Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File:                     g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier:          HYaR/0hoy1ozWmqoN+Uw0F2EYZcx49SKFNKQT7+utJM=
Subject key identifier:   72:CF:11:14:7E:E4:22:81:95:36:48:CC:C1:64:05:C2:3D:21:25:3E
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer:       /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial:       019353F5C17D3D6422BC99DBA9DC06659EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 13:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:34 +0000
Files and hashes:         1: 2mR7XyS9TGOtkhE1irnRxvk1z8A.roa (hash: Dhezoutf2DrC9umNfUjZaEj8Nm5W2xAjWUvw5AaDRnk=)
                          2: B5WdsEkW5-OF5-zWm3HdrWn2w6Y.roa (hash: lSv/o4e6WbsrzmKM+yeNHbtxUnmuLlnBUaM8nO9pvMI=)
                          3: Sw62IldNSUfgh5SzmwYQA1fxe1M.roa (hash: yMb8/wbBiuaCnwDEGz6uCONG8fmPh0zHxKd0RijEVRk=)
                          4: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: hbeR5ACGpR3TaZV2+g54zlo6ZMVq4bdrfmux1/bpOv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:c1:7d:3d:64:22:bc:99:db:a9:dc:06:65:9e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
        Validity
            Not Before: Nov 22 13:00:34 2024 GMT
            Not After : Nov 23 13:00:34 2024 GMT
        Subject: CN=72cf11147ee42281953648ccc16405c23d21253e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:3e:bb:1b:76:2d:58:a9:f9:20:63:ba:73:
                    fd:37:9d:6b:3c:c2:eb:68:55:a8:e9:c2:49:0b:90:
                    c2:a7:e4:c0:66:e1:78:60:d4:85:38:22:6a:e9:3f:
                    86:18:07:7f:2e:e5:e1:ee:95:62:41:56:85:a7:12:
                    a7:46:88:60:37:f9:f4:b7:82:fb:a2:5a:01:1b:f4:
                    dd:08:55:03:79:e7:b3:75:90:32:4f:86:59:9f:94:
                    69:b7:10:62:b2:c8:85:89:40:24:00:60:e5:4c:8f:
                    5e:ed:e0:e2:66:0a:54:25:41:35:68:0e:1c:b9:ef:
                    23:d2:6c:ec:cd:29:8d:eb:07:da:36:ae:e5:5c:73:
                    61:3f:a8:42:f7:ef:6d:1d:16:c3:59:51:3f:75:83:
                    76:81:55:38:73:58:e8:38:24:cc:df:c4:92:34:65:
                    09:16:3e:bd:cd:5b:7e:48:7c:ac:45:e4:0c:76:8b:
                    7d:2a:10:67:02:02:fa:b7:7b:40:f5:d5:65:71:22:
                    f5:68:a8:61:86:56:5b:02:79:c2:2f:93:1a:95:8a:
                    0e:37:43:fc:6b:bd:e1:13:ae:68:aa:24:75:8c:f4:
                    e3:37:78:b0:9c:f6:6e:e1:9e:ec:1f:5f:77:7a:d9:
                    02:01:29:6d:d2:35:82:46:f9:3d:35:98:7c:28:e2:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:11:14:7E:E4:22:81:95:36:48:CC:C1:64:05:C2:3D:21:25:3E
            X509v3 Authority Key Identifier:
                keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:9e:da:7d:04:67:c2:b9:e3:17:26:36:b0:5f:1b:a8:1d:
         8c:da:95:69:a1:3b:f3:5f:79:73:b2:50:79:bf:2e:23:29:a6:
         f3:e2:22:69:dc:8a:74:7a:65:26:2b:44:d2:95:c2:1c:e1:ba:
         51:33:92:a1:08:05:3b:5d:38:f4:90:c1:9a:f4:89:d9:a7:64:
         74:8f:de:a0:61:9b:fc:67:b9:82:b9:99:7a:a9:1c:34:9e:e1:
         65:14:6d:d8:97:b4:77:52:56:2c:27:5e:47:11:72:98:72:22:
         37:7c:e4:0f:e6:9a:5a:3e:12:69:9e:f8:43:30:e1:1f:7a:79:
         e9:c6:f8:75:d3:a6:de:6c:ee:7f:c2:d0:57:de:1e:81:41:17:
         e5:a6:2c:36:9b:5a:72:a4:c2:b0:3e:d4:ab:0f:25:7c:de:9a:
         02:4a:cc:50:a6:97:c2:9d:6c:eb:03:0e:e7:a8:38:3f:8f:94:
         80:17:1b:80:de:1b:ed:e5:6f:91:56:70:ac:be:5a:6e:d7:f6:
         17:fa:af:78:85:e5:a4:c1:59:a9:8c:f7:ef:12:61:44:89:dc:
         67:fb:5f:92:f9:cb:76:07:c8:89:90:13:68:2e:d1:5e:74:ee:
         b1:ca:21:6f:9a:54:46:6e:1b:32:8d:93:b6:b5:7e:9a:bc:d8:
         c9:87:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----