Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          VYH86YQJeXY381Ogqlhrbd769UdZV+vU5x30+s/U1wo=
Subject key identifier:   01:26:9B:5F:25:8A:8A:CF:AD:13:9C:31:44:5E:A1:AE:A5:31:90:D4
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       0193553FA29A87078A8CAA70FFA9BAF36DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 19:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:53 +0000
Files and hashes:         1: EuLoKUaUe-7E9c6UBiy901mgCJQ.roa (hash: 30nwELRXJPmwmVDnL3AWH2d15f0Yvs0gVtJhOFQeKlM=)
                          2: Pqvpql674hsl9tF0uC0MeHDn3uk.roa (hash: ZbMhBOkIVfAKL+W8X5wVRyZipgf/cqtKvjzOI4Kg00Y=)
                          3: lmh6hr0llnICTdPJqLo3qmd1z5o.roa (hash: mO1WS9PqvlWzLomLaGcirueXzgWnFmLN7RCiZFHAjTs=)
                          4: sS0okFZ_0jantt-RgbAgfFKpM5A.roa (hash: +Zm0lumikRgs16GYm0b5vcrBNxSv2bA80p1XEqwW+Ks=)
                          5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: +k4zcFFHekOICLXi3kD5O54ElNIWqIhAryubuRpvxCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:a2:9a:87:07:8a:8c:aa:70:ff:a9:ba:f3:6d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Nov 22 19:00:53 2024 GMT
            Not After : Nov 23 19:00:53 2024 GMT
        Subject: CN=01269b5f258a8acfad139c31445ea1aea53190d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:d4:ad:63:d5:c1:91:05:cd:ed:f3:9e:c9:
                    74:b5:58:15:91:60:07:4e:cf:a3:d3:f9:dd:8b:6f:
                    ce:cb:6d:0c:d9:5b:79:34:ef:26:12:19:e2:19:7a:
                    35:8f:01:41:eb:ec:4d:12:10:df:69:cd:61:1a:a8:
                    4d:fb:d1:be:29:5b:b3:e3:ae:87:85:9c:a8:9a:e2:
                    72:1d:b7:a7:6e:d4:64:38:f6:80:5a:d7:41:7d:1d:
                    72:d5:3a:75:34:38:9f:8c:29:f6:af:d1:53:08:e6:
                    22:03:89:92:13:3b:b3:34:4f:6a:0a:01:e0:a9:0a:
                    f5:b3:6e:b5:2d:85:37:b3:dc:83:0b:74:0e:13:f0:
                    b0:ec:0f:7a:7a:be:88:ab:cf:02:39:87:94:c6:5e:
                    44:fd:f7:16:90:31:5e:57:59:e0:fa:be:68:0c:b0:
                    b9:e6:05:af:18:99:84:0c:56:10:d7:e0:25:f3:c2:
                    1c:84:10:99:3f:86:c7:c1:8f:a9:65:61:b8:15:a6:
                    12:40:bf:db:cf:2f:ec:f7:0c:5e:52:dd:d5:2a:f7:
                    6e:ba:71:ae:c6:57:9b:f8:5f:88:35:a7:2c:7a:8b:
                    3b:7e:3d:99:26:03:07:17:1c:4a:14:d0:57:7b:f5:
                    cf:ff:c7:54:6c:c9:74:66:d3:a9:0e:32:87:3a:7e:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:26:9B:5F:25:8A:8A:CF:AD:13:9C:31:44:5E:A1:AE:A5:31:90:D4
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:e2:a1:f4:66:76:40:ee:40:34:1f:ea:e9:bc:22:58:ff:
         13:b1:b9:f6:97:f4:87:c5:97:d3:1a:08:08:12:51:c1:0b:08:
         a0:b7:bb:20:da:18:9a:ad:1b:37:aa:13:5a:a9:a3:f3:b4:4b:
         89:8e:1a:97:58:9e:1a:8e:13:8f:ba:da:8e:26:a1:0b:17:8e:
         34:f9:b3:59:c8:61:bf:c1:98:24:8a:ac:76:12:02:66:e8:aa:
         55:99:40:26:0e:42:10:b8:70:cd:ff:a7:5a:55:97:ea:3a:65:
         4e:c1:29:a2:b8:2d:54:31:1e:67:7b:1c:1a:60:5a:df:fe:68:
         31:45:50:2d:7c:b5:93:af:56:2e:02:53:cd:0a:36:a9:1b:a5:
         c6:2e:40:d4:6f:b8:90:f8:1e:83:9d:ca:2f:c7:0d:3e:3e:e5:
         ed:ed:a6:ea:e3:a4:cf:d1:04:ab:ae:f5:83:c5:83:5a:fd:a6:
         27:cc:d6:0c:be:21:bb:e9:58:03:37:35:27:e6:f7:39:3e:17:
         95:87:7f:f9:8b:67:50:1d:e9:c1:16:c2:23:70:35:28:ea:a9:
         37:fe:f7:16:43:ab:a0:1b:b1:44:a6:a2:71:a8:bd:5f:06:ac:
         a0:6d:83:b8:16:28:27:53:a1:58:9c:96:a0:92:00:39:4e:28:
         fc:2f:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----