Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          SxooBxffJVGnRnIiDVEaLVbpBohlPH0rKyqT0G+h3W4=
Subject key identifier:   28:D2:85:AF:E2:71:80:7F:09:FE:1E:79:1C:2E:6F:0F:20:8B:3A:E1
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       0193639F8CE75D358B0411F3D873FF5EAF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          10B9
Signing time:             Mon 25 Nov 2024 14:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 14:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 14:00:20 +0000
Files and hashes:         1: 1-zY5nX0Ko1fskucGkupjgZY2m9M.roa (hash: CTQD3sxvPJ8PmIyb9A4G5QzhsjSiUilSLanPUxGsA3A=)
                          2: E4JLwMb808DcWynGqHo-2m-fARA.roa (hash: pN96JWuV/ceKyNn39tlxHy+Scd2OOzlfJgr2eQKsDsY=)
                          3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: MuO48m5pwPKsKU7/gplaXAkGyhI8RCiMDIZwYff93/c=)
                          4: ne6EcARtBvtZXTYD-qadcFi2bIc.roa (hash: mEuxMNMn0MzB0NNc39ChMf+XZfruorfjy82w+U8ujVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:9f:8c:e7:5d:35:8b:04:11:f3:d8:73:ff:5e:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Nov 25 14:00:20 2024 GMT
            Not After : Nov 26 14:00:20 2024 GMT
        Subject: CN=28d285afe271807f09fe1e791c2e6f0f208b3ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:d0:77:49:c6:33:19:90:37:61:7c:06:6f:
                    7b:a3:bc:f2:73:30:94:ad:ec:b5:7a:d0:34:49:47:
                    42:c6:e1:f5:f0:52:db:c4:35:3b:28:ff:b1:1b:db:
                    f1:6d:80:70:22:47:e6:b6:2f:bd:ff:b2:ab:1e:2e:
                    af:71:02:72:cb:f0:ce:f5:50:30:ec:92:3a:6c:74:
                    07:af:6a:b2:64:90:29:87:62:b8:d6:36:e8:27:8a:
                    b5:b2:7f:8a:61:ca:ca:97:a2:62:07:9d:1a:02:be:
                    69:8c:2e:e4:e7:34:bd:99:95:79:67:33:3c:dc:a0:
                    6d:df:01:ae:c2:4d:4c:a5:32:9c:46:46:ef:e4:2f:
                    29:98:43:72:9e:6b:7f:01:70:63:84:11:b7:16:d3:
                    8a:a6:c9:7a:77:40:26:a1:2f:be:b1:8f:93:81:d0:
                    1a:65:f3:23:0f:36:97:d3:9c:b7:f4:d4:2a:97:d8:
                    ff:a2:c1:1a:77:e3:dd:0a:d5:05:9f:61:63:c5:be:
                    e8:ac:33:d6:25:46:fb:65:50:95:c0:be:65:84:5f:
                    b5:0e:7d:33:21:ef:d3:48:58:9a:9c:c5:b1:be:ef:
                    d8:30:ad:b8:34:82:92:65:e5:c8:7c:77:bb:7c:4c:
                    ee:55:ec:29:05:5d:16:19:2d:d3:1f:b2:d2:bb:d1:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:85:AF:E2:71:80:7F:09:FE:1E:79:1C:2E:6F:0F:20:8B:3A:E1
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:37:29:18:7f:2f:ec:45:b4:0e:00:0a:6a:f7:d0:32:3f:
         3e:cb:69:07:f0:eb:6f:47:43:79:f1:fd:92:73:ed:e9:4a:c5:
         c5:18:97:95:e1:66:c3:62:e5:70:d4:5d:4f:fa:3b:05:a8:a2:
         7e:7e:91:f1:8c:fa:9b:df:c4:20:48:33:45:8b:52:8c:e6:01:
         cb:a0:50:3f:3c:37:f3:c6:f2:e4:6a:70:e4:f6:d9:ef:2a:09:
         e0:c0:e7:22:bc:0c:cd:a5:64:5d:6a:4b:60:48:2e:96:be:4f:
         fb:12:cc:17:8f:03:bf:8f:4f:67:02:e4:c7:07:d5:18:79:09:
         06:f4:34:53:37:de:3b:c9:82:51:9b:35:21:a1:da:37:10:3d:
         d3:6b:d1:f1:26:81:7d:ac:af:af:6b:75:55:39:1a:08:97:17:
         87:42:40:97:bd:a4:92:2b:62:74:a8:d4:65:59:3b:27:ed:39:
         e1:36:02:01:46:7c:71:ca:e7:6a:49:b2:1f:35:da:9e:8f:fa:
         78:74:d6:b6:f4:d3:9c:32:89:15:92:26:ff:81:5b:25:10:bd:
         89:a2:5f:5a:6b:14:d3:72:7a:14:6e:b6:40:27:2c:fa:df:f5:
         c6:68:99:25:01:07:28:ed:bc:a6:be:77:af:7a:b9:b2:e0:bf:
         29:1d:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----