Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File:                     hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier:          sMEOUGVQLE7ASBL3aM/awFfLyOVpDYOt5jsgIcooK+c=
Subject key identifier:   2D:87:3D:90:C1:73:54:14:39:55:DC:B6:AD:33:F7:8A:DE:9E:CC:B5
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer:       /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial:       0193557693EEDB83F1785D65C321867E22ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number:          1025
Signing time:             Fri 22 Nov 2024 20:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:54 +0000
Files and hashes:         1: BoimVhnhC0jX94ed2093LozwScg.roa (hash: SEJKsSgzYwBBhduM34hvG2TAi8+xQ87Bs67zkkjb4jM=)
                          2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: CM79z2pfVg2B3bWd3tDPBRZpgNTUvpfFqwy0kG6vuR0=)
                          3: y0ElZmfGbhWm1YWRSAUSU4uzTE4.roa (hash: +evScguf0G5x1wkjp+5R/yItbBHEEg/BFmmQimXFa0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:93:ee:db:83:f1:78:5d:65:c3:21:86:7e:22:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
        Validity
            Not Before: Nov 22 20:00:54 2024 GMT
            Not After : Nov 23 20:00:54 2024 GMT
        Subject: CN=2d873d90c17354143955dcb6ad33f78ade9eccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:16:f6:4b:82:9e:47:94:6f:2a:e3:b6:6f:
                    53:14:7f:fb:cb:41:7a:2a:8d:57:17:80:6c:7c:31:
                    d6:7b:b2:3b:c6:e9:62:d5:a3:da:80:2d:f8:7c:e7:
                    54:81:72:a3:a7:6d:20:0b:83:13:11:b4:a0:a4:a1:
                    71:b7:3d:5a:ac:d9:1a:17:40:66:89:5a:1f:85:82:
                    ac:1f:a7:37:53:02:9e:ee:6c:b9:7b:b4:70:5b:3e:
                    52:ef:74:13:a7:b5:46:ba:5b:dc:08:34:74:0c:c2:
                    4f:e7:d5:74:31:ee:a3:8f:3f:aa:32:6e:89:bf:46:
                    92:05:72:3e:97:c9:02:6f:f1:c8:a3:54:cd:d9:fb:
                    f0:22:98:25:48:c8:78:75:50:48:02:30:23:06:ad:
                    da:83:94:63:1d:a4:bb:e0:c7:cc:45:61:70:94:0a:
                    7b:1d:bf:8e:94:db:c9:d6:44:18:48:cd:43:b2:81:
                    23:6e:c2:90:ff:16:ea:d8:92:c1:ae:9b:38:39:0e:
                    7e:b0:e0:b1:49:d2:8b:6d:f7:cf:c5:2b:51:86:61:
                    34:2f:c7:a3:7f:80:4c:d3:ed:fb:a6:47:d1:3d:f5:
                    5a:f4:e8:72:12:0b:6c:19:e0:b6:60:27:3b:e4:8c:
                    15:ff:05:0e:e3:61:24:a8:85:3d:2f:cb:4a:d1:26:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:3D:90:C1:73:54:14:39:55:DC:B6:AD:33:F7:8A:DE:9E:CC:B5
            X509v3 Authority Key Identifier:
                keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5f:79:d4:aa:8d:65:ef:a2:0a:74:51:4c:6f:f3:23:7b:a7:
         75:a5:19:fd:0a:97:b3:48:35:a9:d8:45:ed:e7:bf:56:b0:9a:
         34:c9:87:0f:9e:a0:e2:81:23:31:09:c5:e6:0c:cc:7a:e2:56:
         b7:c6:07:58:a9:37:81:43:21:80:af:6f:f2:32:38:8d:26:b0:
         1f:82:c2:2e:45:40:d5:e2:4c:9b:08:a9:dd:c2:f4:85:6d:07:
         84:cc:c5:20:ab:a5:09:70:15:f1:17:d6:0c:99:05:a1:2c:d3:
         58:3b:f2:43:74:11:23:32:f7:09:df:a7:62:c4:db:b4:5e:68:
         af:a2:9f:50:03:cb:de:af:1d:0d:10:0a:b6:c0:d4:1c:fc:f3:
         9b:ba:56:59:bc:02:ee:2d:02:33:c9:3a:ff:4e:94:dd:f9:b8:
         3d:f9:b0:64:d4:35:e5:86:0f:75:37:6a:d5:35:3c:73:f9:4f:
         47:f4:f0:de:7f:d3:84:9d:69:8a:ee:5c:1f:f2:04:93:48:75:
         79:af:21:2a:ee:d8:e9:16:d0:a1:62:02:89:ef:36:db:fe:47:
         ac:f1:3e:36:4d:e3:c0:48:f7:0e:dc:96:0a:d6:1d:5a:af:55:
         9a:05:73:aa:88:7d:c0:95:7d:cd:23:bc:2d:6c:f7:9c:31:30:
         12:58:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----