Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File:                     g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier:          JABw/cQR0UG6eoEXUVMOA7jkvy0j2PFNajxDYxQECWs=
Subject key identifier:   DB:0B:05:B6:DC:4F:23:6F:F9:92:85:DD:33:CF:95:E0:39:EF:23:24
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer:       /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial:       0193572DA89C46E343EA07D73BB4D0E2298D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 04:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:30 +0000
Files and hashes:         1: Bqi8uincl6kJFowUn36Yu63f5C0.roa (hash: cf174Fm1538hYR3tKGBXFky5PyU7ppsTBHrFBu9hnI8=)
                          2: QJ0Hc9_aZSOZ8b5y5ifBukiKBp4.roa (hash: PlXDn7+NX6dszUtDE8X7i9w2squx8M9Y5SWpS1kxJGs=)
                          3: UWha6IpIWQ8UypUBu2xJP35Noak.roa (hash: APpp9qRI+bgAYEyBZMTsZh2ojQ/6snuXEGt50MZDsIc=)
                          4: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: 13DM92mlSV4XT4vsfpQX//Xf8OMYPyrrzkP5cS9PjH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a8:9c:46:e3:43:ea:07:d7:3b:b4:d0:e2:29:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
        Validity
            Not Before: Nov 23 04:00:30 2024 GMT
            Not After : Nov 24 04:00:30 2024 GMT
        Subject: CN=db0b05b6dc4f236ff99285dd33cf95e039ef2324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:7f:91:7e:4d:44:a1:8d:f2:ea:69:30:f0:
                    fe:ff:ab:87:3b:c7:5d:18:c8:1e:a1:0e:cc:45:fc:
                    6c:4a:85:ef:27:1a:dc:6d:6c:1a:61:f9:17:e5:d1:
                    be:42:93:eb:34:b6:8c:1a:84:8c:82:d9:4b:1b:43:
                    7b:d6:1a:1c:af:fe:50:a6:aa:1a:41:5f:17:af:7c:
                    36:49:7b:f7:e7:7c:3a:1e:52:cd:67:03:d7:43:39:
                    11:a5:e1:aa:e4:d6:77:52:2a:30:44:50:c2:20:2d:
                    c0:f3:c2:cc:1a:32:72:de:a1:4b:7d:d8:25:5d:99:
                    db:5c:e2:3c:56:91:e5:ca:08:4c:b1:bb:ea:89:46:
                    4e:de:cb:94:0d:ea:ac:14:00:32:bc:fd:2f:af:63:
                    d8:43:b8:79:01:73:1a:8c:4e:79:72:95:00:eb:e3:
                    5a:c5:ac:d3:4d:02:a3:6a:d3:12:ea:ed:1a:0f:75:
                    16:af:08:1c:1d:5e:3d:6b:cb:fc:c2:45:eb:77:4f:
                    cf:d7:d8:1c:bb:bd:64:50:5c:f4:e3:f2:46:09:ae:
                    4e:5f:3f:7d:c1:22:87:75:34:1c:04:f2:f0:34:04:
                    2f:86:b8:50:7c:e2:fc:04:67:96:98:99:3d:7e:5f:
                    a9:d3:cf:cf:b3:18:46:f3:55:8a:b6:96:c2:7b:d8:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:05:B6:DC:4F:23:6F:F9:92:85:DD:33:CF:95:E0:39:EF:23:24
            X509v3 Authority Key Identifier:
                keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:65:b2:f2:c1:93:14:09:39:b3:28:75:3a:27:52:6b:1c:
         83:3e:08:13:47:8b:42:cb:a3:b2:5e:c0:74:73:c9:69:21:87:
         90:83:09:76:2f:92:3b:8b:f3:09:2a:69:b3:8a:2a:03:44:06:
         1b:09:75:fc:ac:1f:2e:9d:fc:7a:26:5f:7b:7e:09:9d:a4:36:
         74:3f:51:fd:75:a1:1f:c5:db:be:cf:34:33:af:cf:5c:43:ba:
         51:2e:1d:3e:a1:ec:6b:67:5d:22:87:76:5c:63:a8:35:c8:79:
         c4:c1:64:49:0a:06:65:8b:bb:eb:2a:20:10:2c:1a:fa:ed:31:
         15:76:74:c4:6f:37:f9:f7:c6:db:7a:3c:6b:07:05:af:e1:c9:
         8d:8f:77:7d:e7:18:ba:7c:11:af:c2:30:c7:b0:53:9b:e1:24:
         ac:29:0d:ad:4f:af:6a:dc:7e:21:a1:98:c9:07:be:c2:08:5d:
         78:81:54:af:64:ce:5b:a6:00:19:c9:ff:72:d2:2b:cf:e1:cc:
         d1:c4:cd:c1:6a:85:d2:87:76:0b:78:ef:e2:e7:e0:cb:db:e8:
         a6:58:e9:3f:77:2c:e2:55:90:68:b5:c9:1f:df:73:c9:93:85:
         5f:07:98:f4:e3:ec:2b:a8:6b:46:4b:2d:0a:eb:63:82:1e:21:
         d8:c5:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----