Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File:                     5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier:          V7yKfuApaY5craVHCHv0acEUNUWP+P+NcoAmkoegb+U=
Subject key identifier:   D7:6E:4A:51:FD:EF:61:97:C2:EA:52:1C:CA:24:1B:D7:18:FE:6A:C7
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer:       /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial:       01936AB4B2DDBC6FBFFD053E8C4F1F756B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number:          07EA
Signing time:             Tue 26 Nov 2024 23:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:47 +0000
Files and hashes:         1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: QHOeoT5eBnRJvr3YauOOqV7V+dhzg3H1ffz1yPs9bQA=)
                          2: F4ou-XOBctbzfsTnlCUqk8p89os.roa (hash: 1AmIjGNJ/AZW2wzPmr9Osif5uRLYqve1hGWeD4iVaEk=)
                          3: lSBM7EqQw94rf7zF5fFsOPH_thg.roa (hash: JdSAkJXxzJRUpVpivjPGtT0Oet+FzPeMU9563tEo/EA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:b2:dd:bc:6f:bf:fd:05:3e:8c:4f:1f:75:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
        Validity
            Not Before: Nov 26 23:00:47 2024 GMT
            Not After : Nov 27 23:00:47 2024 GMT
        Subject: CN=d76e4a51fdef6197c2ea521cca241bd718fe6ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:aa:76:d3:86:ef:43:4a:85:ca:b9:4a:6c:
                    32:23:ef:40:fc:94:01:01:52:1e:73:a0:ba:3e:d6:
                    86:4c:83:40:9a:28:0d:fb:4d:e6:51:af:65:6e:ac:
                    c1:2f:67:8d:c6:8f:da:56:45:54:f3:4d:24:b4:7a:
                    25:31:d4:16:0b:3d:66:ca:05:e1:d8:d5:37:0a:05:
                    2a:27:31:0e:cc:5b:ed:92:d4:4f:d6:ec:9b:e8:ec:
                    48:c4:1d:71:06:15:63:93:06:09:d4:ac:59:d8:fd:
                    87:d5:bb:4d:5a:b3:9a:8e:26:d8:be:6b:50:e9:49:
                    14:1f:60:6a:85:d7:36:6e:cf:8a:de:f3:01:88:fa:
                    79:94:c9:d2:58:82:17:37:f3:65:a8:98:9f:5d:3a:
                    ed:5a:39:67:0e:64:39:25:27:1a:8d:39:b0:39:cf:
                    05:93:82:10:0b:a2:08:72:f6:1d:a9:70:b4:86:f5:
                    e4:0f:33:c8:d7:29:84:8a:61:1a:f8:e7:86:80:4b:
                    1f:62:ed:6d:5a:26:ed:89:7d:4f:85:36:31:e6:f5:
                    bb:e3:c0:d7:73:68:8d:05:94:20:53:cc:69:cb:56:
                    7d:d5:80:bb:fb:6c:a1:38:9f:38:35:8d:a2:0b:ec:
                    76:9a:50:9e:c0:1b:ad:e0:82:8b:ac:26:c2:02:18:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6E:4A:51:FD:EF:61:97:C2:EA:52:1C:CA:24:1B:D7:18:FE:6A:C7
            X509v3 Authority Key Identifier:
                keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ec:3f:69:60:e0:07:4a:15:f5:b4:58:44:a3:50:43:fe:0d:
         76:50:dc:56:d9:34:5a:49:1c:07:6b:48:ca:2e:47:54:1b:be:
         b6:ad:60:b1:81:0c:5f:cd:d8:e4:d4:66:a5:8e:79:8a:c2:0b:
         1e:b1:4b:51:98:b4:c8:c6:3f:5c:5a:53:93:98:9d:51:70:cd:
         b5:18:be:85:81:99:99:74:04:f1:d2:65:bb:a8:1a:2a:c1:b2:
         22:3c:73:13:30:3b:bd:25:46:c4:bf:bf:da:e2:7c:20:c6:07:
         eb:51:2c:b1:55:cf:6d:5b:d6:0a:60:66:5e:73:72:39:6c:61:
         04:bd:1e:ef:4b:d8:be:71:04:9a:3f:04:0a:c8:8d:ab:a8:40:
         93:06:2f:8c:a0:6b:74:51:ab:58:85:bc:47:57:d5:c7:13:64:
         f6:68:3e:8e:48:57:bc:27:48:22:af:1a:ec:59:91:73:3d:87:
         26:1a:d2:cc:5f:32:78:a9:3a:ad:03:13:16:6b:0d:c7:a0:52:
         77:70:82:8d:40:e5:c3:98:47:02:69:a3:e4:e1:13:5c:ce:9f:
         68:78:36:69:7a:1c:a5:2b:04:e2:0f:d2:84:1f:01:f4:91:ba:
         73:f6:80:20:a2:e8:5a:67:37:66:bf:3e:f4:89:78:b8:a2:bf:
         87:cd:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----