Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File:                     Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier:          l4WOQn2OVzk47MR0knEEjz6RpBe3YxB3qSG1Jt2WrXE=
Subject key identifier:   C2:22:74:32:B9:77:17:75:0D:25:48:07:3D:5D:C2:8F:4C:AE:E6:94
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer:       /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial:       0193640EC85B361B57939B55B145CC33CFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number:          0642
Signing time:             Mon 25 Nov 2024 16:01:50 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:50 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:50 +0000
Files and hashes:         1: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: kIantgEmVjcGt3GzVyTef323DCGELo4PtKRssv/gIGU=)
                          2: sViek8ukaLWjHL5fG7a04aN9RUI.roa (hash: 4agJ2aQBUBU3abMhVYvqRvDu8lYlh3YOBzyKzDRyIzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:c8:5b:36:1b:57:93:9b:55:b1:45:cc:33:cf:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
        Validity
            Not Before: Nov 25 16:01:50 2024 GMT
            Not After : Nov 26 16:01:50 2024 GMT
        Subject: CN=c2227432b97717750d2548073d5dc28f4caee694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:43:ba:2f:ce:fd:4f:14:ab:9c:b1:0b:15:
                    19:ad:13:5b:26:f8:e0:69:d7:d0:b1:c3:0a:fc:a9:
                    a6:b3:a4:dc:68:d7:83:57:5e:77:30:77:17:48:07:
                    dd:15:29:03:e9:02:aa:3f:84:43:c6:55:84:09:65:
                    f2:b8:68:f5:7b:2b:fa:b3:84:0d:b4:3b:d6:b9:0b:
                    83:b1:74:1c:8c:fe:bf:a4:3c:42:64:07:3c:d4:99:
                    67:cb:ed:38:29:bc:00:81:53:6c:96:b9:f1:99:8c:
                    87:ce:3e:12:1f:8b:21:cb:d7:ed:00:55:cb:82:f7:
                    34:53:fc:7a:4d:28:5f:c1:74:b8:a5:69:66:a6:ca:
                    c4:e4:b7:74:47:53:49:28:b3:e8:8d:ca:d4:94:2b:
                    82:c7:43:26:3b:d3:5d:65:54:ef:1f:07:92:4a:68:
                    c3:20:06:f8:62:48:5d:8c:07:18:b2:34:4b:66:d6:
                    b6:f9:2f:29:da:a2:b8:92:c5:1f:52:c2:1f:0d:f7:
                    ae:d4:97:d3:c0:a0:fa:19:66:1e:35:82:ad:7e:22:
                    57:f2:3e:17:53:e7:79:fe:8d:71:bd:e3:d0:a7:d5:
                    ad:0f:03:e5:0e:fe:4c:5c:9b:c3:55:87:53:29:17:
                    e4:d8:ff:5f:e0:38:fb:40:36:87:f6:68:60:a3:eb:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:22:74:32:B9:77:17:75:0D:25:48:07:3D:5D:C2:8F:4C:AE:E6:94
            X509v3 Authority Key Identifier:
                keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:fb:1f:65:7a:11:4a:0d:1f:7d:3a:7b:35:6f:f6:37:9f:da:
         63:6c:77:bb:2f:d4:da:4a:f3:c5:d2:0f:34:73:e3:c5:e6:73:
         8a:99:bb:53:13:84:07:d3:99:8b:b1:4e:ed:cc:8c:ea:f7:7e:
         8c:f3:d7:65:43:c1:62:af:72:d6:ee:39:5b:f3:a3:87:12:03:
         57:c0:11:7b:01:29:ba:5d:88:87:d3:cd:09:e7:c7:41:1c:84:
         c8:7a:88:2d:f2:46:ea:7b:e1:6a:c8:c3:b0:0c:d6:e4:e8:a3:
         15:47:49:83:ae:5c:ef:57:21:c2:3c:55:8c:01:3b:f6:09:46:
         b2:ff:7a:73:bb:52:fa:98:82:e3:24:0e:03:07:95:6b:5a:95:
         ab:6d:cb:04:2c:8a:33:c9:32:ca:c5:eb:82:21:7a:e2:8e:b3:
         f5:f7:6f:e0:11:e1:18:b0:64:fc:46:a3:ec:e8:78:71:c1:6b:
         58:83:81:5e:2f:b9:6d:ef:f9:86:fa:02:19:49:31:8a:36:aa:
         da:0c:6e:d7:3a:a0:d8:54:d3:0d:73:f2:d0:0d:9e:cd:06:64:
         6d:2c:ff:5e:c9:19:7a:3a:f6:3c:2a:74:53:eb:d9:27:c7:42:
         fa:1e:d6:d1:ce:4a:88:9d:aa:f1:0a:23:96:c9:eb:2a:bd:e0:
         96:02:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----