Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File:                     1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier:          nopgmEC/sbUed5/AyUTrOf6vBHA/NtKImWX8rElCQZM=
Subject key identifier:   01:74:1F:7C:4C:2A:5E:7C:7F:98:F1:7F:25:0E:85:E7:47:0C:EE:35
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer:       /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial:       019356897E4ECDEFAFF909448DC633EBE6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:11 +0000
Files and hashes:         1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: /2jKQSBDSwyPzd4GxZDIyK2PMY/Cf8cd00h3uotUHZ0=)
                          2: oQamNnOe5T5nIYQEHPRqQXGQjIg.roa (hash: wjgcU9yRznIEf8wuTWofBSKmkBYug6IPiU6SJqQ0J+U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7e:4e:cd:ef:af:f9:09:44:8d:c6:33:eb:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
        Validity
            Not Before: Nov 23 01:01:11 2024 GMT
            Not After : Nov 24 01:01:11 2024 GMT
        Subject: CN=01741f7c4c2a5e7c7f98f17f250e85e7470cee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:f9:4d:f2:53:91:36:2e:8d:af:bc:31:d1:
                    59:07:e4:aa:b0:c1:38:a9:31:60:96:f8:eb:47:28:
                    1a:51:e1:87:6e:eb:b8:fb:7d:5b:1f:fb:03:93:05:
                    7e:30:db:98:3a:25:6d:8b:43:81:ef:f3:91:3c:c5:
                    d6:fc:18:90:10:53:b2:fa:89:84:15:49:e1:38:8f:
                    17:38:dd:ca:80:85:af:78:77:8b:24:4f:20:b5:2f:
                    ce:80:25:57:ef:6f:e5:fa:46:8b:43:82:67:90:5a:
                    c1:4e:5b:f1:44:ee:7b:d7:c8:9f:03:4f:36:f8:b9:
                    3d:c4:06:e4:a2:04:ec:30:1f:55:b4:b9:d8:68:3a:
                    ac:9f:b5:f8:02:03:3c:05:f5:58:1a:79:ec:34:0c:
                    7a:18:3f:5f:26:f0:17:fc:0a:dc:a7:be:b0:96:9d:
                    f9:07:bd:ee:41:40:70:a9:f6:47:1c:d9:92:6d:71:
                    a9:6d:96:55:fe:34:3d:da:d7:ad:79:2d:cd:52:34:
                    d3:e8:db:1d:3e:fb:8c:6d:f5:a0:0d:6a:9e:79:cd:
                    ff:68:87:c3:1e:66:e9:a7:5c:2f:b5:15:27:a5:34:
                    ca:98:53:19:2a:94:1d:5e:df:f3:85:d5:93:62:4e:
                    02:cf:f3:e7:88:28:9c:b9:19:f7:a9:10:92:66:64:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:74:1F:7C:4C:2A:5E:7C:7F:98:F1:7F:25:0E:85:E7:47:0C:EE:35
            X509v3 Authority Key Identifier:
                keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:7d:78:25:79:78:31:c6:3d:e5:7c:d4:60:41:35:01:3b:
         68:d8:2c:44:c8:13:39:d7:95:87:e7:b3:02:c7:46:a8:d9:98:
         98:82:3a:63:3c:e0:3a:e5:e9:1f:21:74:7e:93:d1:86:4b:1a:
         45:6f:3e:b9:06:6f:f7:47:d5:20:98:18:20:2d:9a:b9:da:26:
         b1:e5:4f:6f:ea:5f:bc:ae:f2:12:6f:5c:32:c6:c2:d5:e6:e6:
         0e:9f:eb:32:a8:b6:2f:65:f1:39:a1:13:e8:d4:8b:e1:f0:f3:
         80:42:3e:8d:99:cd:67:4d:49:a4:0d:82:d2:2d:51:9a:36:2c:
         c4:f2:14:bb:df:ed:96:c8:a5:23:0e:d7:9c:fe:58:7b:8f:75:
         bb:ff:de:c3:c7:ed:c2:0e:5e:3a:36:54:93:99:06:b8:9d:99:
         bd:65:ad:e8:96:71:3d:0c:71:82:cc:aa:ef:43:de:c5:d1:39:
         91:b9:ed:7c:ab:1f:e8:6b:8d:d0:7b:ef:dd:29:b5:f4:f9:ff:
         60:e3:2a:c8:b3:b9:a1:aa:35:1c:53:c4:e7:b6:37:9b:10:ba:
         af:5e:70:cd:85:35:09:30:84:94:12:ab:ac:7c:b9:cb:0d:fd:
         60:2d:a6:1a:b1:92:70:1f:ce:1b:d4:80:46:b1:e7:e6:f7:3a:
         21:e2:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----