Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File:                     ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier:          Za8o3vdnyP9TC23etkXTwY8WdO4iSgRDE3Ug1xiBcEY=
Subject key identifier:   DF:42:6D:2B:4B:F5:31:0E:4D:BE:CF:98:D1:C7:7D:3B:32:DE:65:C3
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer:       /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial:       0193568A3C5A4A59502D089F0075E975F26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:00 +0000
Files and hashes:         1: AEsYZWag985uDGtyQ1WNcXmwsTw.roa (hash: 0m9MTAO4RvqM15Ez4+7e4kfcW8+p41LztdlAsnIebA8=)
                          2: ZYrJ0Lt2gZLrcOYeOISfIrzQVzQ.roa (hash: pvbIi7/Am13TVxox11NydRzlcIjsWZL0wVxrinj3yic=)
                          3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: z7HheaiFsiQk3ZBhlN+QQB2UcNn3gfFnWCkt4byFTJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:3c:5a:4a:59:50:2d:08:9f:00:75:e9:75:f2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
        Validity
            Not Before: Nov 23 01:02:00 2024 GMT
            Not After : Nov 24 01:02:00 2024 GMT
        Subject: CN=df426d2b4bf5310e4dbecf98d1c77d3b32de65c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:5f:14:09:7e:f8:4c:9c:0a:76:12:83:5d:
                    72:7f:fc:81:42:8e:09:1b:26:8e:25:be:cb:09:da:
                    5e:be:13:7e:14:11:18:56:c1:48:87:37:8f:a7:0d:
                    a1:38:5e:dc:45:fa:f9:fd:cd:c8:20:d4:ae:d7:81:
                    e1:52:03:39:84:e4:b6:ef:3d:a5:bb:3c:5b:ca:ab:
                    74:5a:bf:35:5a:91:34:bf:a3:f5:86:fa:6c:83:6a:
                    c2:0d:48:94:65:cd:a5:f9:f2:77:61:ff:1c:d3:de:
                    5f:4c:08:4a:95:bb:a1:c3:9d:ae:b7:9c:1c:75:f4:
                    a7:65:1f:a1:50:c1:9a:9d:77:9e:81:e2:fa:08:e1:
                    c2:25:cd:57:e7:b5:a9:00:59:b4:20:21:f9:2c:a8:
                    a5:96:fd:76:c2:ca:87:bd:c5:e4:b6:60:b4:7a:b1:
                    1a:58:63:ce:70:55:c3:84:02:e4:75:9c:92:fe:53:
                    ce:d0:df:29:e1:19:bc:87:6f:9c:a8:fa:76:a1:2b:
                    ab:dd:78:8b:18:7e:43:5f:4a:56:55:39:7c:9a:59:
                    76:03:e3:b4:43:0b:08:77:fe:ef:ac:70:c3:af:64:
                    86:7a:5b:85:27:df:1b:3c:d8:08:4c:ac:bd:59:2a:
                    00:68:5e:af:8a:b9:e5:4f:0d:8c:75:78:1a:23:47:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:6D:2B:4B:F5:31:0E:4D:BE:CF:98:D1:C7:7D:3B:32:DE:65:C3
            X509v3 Authority Key Identifier:
                keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:eb:7f:8d:78:85:23:f6:b4:10:6a:e2:49:63:a1:db:12:0b:
         bc:19:b4:e2:3a:86:0d:3e:2c:d2:53:db:3e:bc:ec:5c:2f:8c:
         4a:b4:8b:bd:92:2c:47:21:2a:c5:bb:23:1d:3e:e2:8e:ab:17:
         c3:94:bd:7f:6b:fb:24:85:70:07:be:34:5e:fa:df:f0:cb:51:
         0a:4c:d1:a3:e8:d6:76:0f:cc:e7:05:16:a8:26:16:c0:40:d4:
         1b:9e:d2:03:ff:85:5b:5a:7d:ec:e0:18:bb:66:dd:fe:91:03:
         e5:65:85:67:33:75:52:88:34:c0:50:84:a7:6c:c8:40:9a:5b:
         05:06:50:01:5b:25:a7:ae:24:46:76:c7:e7:ab:e1:e9:f3:2d:
         9d:c7:87:68:7f:07:9c:21:e3:72:ba:dc:0e:4e:de:b2:83:1a:
         87:98:a0:98:e0:05:4f:dc:d2:1f:ba:8f:63:80:c5:b2:94:1a:
         31:ce:37:72:ab:d1:ae:40:ef:59:9c:42:d6:19:33:4a:73:dc:
         87:ca:12:ad:b0:97:9f:6a:64:ea:f4:68:c7:f3:98:2f:36:4a:
         82:ba:97:62:39:a8:d0:ce:ae:58:9e:3b:6f:07:2d:ed:4f:fa:
         b1:4b:42:e1:22:cb:01:ea:1f:71:b3:d5:3c:a3:54:5a:b8:db:
         d1:ea:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----