2C:7B:D7:D2:88
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:5c:4b:3c:39:af:dc:58:91:a7:b2:c1:fb:54:5d:ee:38:
         16:33:ea:b2:83:24:be:d8:33:e2:79:4f:fd:f7:eb:76:0b:90:
         86:a4:0d:15:69:2e:ce:0a:18:37:9e:36:35:72:16:26:16:ff:
         e4:32:10:a0:68:90:c5:5a:b5:26:f5:71:fe:ec:d9:fa:7a:15:
         a9:29:11:88:ed:ec:fe:b9:ce:94:92:bb:ae:55:99:cd:6b:6c:
         b0:d6:10:d1:84:25:ec:a6:93:5b:1d:65:4b:5d:ec:3b:5b:29:
         d2:84:75:07:8e:55:da:9d:8e:56:33:d8:c1:b8:72:18:ca:4b:
         87:6f:97:9c:1a:64:68:81:e0:a0:45:88:92:07:b7:a9:7a:a7:
         c5:47:6e:1d:23:d9:71:16:28:a4:db:07:73:1c:b3:73:0e:4f:
         69:3d:ef:3d:1d:a6:8d:0a:96:17:e0:a8:da:58:73:1b:68:a9:
         0f:fc:19:9c:8e:de:16:ea:46:b4:a8:68:95:73:ad:27:66:b5:
         dc:a5:f9:52:db:72:61:44:e8:0c:66:60:43:c6:e4:8f:e0:14:
         dd:3c:84:d9:5b:5e:3c:a5:aa:3b:1d:b3:78:e3:bc:f0:e7:7d:
         90:ec:ab:2f:01:de:bd:ba:1a:2d:92:0b:c8:a3:0b:82:7e:a3:
         8e:01:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----