Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          V+8/1aAsrCiHB4//fv+hKtQlGTzFyoBYYVtFuDd0rAw=
Subject key identifier:   11:62:B1:BC:4C:70:CD:62:2A:4D:DC:98:AB:BC:67:91:82:DB:2F:9B
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       019356BF81009B672ED8C02430B2512F2444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          0598
Signing time:             Sat 23 Nov 2024 02:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:11 +0000
Files and hashes:         1: Vcv5tAuCRI51Ne4wIervYzxaMQs.roa (hash: VGZj619xEznuknB6YSHghG7OJlFhjtH0eQlPnIUmbOI=)
                          2: keW8OmSuWA4Fq4ou9pECVKeOTWk.roa (hash: mTAFIAxexXYphostW9RGO1WylWb+WwClFFSi/0Mc0zE=)
                          3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: uD686L7iROdlMl45g4b6uJXt49HhaAtE3w+RY3p2v5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:81:00:9b:67:2e:d8:c0:24:30:b2:51:2f:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Nov 23 02:00:11 2024 GMT
            Not After : Nov 24 02:00:11 2024 GMT
        Subject: CN=1162b1bc4c70cd622a4ddc98abbc679182db2f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:47:fa:39:ac:9b:2f:ab:ee:fa:59:7b:7f:
                    31:d9:5b:86:97:b0:f6:30:68:52:ac:79:6c:34:72:
                    8b:c8:f5:b7:56:1f:cd:a6:4f:4a:ae:2e:eb:17:f5:
                    0d:09:42:ec:ee:d2:01:2e:cc:7e:0f:73:0e:ff:36:
                    0e:7c:11:a6:9b:7c:25:14:cf:61:ca:ae:f0:38:9c:
                    7e:1d:25:88:26:ee:77:93:38:e5:ed:c4:1f:9e:5f:
                    65:01:0f:90:38:6c:fc:eb:74:42:89:5a:27:28:87:
                    7d:5e:60:44:85:e4:f0:94:d3:74:51:24:22:c2:b9:
                    52:b9:aa:03:0f:55:2d:1f:b6:45:cc:bd:f7:a6:2b:
                    80:e0:5e:30:98:ff:7c:07:10:c5:20:f9:8c:30:12:
                    c4:af:1f:85:a4:89:f7:e2:37:40:05:52:e5:5a:fc:
                    d6:c7:d6:fd:dc:00:14:17:69:37:e8:1e:d3:3c:cb:
                    aa:6b:f3:5c:e4:20:d8:65:b5:e9:53:16:a7:3d:37:
                    ce:34:dd:4b:f1:03:b8:56:ee:ba:6b:35:73:33:9e:
                    98:f2:04:ad:23:f0:f4:14:91:fc:bd:b0:9c:93:db:
                    fc:86:ab:d8:0c:16:68:92:d3:48:2d:17:2e:d8:c3:
                    82:bc:23:0a:7d:21:c6:69:d6:09:e9:3d:e6:33:4e:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:B1:BC:4C:70:CD:62:2A:4D:DC:98:AB:BC:67:91:82:DB:2F:9B
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:fc:6e:5d:8e:46:f4:c4:e0:48:e2:57:9a:b7:3c:2d:e5:
         ba:40:72:04:73:ae:54:90:cf:3c:67:ce:82:72:6e:23:5f:1d:
         e6:e9:aa:71:b8:88:3e:2f:84:1f:5e:04:aa:fc:e8:18:90:e4:
         6f:63:f4:f8:14:be:36:de:ce:2d:30:29:1b:6d:70:bd:8f:ed:
         de:97:97:51:36:9a:ab:5f:1b:cc:3c:a6:97:65:ef:07:34:52:
         8a:c7:22:b7:eb:d3:40:40:99:38:e2:96:6b:6f:2c:4b:8f:70:
         74:46:24:67:07:18:8f:23:f8:77:1c:c6:c0:8b:a3:7f:12:42:
         87:3c:45:55:05:9b:24:7c:0d:ed:c5:de:c3:3f:15:bc:6a:8b:
         5e:59:4a:ff:8b:0f:61:55:c0:50:19:71:77:67:62:74:ab:d9:
         79:14:e2:30:f6:f9:de:b1:71:28:1f:db:18:bd:ad:d8:ad:fc:
         c8:b3:51:2b:36:83:0d:9a:e0:3d:6e:c3:0e:50:2d:ae:f9:db:
         72:c3:57:70:a2:fd:4e:6f:12:26:b7:ea:cf:9a:fa:c8:f2:61:
         12:63:ac:2a:4e:a3:42:ea:f5:05:2d:bd:00:60:ff:a5:c7:17:
         a1:cc:c8:84:c2:3a:cc:ad:91:3d:f5:50:1f:ee:b6:3e:01:00:
         1e:30:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----