Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          pEzenpp0CKBoVFi6ZeIw1HvFc17d8bu8RfWnfDPSz3c=
Subject key identifier:   A1:E4:84:AE:AE:FF:C7:90:0E:A4:A3:53:05:E8:F9:F7:3A:8C:A1:1A
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019355762BD9B1A476EFCE7065A6B6A87FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 20:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:27 +0000
Files and hashes:         1: 1ViqJ_odxz7O-VaeXv5bWhoh1Do.roa (hash: PbSzzO/QpapqGQFPhI2aQ/Ixcxp6xSpb80M1uBCmfDY=)
                          2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: DzsmpDMYUEgYP+Vu4PHt16jKOS5jaM0lnsyVh4UltmQ=)
                          3: LSR_VdT_s9w5R73CEBoCwmkT6kU.roa (hash: Rujtkv6oZIHTnXevkS0oEdb9EYFgiB5ZjuUfYbDWuAY=)
                          4: yfT9kkoNwIzIcRDg2_lrXf3g6_0.roa (hash: volTLphbbPvNPFGQJttBbSlX35iWhaZ21hozqq/X4Z4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:2b:d9:b1:a4:76:ef:ce:70:65:a6:b6:a8:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Nov 22 20:00:27 2024 GMT
            Not After : Nov 23 20:00:27 2024 GMT
        Subject: CN=a1e484aeaeffc7900ea4a35305e8f9f73a8ca11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:35:40:f8:fa:82:05:c1:f2:1b:18:40:d2:
                    a2:ad:a5:d9:95:98:a0:b7:50:44:3d:5f:0e:8a:6c:
                    71:57:50:b3:cd:3c:d4:89:4c:48:54:a1:9c:da:40:
                    f2:a0:69:be:b9:16:0c:e6:0b:a2:31:d1:d9:21:c2:
                    8b:fb:01:79:85:7c:44:13:d7:74:82:2c:fb:06:93:
                    cb:73:72:93:44:6f:41:75:39:60:b0:93:6a:30:72:
                    cb:ef:1c:1f:ce:88:d7:69:0b:9a:2e:d0:88:d6:ae:
                    7a:ce:01:b1:c4:b3:77:32:fb:56:2f:7c:fd:5c:9b:
                    49:2b:c1:68:1f:be:d5:d5:ba:08:cf:8a:8b:88:62:
                    41:8c:32:6b:c6:09:cb:93:8c:1a:2e:14:fa:7b:55:
                    1b:ca:8e:da:db:70:d2:b6:72:21:c9:23:99:8a:2d:
                    32:8c:ba:30:0b:09:06:e8:d4:83:82:47:31:bd:57:
                    d6:04:55:63:d9:d1:a4:0d:1c:d3:b6:3c:60:15:ec:
                    b2:74:57:bf:b2:9e:ac:87:13:fc:3d:e3:c8:ed:b9:
                    10:e5:35:81:42:2c:49:34:bd:e0:57:35:6d:a2:3a:
                    91:57:9a:8b:c4:84:b5:34:ce:fe:77:d2:68:66:2e:
                    86:81:46:48:34:70:28:ad:d8:6f:49:d4:25:bd:fe:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:84:AE:AE:FF:C7:90:0E:A4:A3:53:05:E8:F9:F7:3A:8C:A1:1A
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:df:1b:35:fc:9a:66:02:52:7e:57:cb:1d:8b:b6:d4:df:
         e2:bb:80:68:47:ba:1c:15:32:4e:ee:ef:3c:ec:6a:00:55:39:
         25:34:fd:ab:c0:f1:17:fc:f8:97:34:f9:26:8f:e0:79:b3:79:
         38:05:73:de:fe:21:ff:5d:45:ac:5f:64:64:59:68:96:cc:89:
         59:41:f9:0f:67:c0:29:4a:44:61:53:87:2f:7c:4e:ac:f5:58:
         d9:e3:21:3d:d2:85:bd:bd:58:c0:83:70:c5:cb:db:fd:39:4b:
         07:66:9c:1a:c1:27:24:cb:a7:d0:47:f7:30:c2:9b:63:cc:46:
         97:5d:1f:a8:ef:f9:74:42:d6:52:10:fc:c8:45:7d:22:a7:5c:
         7e:4c:a6:54:85:4a:da:5f:f4:fa:df:dc:3d:7d:0b:b6:88:08:
         24:3b:5b:52:4a:fe:aa:9e:da:f0:c4:20:a8:ce:4d:05:db:8c:
         95:4c:23:08:cf:8b:48:00:ea:5d:22:14:17:25:14:15:19:0a:
         89:ad:70:61:ea:c3:32:f7:34:8e:7e:13:fa:83:de:c6:5e:76:
         9f:e8:dc:f9:6e:60:c1:49:c1:20:0d:b4:da:94:ef:b7:2b:50:
         1f:f8:04:07:a2:30:68:02:b5:24:12:56:aa:68:6e:76:95:36:
         82:b8:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----