Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          SIdHcA76MwsNo5N/CjeEAkWslhpYmKAZAoM4rWpvdvA=
Subject key identifier:   EC:80:74:25:DA:D1:C4:76:6A:E3:A9:84:64:E0:58:74:29:DB:5D:CB
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       019356F72BA5022AF89CB0E7E94097E35A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          1025
Signing time:             Sat 23 Nov 2024 03:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:59 +0000
Files and hashes:         1: LmNg_R3M4mmIGYXkT5RDUiU_Nrs.roa (hash: bnn12WzO45KLsrn3dOQ9ObBau1Yh4oVjig0BAZB7XEc=)
                          2: SDo5BpnN2Z2dkbdOu07iGQhfeOw.roa (hash: 2bL63vK+wd0LrGnqGTgDGN7m2PX0zc2TP5+Tqc4Txag=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: hUfAoNokv49mojaj9YuwZ9pI8M/nrdsv+OBo2bdP0vQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:2b:a5:02:2a:f8:9c:b0:e7:e9:40:97:e3:5a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Nov 23 03:00:59 2024 GMT
            Not After : Nov 24 03:00:59 2024 GMT
        Subject: CN=ec807425dad1c4766ae3a98464e0587429db5dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:62:0b:e1:ec:b3:58:9c:31:1a:84:81:e6:
                    7b:12:ba:9e:72:ba:b3:c4:8e:35:a8:33:3c:89:44:
                    c2:89:9e:be:77:91:a6:a7:34:75:a2:ab:3d:ed:b2:
                    af:8c:db:9a:86:77:4c:b2:65:4e:56:6a:8f:6a:d5:
                    2e:ba:86:c0:b3:0c:bd:e1:2f:86:e2:70:59:f0:3a:
                    51:d4:fa:62:87:5d:cc:4a:37:2b:16:bf:ec:4f:15:
                    d5:8a:a4:b3:dd:0d:65:4f:89:71:c0:44:9d:36:f7:
                    aa:fb:6e:11:27:4a:08:2a:70:8c:e6:86:02:65:a5:
                    b7:a0:39:3e:b2:ff:a3:25:81:1c:7f:70:9f:01:74:
                    c5:ba:17:92:e4:90:dd:92:15:19:63:94:d0:e6:c6:
                    d6:35:b5:10:6e:79:19:04:ec:2a:95:3c:ea:72:ee:
                    8d:41:22:33:a1:34:45:97:ff:57:dd:35:40:72:6c:
                    66:cb:ce:a0:6d:f8:c2:f5:1d:52:33:ad:a1:75:c9:
                    79:4b:1c:e7:d5:d6:77:c8:9c:e4:c6:6d:48:d4:1d:
                    e4:c6:ab:8d:0a:5d:78:e1:d5:b4:4e:15:65:c8:de:
                    8b:65:97:14:90:98:94:0b:b8:d9:e0:c5:22:38:aa:
                    b3:4c:3d:ce:b0:11:61:48:28:2c:53:07:e5:68:ad:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:74:25:DA:D1:C4:76:6A:E3:A9:84:64:E0:58:74:29:DB:5D:CB
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:0e:2f:12:73:a3:31:54:e5:11:c3:9f:e6:60:5a:b6:b1:
         42:9b:3b:8f:b9:e3:56:ec:bd:5b:87:db:23:a3:73:dd:02:2e:
         c7:e8:15:d7:6a:e4:81:35:be:f9:8c:7c:d2:49:05:06:33:11:
         da:a2:1e:60:26:39:c0:a3:7f:e5:ea:c2:28:ff:d8:fa:44:44:
         45:89:8c:99:62:57:5f:09:43:5f:4e:c5:b2:2b:73:af:24:45:
         bb:48:f4:5f:f6:12:ad:be:7f:a1:ea:ef:74:f9:f3:9c:30:07:
         e4:e7:69:33:a5:a6:8b:f6:95:44:46:3b:e0:29:3e:5d:7f:76:
         9b:5d:a6:c6:c7:2d:8d:82:e8:1c:3b:ee:6a:54:27:1d:a8:ae:
         f1:a2:2c:29:8a:39:4c:52:f7:10:c8:fc:b6:b8:c1:21:55:e7:
         f2:4b:70:be:4f:b5:85:34:7c:50:2c:05:e6:28:ee:4a:a6:ec:
         20:41:81:e9:73:2d:c4:e1:c7:cb:26:d4:10:95:49:4a:94:a9:
         75:d5:1a:d6:14:2b:d1:3c:36:18:0d:2c:85:8d:a0:41:4c:af:
         d5:a5:ae:f4:6f:fe:f7:05:0e:7f:25:49:85:11:6b:76:4c:61:
         b3:31:97:14:f4:8d:9f:7c:9a:e9:cb:28:9d:63:67:12:5e:dc:
         94:9c:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----