Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft
File:                     4UCgR8izCtxtnuMmpmnf0BHZtdM.mft (raw, json)
Hash identifier:          0MvGdm8MiaxhV2dJL+YQqdjJ3BBWCYA8qcArtNTfGlo=
Subject key identifier:   31:51:5F:F3:C4:0A:36:31:B6:91:33:FA:2B:5C:CE:F6:CE:A0:44:24
Authority key identifier: E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
Certificate issuer:       /CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Certificate serial:       019351996B960AB713D8102E17720CA20B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft
Manifest number:          0B5F
Signing time:             Fri 22 Nov 2024 02:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:29 +0000
Files and hashes:         1: 4UCgR8izCtxtnuMmpmnf0BHZtdM.crl (hash: wkLZQOvmKxq+TXj7JNtLUbhZqDS40nJ260m1CrkAexY=)
                          2: JI4EqV7JahadsWKZ3qBsRHwJ-_k.roa (hash: Y/sByGfQI5WUZDQyWWpgA2RiiOeBWRNyzS5KdYdEA3M=)
                          3: _yKSV3Cw88-5eMN50mN_GBipivo.roa (hash: jD9NPtiwMNoYPM1e1E1pYp6KE1bJsgSZIGzRfoci0kI=)
                          4: yY--yRq1UPn_O1bPTcThHxjE-yg.roa (hash: PuUa5lED60aDnEMICr9J2zGiAqU77tVmqLiqpU1+WQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:6b:96:0a:b7:13:d8:10:2e:17:72:0c:a2:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
        Validity
            Not Before: Nov 22 02:00:29 2024 GMT
            Not After : Nov 23 02:00:29 2024 GMT
        Subject: CN=31515ff3c40a3631b69133fa2b5ccef6cea04424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:57:c0:c3:31:0d:43:85:24:79:a1:de:af:
                    08:9c:d7:30:59:44:c1:dc:40:32:3e:ba:c9:12:3b:
                    9c:c9:89:47:d4:ea:aa:f7:8f:a7:59:fc:ca:6c:aa:
                    94:d7:19:9a:42:51:e0:ed:52:bb:d9:96:5b:bc:cb:
                    a7:4a:e1:a8:9e:23:80:6f:7d:d0:1f:6c:1f:88:1e:
                    53:68:38:46:42:e8:21:28:06:00:b5:0e:ad:e7:b1:
                    4c:5c:fa:5e:15:b7:2e:fd:58:72:a4:69:02:b5:40:
                    ac:8b:a9:85:6b:45:47:05:1a:61:b1:f2:fa:66:40:
                    e0:b4:fc:62:c9:7c:68:5b:1c:67:8a:99:bc:32:2b:
                    b5:0a:0b:cd:aa:74:76:e7:eb:12:d8:4d:cc:7f:4e:
                    0c:bb:c0:aa:55:cb:07:53:91:ed:0e:7a:57:15:81:
                    99:40:64:d0:85:19:ea:d0:bf:d6:80:9c:c0:b5:10:
                    d9:32:6c:2f:b2:5c:68:88:92:f0:2b:91:34:cc:ff:
                    34:49:58:6a:ed:ce:b3:a3:93:8d:50:71:b9:d9:89:
                    17:49:11:c5:d2:9b:a1:9f:4f:98:1d:e0:08:5a:f5:
                    1a:8c:f2:15:85:3c:82:79:96:ac:b5:4a:87:db:87:
                    b0:44:34:69:44:1b:50:ca:0b:7c:d7:02:45:bb:6a:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:5F:F3:C4:0A:36:31:B6:91:33:FA:2B:5C:CE:F6:CE:A0:44:24
            X509v3 Authority Key Identifier:
                keyid:E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:81:af:18:7a:a4:42:01:5c:78:82:8f:d4:13:70:6d:e7:
         16:de:6c:ea:d7:81:94:fb:7a:e0:46:8a:d1:d8:ac:67:c1:5e:
         60:07:ba:e7:4c:c8:73:c2:01:22:fd:bd:4b:42:ea:b7:16:c3:
         0f:2b:40:4a:2d:97:9c:d6:9f:9a:b5:08:ac:d4:a0:6c:ad:6b:
         98:4e:9b:31:9a:4e:f6:c2:bf:d2:cc:cd:18:6a:d0:9a:37:ec:
         8b:b6:13:4b:75:24:7a:50:33:8d:fb:9d:92:65:90:3e:fc:82:
         b4:34:f7:02:0c:27:a9:6d:8c:2c:0d:39:fd:d4:87:60:8d:12:
         d9:1f:fd:9c:2a:aa:c5:91:89:cc:92:a8:2a:24:5d:ef:ea:44:
         7f:07:b8:f1:46:bc:b9:f1:c8:35:75:91:ac:ec:23:92:6a:8f:
         3f:b5:73:51:15:84:1b:d6:6f:23:0c:b7:a8:a9:85:cf:95:e7:
         e4:31:35:e6:a0:50:8a:02:f9:9e:1d:3b:cd:c7:b2:31:69:bf:
         bd:95:84:b6:7f:99:ba:8a:29:c3:ed:e8:6e:53:3f:b5:0c:f5:
         2c:e0:e8:57:8a:27:b8:71:89:79:40:78:a2:12:1f:ef:8a:e1:
         ae:99:4e:89:85:a5:5b:65:12:c1:33:fa:e2:21:5f:4e:95:f5:
         61:5a:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----