Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File:                     A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier:          ymYMsjtMVQD1F4M0Aho9AXzcKetFrUZV728EOmyTtfA=
Subject key identifier:   ED:7C:AE:29:18:42:C8:E7:3D:D3:87:CC:B4:87:E8:D1:DD:97:87:00
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer:       /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial:       01940646EB98DF56FF4BB6228E072229FE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number:          0FD0
Signing time:             Fri 27 Dec 2024 04:01:38 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:38 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:38 +0000
Files and hashes:         1: 0F4Iz2bBZpzI7P8viD6JfDopoA8.roa (hash: axu5M+9YwSxSfnQqY4kxm7IUlN4wLDEb2hGebzksNlw=)
                          2: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 7ahONU1YQw3VAJUyx1yy3d+ZNdUmG8WIE5XysrKjssw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:eb:98:df:56:ff:4b:b6:22:8e:07:22:29:fe:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
        Validity
            Not Before: Dec 27 04:01:38 2024 GMT
            Not After : Dec 28 04:01:38 2024 GMT
        Subject: CN=ed7cae291842c8e73dd387ccb487e8d1dd978700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:49:69:57:26:c5:71:56:c7:c3:db:73:ac:
                    0a:bf:8f:90:03:b3:1d:49:09:b3:16:81:88:a4:4e:
                    70:1c:d2:48:96:73:90:d5:60:16:c3:95:65:e1:2a:
                    e5:fd:73:5b:c9:d9:25:ef:c6:d6:33:02:98:5a:fb:
                    40:ec:61:5c:2b:5c:6d:5a:42:d5:1e:ce:5c:04:05:
                    0b:9e:fc:34:92:49:65:f1:31:d2:ec:48:1a:f3:15:
                    72:c2:3c:70:49:e9:a6:51:4d:24:43:8a:33:13:f0:
                    d0:f1:62:1d:8a:5e:6c:66:c7:53:64:e8:73:7b:49:
                    cb:5b:1d:33:8d:f9:8a:06:d1:cc:b2:ad:1e:5b:c0:
                    a8:bb:aa:55:d8:ba:b3:d4:87:33:70:34:65:41:c5:
                    a8:8b:f2:93:05:63:3c:40:bf:ac:81:21:5c:4d:63:
                    3e:32:2a:0b:19:29:9c:5e:c1:bb:ca:d4:a0:f4:21:
                    24:38:89:58:89:bc:e0:d6:55:03:5c:f9:f8:02:53:
                    0c:fa:5e:0e:b1:a3:9d:28:20:81:7e:95:6b:8b:19:
                    5b:aa:bb:23:19:93:64:36:9e:a9:43:8d:13:cb:5a:
                    12:2c:45:17:b3:0a:78:26:02:ef:03:b7:72:81:e4:
                    05:5e:3a:85:33:19:36:81:48:b9:fc:7e:7a:c1:8d:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7C:AE:29:18:42:C8:E7:3D:D3:87:CC:B4:87:E8:D1:DD:97:87:00
            X509v3 Authority Key Identifier:
                keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:7b:a5:31:ab:ff:75:f9:82:5d:de:e3:8d:41:f0:9b:ec:
         fb:51:20:6e:4e:13:51:bf:89:89:9c:df:13:d2:94:ce:0e:a8:
         ba:48:7b:1e:82:9e:99:8b:5d:70:0a:94:c7:aa:14:d6:f5:f7:
         e8:a2:e3:54:98:8a:96:99:d2:2d:0e:b2:53:91:86:09:e3:a2:
         13:6b:2e:08:e6:45:1e:a2:7d:0a:ef:32:93:ed:6c:fc:42:d0:
         76:67:fb:87:3c:61:4e:3a:33:a3:35:d3:09:36:93:cd:7b:44:
         61:ab:b9:ae:3a:b9:68:76:a3:8f:8c:73:06:d2:db:c5:ad:bb:
         08:67:b3:8d:3c:f5:e8:9c:20:c4:17:f9:fb:d1:69:fb:23:3b:
         47:d0:89:90:fc:41:e1:be:31:d5:1d:13:47:5b:70:7f:9c:01:
         24:80:ac:8c:ad:77:be:5b:19:1f:01:8e:10:cb:16:d6:0c:2b:
         84:6a:1a:84:e2:40:f4:e1:6b:c1:ef:8e:64:07:d4:63:74:31:
         41:50:df:18:39:20:85:ba:8e:0d:72:77:29:4b:91:60:d9:80:
         b2:12:c8:55:c3:49:22:8e:3a:e5:62:3d:be:30:ca:68:92:46:
         68:fa:db:d5:bf:61:d6:dd:32:9b:1d:75:19:6d:f2:46:32:9c:
         dc:a2:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----