Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          QFhnEuv2+vunJmrRP0CCt4gk9pbk5uwLPj30CcaDYes=
Subject key identifier:   67:16:8A:B2:9E:EC:65:D2:C8:46:D5:63:2D:1A:BC:84:A7:12:FE:AC
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       0193568AAE4350324FE40973D5B9A069B15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          06E2
Signing time:             Sat 23 Nov 2024 01:02:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:29 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: JetIidZ1ntqGdmQ3y4j3vVt+VI18Ro004pVEOtgXq7s=)
                          2: TUFSQFmtZhCCawy7xzkNJQuTrCA.roa (hash: Tub6TeLFeURGxZx0lUxbVjgiEU5YE6dGcZJgp/e+zok=)
                          3: WHcJQXw_kgO4GnF1aZY5-D5333I.roa (hash: saWQ8vtkMr6ADoy19mqoUZJPUB++D7+WnKuez79ymZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:ae:43:50:32:4f:e4:09:73:d5:b9:a0:69:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Nov 23 01:02:29 2024 GMT
            Not After : Nov 24 01:02:29 2024 GMT
        Subject: CN=67168ab29eec65d2c846d5632d1abc84a712feac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:89:5a:74:d5:84:8e:2a:9f:49:f2:5c:30:
                    d0:b2:cf:8e:20:a0:5f:50:c7:4c:46:90:80:ad:7d:
                    3d:11:ad:40:cc:2e:50:ae:25:b7:1a:48:3c:b6:61:
                    70:6a:90:69:4a:c0:62:67:e4:a4:df:e9:6f:4c:23:
                    f9:d2:c1:b3:c7:3b:03:02:66:32:fe:ae:07:0a:66:
                    fd:46:9a:0b:a7:f8:7b:0b:05:c6:4d:91:27:27:15:
                    1e:61:2c:36:b1:f7:3f:eb:7c:8f:b1:42:b3:49:f8:
                    84:4c:54:79:ee:18:82:8e:c0:1b:89:26:36:9a:7b:
                    7e:37:c3:b8:64:5c:8a:78:e4:c5:73:e1:d5:55:5f:
                    af:55:e2:44:74:9c:fc:16:09:f0:a0:f8:65:4d:b7:
                    b2:56:15:f6:f5:e2:51:d8:a4:07:0a:a1:59:58:3e:
                    9b:d7:4e:4e:df:df:4d:37:59:a9:f7:50:89:a7:39:
                    52:bb:70:1e:c7:9c:60:f5:2f:d4:c2:35:aa:eb:07:
                    ee:1e:c1:32:e3:0f:15:12:68:c0:ab:93:e1:50:07:
                    58:ee:da:36:d4:da:7f:9f:09:d3:af:e1:dd:ba:82:
                    1e:f6:79:1a:c2:0a:cf:2d:c1:80:a8:db:ed:1f:4d:
                    84:15:b6:d7:f7:7d:b1:e0:7f:c3:d0:2b:7d:ca:5e:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:8A:B2:9E:EC:65:D2:C8:46:D5:63:2D:1A:BC:84:A7:12:FE:AC
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:bc:6b:0f:80:46:ab:66:0f:08:54:21:e0:b4:4a:eb:75:
         cc:66:e5:87:ad:92:a1:90:6e:0d:8a:b2:ca:79:a8:a3:ae:d3:
         0f:2e:63:29:2d:2d:4d:0a:e8:12:87:ac:ab:cd:39:9f:d0:18:
         86:7a:1d:7c:44:ba:58:d2:39:e2:93:12:c4:e2:79:dc:de:28:
         a7:a6:cb:2b:b3:4c:a7:f5:bb:32:12:6f:cf:c6:33:60:24:40:
         bb:3d:8d:14:dc:fb:6c:bf:4c:18:88:da:5a:d9:2c:9a:13:58:
         9a:a4:5c:f1:19:00:ea:7f:28:ee:e1:c6:2f:04:b6:75:13:af:
         0b:6f:3f:c3:18:c4:00:51:4c:62:f3:fe:05:20:fb:a6:90:ae:
         e2:c9:68:70:b6:6c:b2:84:21:68:8f:40:13:a8:b5:c1:4e:02:
         a4:27:cf:86:d0:02:93:89:7d:c4:20:42:74:2c:0c:03:52:36:
         3a:fb:63:25:ca:bc:62:ac:3e:36:89:46:f2:de:3c:eb:c1:aa:
         97:db:c9:88:89:27:d8:93:d9:9b:5e:71:76:04:c4:9f:33:53:
         f6:53:de:b1:52:d1:86:a0:f5:73:11:9a:a6:d4:5d:8c:3a:0c:
         27:7d:24:f1:f0:0f:c1:fe:73:de:24:85:7f:88:8a:3d:d5:97:
         bd:37:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----