Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          1X5o2TEXvT0a4mQamGjW7qPxoVDWrNMFfyoYWn2tunM=
Subject key identifier:   4C:8A:73:F9:CC:CF:D8:9E:CB:64:0A:05:18:32:97:16:8D:D5:C8:68
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       01935576488C94BDE561C2E6C8AA065D9F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          0E11
Signing time:             Fri 22 Nov 2024 20:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:35 +0000
Files and hashes:         1: 4altraI-OW4DHR4SpRpWOqmZWMI.roa (hash: uAiBdk3XOhXNntItqPAjghVK139NO7vmiNX99JqAapo=)
                          2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: o8RL3DEBTa+sx3nfvlQtQtN5ibDaY1/JTfOg41LOabM=)
                          3: mStKCbco3r4AzhrwvQMenhyF68I.roa (hash: DnhCnaHkJAvrd3xjWo0uI1p14O8VodCKhtcgSlVFarI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:48:8c:94:bd:e5:61:c2:e6:c8:aa:06:5d:9f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Nov 22 20:00:35 2024 GMT
            Not After : Nov 23 20:00:35 2024 GMT
        Subject: CN=4c8a73f9cccfd89ecb640a05183297168dd5c868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:6d:14:f4:21:f8:eb:af:5a:2a:5d:0f:5f:
                    bd:d6:e1:eb:29:9b:1f:90:0f:e8:6d:88:fa:04:d5:
                    8b:cb:db:6d:f7:2b:ce:bb:ec:65:f7:98:0c:64:16:
                    ea:a8:35:3e:57:74:09:57:0d:82:6f:f2:8e:00:33:
                    2f:cd:38:3f:f1:a3:9e:f3:16:1a:62:d9:2c:cc:27:
                    e8:c6:fe:56:19:54:1a:4a:f0:fb:09:8d:27:35:6a:
                    9b:3e:3f:86:5a:c6:7c:77:5d:ca:e3:fb:f5:d9:40:
                    45:d6:fc:d4:ea:16:35:69:fd:2f:c3:d9:d3:78:18:
                    ac:f0:5f:d8:9f:bf:fa:35:b8:c8:7f:cf:e9:f7:53:
                    62:45:ee:13:7c:c1:b0:b2:9b:26:9d:70:2c:19:eb:
                    9b:8f:30:f2:72:50:e1:5d:61:cd:23:c9:55:1c:e8:
                    92:8f:39:cc:d4:e5:b3:87:96:8e:04:25:56:c4:5b:
                    b9:10:96:c9:de:0b:03:69:77:8b:7f:c5:2f:23:af:
                    e3:5d:75:b3:bd:66:0c:48:4d:5e:c3:a4:f3:c2:39:
                    b0:5d:33:c7:ec:22:a2:1c:e2:20:33:d9:5a:b2:77:
                    94:e1:42:62:e4:f6:f9:82:00:d1:9c:cf:b4:d5:92:
                    82:68:7e:17:18:fd:94:0b:66:c8:f6:d1:bd:78:5e:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8A:73:F9:CC:CF:D8:9E:CB:64:0A:05:18:32:97:16:8D:D5:C8:68
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:43:17:f8:cc:58:fd:a8:c6:82:0a:04:ec:96:15:fc:2f:
         f4:96:60:44:8c:04:a5:9a:42:69:33:41:9d:4b:92:b1:36:93:
         bd:19:86:41:f3:1b:4a:91:2c:3f:08:45:1b:29:25:a2:a7:f1:
         fd:42:00:18:dc:d5:b7:db:a7:ad:64:44:1f:d3:8b:10:35:57:
         a2:64:35:6f:16:0f:38:90:f3:03:f5:d9:94:06:67:64:0b:01:
         9f:23:e3:d0:29:55:3a:56:84:f8:83:ba:0a:4e:51:53:76:35:
         59:5b:ad:7f:85:d7:2f:f7:39:a0:85:ab:97:ea:6a:1c:ac:a2:
         34:d4:c7:d3:01:7f:20:78:2a:59:9d:49:d7:8c:2e:b5:9e:e8:
         99:47:2b:d5:d2:37:c3:aa:38:b9:a6:9b:f1:2e:43:be:fb:94:
         1a:75:ce:73:dd:90:25:ea:c2:37:04:67:68:e3:83:66:45:71:
         ce:25:17:06:20:57:2a:46:31:93:f4:f8:72:8f:d7:0f:25:d4:
         22:2d:77:ed:18:1b:f5:50:57:f9:75:d6:7b:50:6b:01:7a:d5:
         5f:b4:ac:28:c7:2b:4c:77:75:42:29:6b:da:c0:ef:42:2d:45:
         cc:b9:2a:99:af:18:6f:29:5a:d0:cf:47:f7:a8:7a:b3:fb:bd:
         13:1a:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----