Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File:                     NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier:          BZF7tDc4etjdwQ6S4Mq47kv1j9XIzA6RC97JoH/0rRg=
Subject key identifier:   6A:14:D1:27:87:90:9E:86:17:60:03:C6:9E:F4:F2:2F:30:28:1E:0B
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer:       /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial:       019357D25FC8FA981583633E26C6FFF876AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:25 +0000
Files and hashes:         1: KX22dX--srUcFf-zvsvHNxT9QJo.roa (hash: H8KpR4Ub6UMgHJZLqg64M4XFdg+Hdd7PJkEDF6pU6Qg=)
                          2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: gLp7BtDHuAeNQr8GokoMjJBgVzSHx9xvf3GFHiDQoDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5f:c8:fa:98:15:83:63:3e:26:c6:ff:f8:76:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
        Validity
            Not Before: Nov 23 07:00:25 2024 GMT
            Not After : Nov 24 07:00:25 2024 GMT
        Subject: CN=6a14d12787909e86176003c69ef4f22f30281e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:60:01:1c:84:b5:5e:6d:00:5a:82:dd:e6:
                    e9:60:73:b9:59:17:d0:17:c4:ed:5c:c5:30:c6:ae:
                    b5:9e:5f:75:f2:12:1a:29:c3:25:fc:1d:53:de:42:
                    57:c0:be:fb:f2:3b:8e:6f:e6:70:b0:0a:e2:43:b9:
                    01:10:6b:49:85:11:42:b5:8c:ec:e2:7e:26:09:5e:
                    7d:4d:6c:fd:c4:eb:ec:64:fc:0b:35:0f:19:9b:a7:
                    d0:b0:df:91:53:8a:26:2a:af:b6:15:81:41:86:d3:
                    ba:66:cb:48:47:c1:db:79:73:77:d5:7d:61:5f:da:
                    b0:c6:1a:7d:07:e0:25:91:48:e4:05:2c:7d:c4:58:
                    40:44:a3:2a:00:1c:e9:1e:e3:3f:09:ee:75:4b:7b:
                    fc:95:b6:f3:c8:3a:fc:91:8a:c4:e8:76:06:5b:c5:
                    04:99:0a:41:44:a8:44:a4:25:bf:45:b5:a4:f9:b4:
                    96:9a:f9:17:40:4b:25:96:a2:5a:f5:f3:d4:9b:69:
                    41:4b:d4:91:d3:8e:8e:88:ac:0c:96:4d:ca:f3:a9:
                    b0:89:3c:31:33:8f:3b:33:dd:34:ff:de:71:42:37:
                    36:95:a8:d7:e3:17:3c:fe:7e:32:1e:7d:73:4b:eb:
                    39:9a:ad:23:18:5b:c8:84:c4:5e:8a:61:db:20:cd:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:14:D1:27:87:90:9E:86:17:60:03:C6:9E:F4:F2:2F:30:28:1E:0B
            X509v3 Authority Key Identifier:
                keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:42:5f:f4:73:5d:aa:eb:59:40:53:27:89:4a:81:4b:2b:
         ef:37:21:83:32:f2:9c:9a:9e:03:a4:ed:dc:81:af:27:98:91:
         21:1a:ac:ca:a6:ac:8f:a3:b3:67:2f:c6:23:48:2b:ca:33:ee:
         5c:af:76:11:c1:de:55:d8:cf:32:a8:ba:24:78:89:c0:36:5b:
         d6:8b:f8:02:77:b3:13:7c:cb:45:8d:64:e9:14:b2:e8:57:1b:
         f8:fc:75:7d:2e:a3:cf:76:f6:7f:0d:91:5e:e2:7f:0b:6f:e4:
         ec:1c:3c:9e:9e:b7:ca:80:de:a3:55:44:b3:14:81:16:4f:33:
         90:fc:a5:14:c9:3b:6a:0b:5d:ac:d4:6f:fc:0f:83:98:2b:90:
         4d:06:40:42:a9:67:f5:91:81:86:c3:b8:a1:59:70:88:4d:9f:
         9c:c0:c0:a1:dd:5d:f0:4c:c6:f4:71:03:c9:bd:ae:08:33:78:
         70:a5:3f:86:cf:e1:69:ca:32:f8:3c:99:ea:74:3b:c4:81:82:
         a7:fa:b1:b5:4d:7f:c4:fd:7b:9f:dd:e0:35:87:76:e8:43:e9:
         0d:9c:af:4b:29:69:8e:3e:97:36:42:b2:81:2a:fd:21:af:64:
         2f:9f:90:f7:eb:40:05:19:d0:79:38:f2:25:a4:d5:c4:35:a0:
         ab:63:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----