Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File:                     KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier:          HFouCFgtmOyfODT5BWmlB5UW03Nr84J0PHD7WJfDcL0=
Subject key identifier:   FB:2C:D3:C7:3C:F7:B7:CB:B7:39:2D:B5:B2:4E:96:E0:BD:C8:6C:95
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer:       /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial:       0193561AF28440FE4578D6728AE010D9C0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number:          096F
Signing time:             Fri 22 Nov 2024 23:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:26 +0000
Files and hashes:         1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: o4X/fKn2cx79ypwCvrYo84ShYUCw797NIxQGLNgycRs=)
                          2: dg_4CT2kTDkZyd2lhnITBQY2Gc8.roa (hash: XkbA9PhnJGswLDlaYqqz9rLQ/XmWPs8RI1j0/HR2+I0=)
                          3: x1Lm7W6-e-pSgV_6x-1rQopZVXc.roa (hash: 6koRD9ExzlqipcjdsTPibegYAPphYX72n0MT6kq3WK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f2:84:40:fe:45:78:d6:72:8a:e0:10:d9:c0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
        Validity
            Not Before: Nov 22 23:00:26 2024 GMT
            Not After : Nov 23 23:00:26 2024 GMT
        Subject: CN=fb2cd3c73cf7b7cbb7392db5b24e96e0bdc86c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:0e:c3:c9:b5:10:0d:9d:dc:65:d5:c0:a4:
                    10:1b:f9:90:4b:5c:cd:f6:fe:3f:d6:51:88:17:f0:
                    88:18:c5:0f:67:83:b5:18:49:fb:a2:d6:83:7c:04:
                    55:8a:73:81:c2:24:77:74:fb:ca:61:72:1e:e6:ba:
                    1f:28:39:09:b1:60:06:a6:05:fd:73:f5:25:9a:6c:
                    82:e1:9d:9e:fd:e0:a1:21:7e:2c:5e:49:e5:18:00:
                    42:b6:61:2f:f3:fe:38:ca:75:71:f8:b6:06:a1:5c:
                    3a:f9:48:cd:67:4c:5e:bd:e4:15:1c:01:43:61:80:
                    8d:7d:0a:5c:82:38:7e:71:29:29:c2:6c:91:56:19:
                    4a:4c:7a:6d:a2:7a:5a:38:c6:47:e8:77:91:e5:2c:
                    5e:67:74:c4:90:42:a8:92:a6:58:0d:f5:07:90:de:
                    18:b3:de:2e:03:37:34:92:a5:d2:37:03:4c:9d:bd:
                    62:b5:eb:27:4f:f8:c9:21:c8:81:66:00:a3:77:91:
                    5c:93:a6:57:f6:82:bd:fc:27:86:e4:42:9f:c9:3f:
                    3e:fc:e8:62:e6:ce:0b:66:bb:90:fe:ca:2d:f6:c4:
                    86:f0:e0:f2:06:73:a5:26:d1:6c:75:9e:6c:cf:b3:
                    1e:df:28:33:5b:17:f0:23:27:78:69:e6:b3:ad:fa:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:D3:C7:3C:F7:B7:CB:B7:39:2D:B5:B2:4E:96:E0:BD:C8:6C:95
            X509v3 Authority Key Identifier:
                keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:0b:eb:01:23:65:81:e2:d3:2d:3a:5b:30:76:00:fe:da:
         76:8d:e4:9e:b1:75:cd:ee:dd:1a:e8:51:f8:22:00:f9:e7:f1:
         e6:de:c5:02:e8:ca:55:1e:ba:bc:ef:84:c1:a4:bf:a6:60:db:
         dc:f4:f0:b5:c1:ac:ae:b5:9d:c8:38:f7:e0:96:89:1e:f5:a9:
         73:a7:ca:17:0b:21:c5:8d:68:1e:e2:2c:2b:4a:07:48:dc:0d:
         fb:a6:75:de:e5:5a:5c:cb:3a:b7:8e:55:d7:77:11:2b:fd:05:
         68:43:e1:76:83:3b:3c:0b:64:38:ca:39:8b:e1:ca:09:15:20:
         97:0d:f5:a6:0b:91:b1:25:44:3b:24:e9:99:5e:c2:ae:c5:98:
         37:8e:27:82:27:97:70:7e:cf:86:4c:27:26:23:e3:15:a0:f3:
         4a:20:c6:cb:e0:a0:97:ec:c1:61:98:4d:ff:a6:92:0e:75:a6:
         47:37:bd:6d:eb:1f:79:41:9f:d0:78:65:69:b0:73:02:0b:bd:
         4e:fa:2b:ff:dc:f4:d8:d1:2f:e8:4c:ea:96:99:75:f7:e2:32:
         f1:04:ea:0e:62:50:66:8d:cd:4c:82:19:47:df:6a:73:3d:47:
         23:19:14:97:6d:2a:29:f8:56:d1:3a:db:a5:41:73:1e:b3:65:
         9d:d4:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----