Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          V9756khC4t27fPL0ILLA0M2iiztW6k/d4ZlaXk4kN/o=
Subject key identifier:   E7:EA:0F:24:54:FE:3E:D6:A3:A1:C2:B1:44:65:C8:E8:88:71:47:08
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       0193520777A0778594FA04F5BC3FF3C802D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          07C3
Signing time:             Fri 22 Nov 2024 04:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:41 +0000
Files and hashes:         1: AFa8YCWr1RVaGelMYdpt7faAS0k.roa (hash: guLIWcvvSswK3Vl/POB+yh+TwsHC/6GcEqewINsSiUA=)
                          2: TOoWNubPU9o6ZNw91-j7pRQHP24.roa (hash: Bce18KLXKs+BpUyJxl0D1BAcokqILG2nMZ84q+n4aMk=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: jLQoLuQfUVlC0OV09njE2AkiOdkvU/01iwAVzgCUgBw=)
                          4: aEb1Igb_dYHeTCdnGtVR2VaPPd4.roa (hash: n8GdtPt6Ujh/CZm6mEGLaXGHg12p4r8VTbNk1CorfTg=)
                          5: erDNj8C186V3CJ476Q-nS2L6t0c.roa (hash: jv1LwF0ZiibVBXp6x1qpI7//tKfPe461vp5815tkHSk=)
                          6: gMQBazrq2hpVxtuJQbiSNFHVmSg.roa (hash: nqowFGjIzyoPbh7fkeW93Yxq31SOfb5tPVrdcs+w4H0=)
                          7: xA85fZrKXIvbQJ6oc6-mqnEdELY.roa (hash: 8cwQi8z5HjQHanuvxnu5K05S/zJnPIlg5zp5tzEef1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:77:a0:77:85:94:fa:04:f5:bc:3f:f3:c8:02:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Nov 22 04:00:41 2024 GMT
            Not After : Nov 23 04:00:41 2024 GMT
        Subject: CN=e7ea0f2454fe3ed6a3a1c2b14465c8e888714708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:37:ba:61:74:80:22:50:8f:1a:ae:a3:d5:
                    e4:14:fc:d8:56:f4:72:82:b6:67:df:88:4e:6b:be:
                    88:bd:a1:10:51:15:37:c4:d6:04:97:86:ad:19:d6:
                    7d:a5:30:b6:22:fb:84:6c:52:61:b2:91:69:d5:02:
                    02:6a:cb:b7:d2:e0:e5:84:14:39:2a:9c:47:23:7d:
                    c0:64:1d:e0:8c:bc:4b:fd:a6:81:71:e1:c4:f7:a3:
                    85:28:19:0d:0d:79:9b:05:9b:c4:83:8d:4e:30:d8:
                    57:a1:90:79:78:27:65:fd:17:31:4a:bc:f3:27:f9:
                    72:8e:a4:6f:8a:72:50:92:8a:79:ec:bb:d0:db:66:
                    66:82:ee:75:ad:bb:64:18:d4:e5:c7:91:2d:30:7f:
                    cf:81:0c:b5:81:15:d1:35:f2:d5:66:c7:ae:19:0d:
                    bb:2b:e5:62:c0:29:fe:f8:23:13:ba:2a:33:3d:47:
                    a3:c9:16:60:3b:b4:7e:33:74:1d:18:87:37:d1:eb:
                    cf:39:cb:b6:7f:b8:6c:c6:55:0f:46:29:b2:45:48:
                    45:65:3d:b2:13:3d:e9:ce:f4:f4:6b:23:60:3b:4d:
                    78:b7:0f:ab:89:b2:a7:f2:74:a4:b3:8d:1d:41:ab:
                    07:c7:d7:ed:da:e8:27:35:e1:9f:34:15:7c:8c:94:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EA:0F:24:54:FE:3E:D6:A3:A1:C2:B1:44:65:C8:E8:88:71:47:08
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:45:f9:a6:db:df:ad:29:f8:4c:d2:f6:64:59:b8:6f:8d:
         db:1d:e2:0c:21:1c:5b:f1:3a:cf:5b:f9:d3:6e:76:7c:f8:f9:
         9d:cf:f1:35:23:df:80:f9:f6:b3:e2:5a:2f:ca:5b:b1:0b:de:
         2d:29:3c:27:72:4a:65:de:8d:9d:fe:e4:e5:7e:8f:af:5c:15:
         2c:f2:53:35:f4:9c:db:ab:74:b7:fb:78:48:c9:df:92:f2:cf:
         64:32:50:9d:e3:44:6e:e4:81:ad:6c:74:e7:1f:82:29:f8:a8:
         03:95:f0:c9:58:60:9a:8c:70:98:07:2b:47:b5:21:fc:b2:b2:
         b9:5e:43:ab:3b:2f:0e:ce:84:1f:03:d7:d7:36:da:ed:6e:54:
         9c:27:27:4e:f0:3d:0d:41:ff:15:b4:dc:c8:31:0a:15:03:98:
         4f:3c:4a:34:0b:a9:b0:cc:21:ad:b0:6e:86:b8:00:1f:e5:3b:
         7a:08:c8:ac:87:6a:1d:7c:b9:ed:d5:69:c3:59:9a:0b:f4:d1:
         3d:0c:6a:f1:b3:fa:32:87:76:72:bc:31:74:59:4d:f1:ab:56:
         21:22:14:55:c4:a4:1c:3e:26:72:c0:ae:ac:84:bd:95:7a:6b:
         87:16:b4:0c:e6:ac:8c:08:41:d9:f7:ae:de:9e:91:60:ab:38:
         6d:c2:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----