Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File:                     Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier:          2jKlTbFar4kiElgppq5+JCMR8A2aIx/iDT3R/WSsR3w=
Subject key identifier:   0F:56:B6:F9:24:D2:19:8A:97:40:E7:F2:AA:E4:CD:19:64:9A:A7:8D
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer:       /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial:       0193549B1EFC06D69137C3DA4DE664B43E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number:          0851
Signing time:             Fri 22 Nov 2024 16:01:12 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:12 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:12 +0000
Files and hashes:         1: PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa (hash: EOyWcntDPe4fIqfe4aQc1XW6TZ6kvZgJGtWsOmIS0Ak=)
                          2: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: oVmbkLqZvy15hLRd8u/h/TkvwuhPdhTKWy8hqJu1mT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:1e:fc:06:d6:91:37:c3:da:4d:e6:64:b4:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
        Validity
            Not Before: Nov 22 16:01:12 2024 GMT
            Not After : Nov 23 16:01:12 2024 GMT
        Subject: CN=0f56b6f924d2198a9740e7f2aae4cd19649aa78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:e4:3e:e8:41:b3:a8:d7:25:35:a9:7e:3a:
                    ed:f4:95:f9:3b:08:75:34:56:3b:f2:3c:74:06:d7:
                    4c:a3:ee:6d:58:3e:9e:ae:92:ba:4f:9f:11:fd:4f:
                    d0:38:70:a1:3d:df:f3:1c:a6:8d:aa:6f:03:44:df:
                    22:68:ae:75:da:21:67:6e:51:ed:bf:7f:4a:cd:09:
                    70:66:ce:95:98:09:54:20:d5:8e:4f:91:2b:20:8d:
                    ad:ba:f8:4e:e8:86:3f:cf:99:42:0c:67:f0:c0:75:
                    77:c6:c5:06:64:43:27:a0:4a:25:76:3a:e4:b7:68:
                    f0:cd:49:f2:86:61:9b:ae:b4:c0:c7:d9:93:a7:f8:
                    4d:ee:54:1f:5a:04:09:1e:29:82:1f:6b:1a:19:4a:
                    1b:fd:23:8a:db:35:1b:dc:8a:f6:82:a0:23:e6:9b:
                    e9:65:b2:24:b4:ee:28:5b:b6:c2:5e:7e:5a:1c:32:
                    1b:7b:32:40:76:03:e3:2a:8b:bb:76:d1:4c:d6:25:
                    9d:13:b1:a6:89:d4:22:90:35:f2:51:32:33:e4:5c:
                    5d:b6:3f:ea:89:24:df:85:10:05:07:0f:c0:75:64:
                    f1:5a:2d:68:59:4c:3b:ad:4a:20:f4:4b:be:dd:77:
                    ef:ff:bc:5e:d4:36:ff:18:c7:42:45:66:85:3e:d9:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:B6:F9:24:D2:19:8A:97:40:E7:F2:AA:E4:CD:19:64:9A:A7:8D
            X509v3 Authority Key Identifier:
                keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:2a:76:30:c0:f0:69:a1:b8:b1:fd:b2:be:72:f7:90:2a:
         c8:60:fa:ba:8d:07:2b:55:1b:43:09:38:f0:f2:7e:b6:fa:90:
         47:1b:0d:4f:fa:71:16:ff:d2:1f:e9:60:96:05:1e:15:21:28:
         45:9a:05:f0:17:f1:62:98:e1:dd:dc:ab:c8:68:1d:3e:0d:1c:
         09:b1:c9:86:93:09:fa:4a:df:da:da:59:2c:8d:ae:9b:3a:5c:
         57:c1:98:54:a6:1b:ed:fc:ce:81:0c:e9:a1:93:70:e9:f5:3e:
         5a:08:71:98:ee:99:1e:1e:e0:b1:d2:a9:b6:3c:6f:0d:14:6a:
         e3:fc:f9:29:53:9b:8d:e2:79:4c:9a:45:78:0d:f8:10:7e:ed:
         29:2d:90:f5:ed:aa:7a:a0:64:a8:f2:dd:85:29:7f:36:1a:bf:
         a6:b7:4c:6f:9c:66:7e:d4:8f:47:eb:05:b7:62:aa:96:ac:ea:
         28:9e:7a:48:c4:b7:3c:82:f4:0c:1e:a8:0a:41:e2:e6:e5:47:
         0c:31:04:28:73:17:06:ce:f4:e5:14:f9:23:92:b5:f3:c2:04:
         cc:ea:04:34:90:04:bc:f7:46:c9:8f:0c:5e:54:08:e6:8c:a5:
         33:cf:a3:67:d9:75:33:b1:4c:a2:ac:6d:7a:65:78:28:67:2b:
         73:cd:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----