Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File:                     hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier:          GjEzh0pmMc+M7KkI9PZ+0GFdADSO2zu/0EDkvgXCIVU=
Subject key identifier:   FA:30:5F:31:23:A6:91:9B:27:0B:9B:04:62:39:08:B6:2C:D4:BD:FE
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer:       /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial:       0193549D27A9CCC282A427B9C1449B67AD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number:          1039
Signing time:             Fri 22 Nov 2024 16:03:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:25 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:25 +0000
Files and hashes:         1: 1-eD2pgWcZl-jONWfBsv1p6qYOSY.roa (hash: G7eaL/r6sGsGr8aStEvwIpHUacehcpKDxba2HG5G2gY=)
                          2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: OGOMr5mo8ZQRI1skuKLbiUMQIWrOvlo4sIbKO5z1aA8=)
                          3: qDLq-MfQeEiPhcANKolsbyZmoXo.roa (hash: d7Se2U1FZ+NNN2/PCKRcmbyaVCfHhY0GQ753VuRxISE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9d:27:a9:cc:c2:82:a4:27:b9:c1:44:9b:67:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
        Validity
            Not Before: Nov 22 16:03:25 2024 GMT
            Not After : Nov 23 16:03:25 2024 GMT
        Subject: CN=fa305f3123a6919b270b9b04623908b62cd4bdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:43:c0:0e:fa:e6:5b:d3:6d:d3:40:43:0d:
                    00:84:83:5b:bc:2c:fd:9c:bc:90:68:d8:aa:c0:8d:
                    64:f9:4d:c3:2e:8c:50:c9:8e:b0:a4:82:57:9d:8b:
                    54:28:e5:b3:50:d6:05:6d:7a:8e:18:fd:dd:5d:7c:
                    54:bc:13:2c:dc:23:27:ca:e3:b8:cf:b6:66:ff:9a:
                    8a:64:c7:b8:c1:bd:cb:0a:05:c9:06:65:df:62:42:
                    aa:ea:ba:d0:f1:b0:2f:f7:30:79:2a:ad:6f:a1:c1:
                    cd:12:67:26:bf:56:b6:c3:a5:5c:d0:17:64:23:90:
                    7e:2c:e9:ac:ec:fb:a5:b0:fc:f6:ea:04:b5:ec:5e:
                    d9:1d:82:92:c4:4b:45:8b:61:0b:a2:51:54:e6:fd:
                    14:e6:7b:3b:a9:a6:4c:41:37:7b:aa:ae:9e:88:44:
                    7c:ec:12:07:2a:3f:f5:16:68:b5:80:64:47:9a:38:
                    ab:05:03:49:36:9a:1b:c2:3e:79:e5:84:d5:09:ae:
                    2a:f1:70:5c:2f:ec:2e:1a:3f:6c:28:34:af:3f:f6:
                    8d:4d:40:0a:57:cb:e2:ae:92:b3:b8:4f:86:a6:90:
                    f9:bf:80:d0:a9:9f:58:8d:9e:40:0a:ec:34:1b:8f:
                    75:cd:5c:4c:70:0f:aa:fe:c8:fc:8f:5f:19:9f:e3:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:5F:31:23:A6:91:9B:27:0B:9B:04:62:39:08:B6:2C:D4:BD:FE
            X509v3 Authority Key Identifier:
                keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:60:5e:00:da:fe:2a:8a:70:30:2a:f3:66:82:5a:cb:7b:
         af:0b:03:aa:fe:8a:e6:ed:32:39:e8:ec:49:a0:e7:8f:38:bd:
         ba:d3:38:d4:ee:b7:c4:1e:e9:35:cd:db:a2:6c:7e:01:13:63:
         31:28:e5:32:93:15:d9:17:ab:62:64:7b:e7:02:3e:05:61:2e:
         5b:14:df:96:35:29:19:a6:0e:8d:07:bd:2b:24:04:27:c1:fe:
         ff:73:9d:ea:a9:c7:6f:e7:ac:ee:0a:86:82:53:27:67:56:c6:
         dd:60:d8:48:c5:40:02:e7:44:60:e4:53:33:dc:d0:cc:d1:32:
         3c:2d:0e:45:76:12:ba:80:e8:59:8d:b4:0a:a6:92:dd:49:a2:
         cf:6a:96:dc:20:6f:e0:2f:38:07:89:5d:45:61:7c:71:a9:e0:
         1c:a4:b8:fa:68:74:54:36:5d:d5:be:30:f8:de:99:66:ca:ac:
         fb:89:a1:8c:0c:f6:68:76:e4:c8:ca:1b:96:4a:0d:ca:0f:ee:
         17:55:d2:65:8a:3b:97:80:c0:01:eb:7e:63:91:b8:6b:f2:26:
         ca:5a:1a:f6:2b:a4:41:1c:0d:6e:f1:ec:f7:18:ab:17:a8:bc:
         ae:93:27:d7:8d:48:2d:fd:88:ec:3f:49:39:11:c8:7b:58:ce:
         b1:e2:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----