Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File:                     STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier:          kjtfiiWIl5dk+C6jb7jsbw7WKqHqeuvVo9mZPOmR6Fg=
Subject key identifier:   7A:2F:34:88:17:57:1C:19:9A:E7:6B:53:83:40:10:7B:CD:F4:25:38
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer:       /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial:       0191FAB4F51395A7AC77B5886D8D33EB89E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number:          DE
Signing time:             Mon 16 Sep 2024 12:00:48 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:48 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:48 +0000
Files and hashes:         1: 1-Ppl9xP2j3UQpUw1cFDlCWzzsbY.roa (hash: 2V6OnG1YonIt/uzufi6Pj60ddgsVckDD3MzBKYOWoUY=)
                          2: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: k/vPHhq53c3wnIF2ImGuo8cVsXIUD74dZXO/htvUCIk=)
                          3: emI0QjD6vMIO4JdhMtncM0bOVi0.roa (hash: 9VopH81ANaLZ9vZKU6uOHsnQzNEQY47sF4FzEdHaQec=)
                          4: j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa (hash: jgJSchCo9vZEUv+n3iEGT+F7xWxg5WKakc3vP0E/3s8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b4:f5:13:95:a7:ac:77:b5:88:6d:8d:33:eb:89:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
        Validity
            Not Before: Sep 16 12:00:48 2024 GMT
            Not After : Sep 17 12:00:48 2024 GMT
        Subject: CN=7a2f348817571c199ae76b538340107bcdf42538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:f4:81:76:e5:c1:cc:eb:a3:e7:ac:fd:01:
                    51:4f:b0:af:f0:3b:1e:0c:f0:41:1d:b6:66:1f:78:
                    ef:78:05:9d:c1:71:14:8a:c7:44:30:57:f2:81:ac:
                    0d:7e:0b:6d:68:fd:59:59:20:c4:4b:16:06:30:bc:
                    25:30:eb:30:42:d5:e2:9c:17:f4:e3:56:e2:29:89:
                    0c:2b:d7:20:f1:bb:96:42:86:a8:0a:4c:3a:8f:72:
                    f4:d3:60:41:97:4b:36:a5:03:54:66:f1:2a:53:cf:
                    8a:36:b1:5a:8e:aa:7b:32:63:b5:9e:78:92:7f:21:
                    b0:f8:2e:4c:96:ff:4a:44:c7:d7:0a:b6:62:a1:4c:
                    10:21:f9:32:ae:af:47:04:6d:db:1c:21:a9:f1:44:
                    fa:41:b7:1f:84:c6:66:a8:40:5a:2f:a0:ae:05:19:
                    ba:11:81:3f:43:b0:49:aa:21:b0:e8:1f:c9:93:6c:
                    b4:be:d4:62:de:d0:bb:2d:bc:e0:5c:bb:1c:ea:a9:
                    00:3d:42:61:cc:f2:78:12:af:aa:97:7a:f6:b0:f5:
                    52:8e:92:8f:1c:4f:cf:44:c1:83:89:66:0e:13:14:
                    4f:d3:61:79:5b:29:fa:6a:bf:c4:00:c1:fd:82:f7:
                    a8:0c:13:81:2f:8f:e9:4b:fe:3d:46:4a:da:a0:7c:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2F:34:88:17:57:1C:19:9A:E7:6B:53:83:40:10:7B:CD:F4:25:38
            X509v3 Authority Key Identifier:
                keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:dc:1c:91:bf:db:41:a7:d0:5d:aa:44:7f:b7:aa:7a:08:
         37:46:5a:96:43:b5:f3:7e:93:0e:7d:36:f4:99:cc:51:cd:92:
         12:89:e6:24:b6:11:3e:20:e8:81:99:bd:a5:f1:12:90:2a:2a:
         94:eb:04:13:8c:fb:df:f3:87:d1:04:8d:c1:17:df:d6:62:98:
         08:a3:d5:c3:1b:9b:36:61:b7:12:07:71:55:14:ab:e8:5f:9d:
         f7:7c:19:22:99:4d:eb:96:a0:2a:94:d5:9d:07:fd:77:64:ac:
         63:df:2e:3f:4b:fe:9a:eb:73:ac:47:5f:02:99:e0:7d:cf:64:
         3d:58:35:ef:3c:05:24:dd:75:95:3c:b3:32:2f:f7:99:08:4f:
         ce:36:ca:c1:93:0f:40:20:0f:a5:61:30:4b:77:b9:64:e3:96:
         83:6c:f1:37:c8:76:b3:10:1c:c0:1e:9b:25:ca:87:6e:25:69:
         a8:c9:ed:3b:51:e2:d6:63:1a:e5:85:92:67:bb:08:80:a7:74:
         42:93:a6:5f:22:78:2e:8a:e5:d5:20:f9:c4:c7:a2:1e:d5:09:
         9f:5b:45:0a:eb:da:e2:5b:cb:a5:f5:bb:42:05:f8:57:88:72:
         56:f6:a1:c2:84:fe:36:21:4d:63:e4:98:3a:b3:dc:96:d9:44:
         56:82:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----