Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File:                     hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier:          G10wzjItDf7eAK3cC3Rm10DUR49FnqAVtT32iFRdS1w=
Subject key identifier:   70:FB:ED:5F:07:B6:12:46:3A:2E:3E:69:0B:25:87:79:F2:37:E6:65
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer:       /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial:       01935764E93E446A236C0576DA1555AB3775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number:          0E71
Signing time:             Sat 23 Nov 2024 05:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:51 +0000
Files and hashes:         1: fc4zeDp3HA720j3PzKPvwjSbbmQ.roa (hash: 1hWwA+/esSUAeHXCT9/rCablApb0RrOI8GLgMw7SFC0=)
                          2: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: Zl6MylmOER8MBvlncldPNDtUz44pfs03sWovOBxHMQ8=)
                          3: zZQhoXvJ8-CB6DP26iEvXrYXKRk.roa (hash: BbqAVxnNX5NuyXPK+MfwsV0mxcwontXLtXt4Pb6yO1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:e9:3e:44:6a:23:6c:05:76:da:15:55:ab:37:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
        Validity
            Not Before: Nov 23 05:00:51 2024 GMT
            Not After : Nov 24 05:00:51 2024 GMT
        Subject: CN=70fbed5f07b612463a2e3e690b258779f237e665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:c7:e0:0a:cb:14:c6:be:92:4d:58:10:f7:
                    72:27:85:16:48:68:14:6e:48:3e:63:2c:d0:af:96:
                    eb:53:96:7a:8e:f0:e2:7e:d3:3f:f1:25:11:19:a5:
                    ff:f8:7f:a7:1d:75:6e:84:8a:1c:51:f1:eb:70:d6:
                    b9:79:8e:aa:8c:9c:fc:b3:3f:13:73:30:55:52:a7:
                    db:f0:2c:89:51:37:52:98:5a:7d:cd:96:23:f5:83:
                    c6:69:95:29:9f:e3:2f:79:91:31:09:37:bd:7f:fd:
                    ef:12:cb:03:3d:65:ac:49:fe:bf:5a:15:81:19:d8:
                    58:95:27:e9:d1:85:e4:ca:47:31:64:47:75:c7:b9:
                    df:4a:73:79:ed:11:fa:79:3b:22:9a:e4:e1:e0:83:
                    f1:c8:f2:59:6b:61:f5:92:af:f3:1b:51:27:aa:9c:
                    ba:d0:95:75:76:f9:1d:91:1d:1c:6d:5f:53:b9:0d:
                    6e:f9:74:0e:41:3a:af:c9:c8:29:6c:d7:82:03:6a:
                    c5:6c:e7:c8:7f:c9:e2:4d:69:b7:73:0f:fc:d7:f9:
                    61:76:56:04:bb:0c:b1:11:3c:ff:bd:6b:fb:3a:16:
                    a7:9a:db:63:c7:89:88:fe:b1:99:21:0d:f3:0e:2f:
                    ee:39:a8:7a:95:08:a4:aa:51:31:fc:33:fb:82:c1:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:ED:5F:07:B6:12:46:3A:2E:3E:69:0B:25:87:79:F2:37:E6:65
            X509v3 Authority Key Identifier:
                keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:69:16:a8:b7:3d:fd:92:fe:56:f5:f1:d0:b4:95:62:dd:
         4b:f0:a4:b3:04:1d:4a:29:b8:09:cc:4b:ca:9f:94:c2:24:43:
         0a:ff:56:6b:72:1f:b2:20:dc:83:94:61:0e:06:47:5a:fe:ae:
         86:b5:fb:31:5c:8d:32:0c:14:cc:bf:e5:de:aa:82:95:a7:05:
         c4:ab:bd:32:a3:90:ab:a3:e9:6c:84:cb:71:c6:67:2a:bf:2a:
         69:64:fc:64:1e:ff:66:2e:e9:77:01:e0:33:23:fc:c8:1d:d3:
         ea:01:27:98:e0:49:58:13:fb:ef:78:69:fc:19:41:ce:e5:22:
         34:fa:da:a7:e3:74:7a:e5:19:d0:39:70:06:07:c0:52:4e:ab:
         4f:25:07:a9:be:fe:d8:83:64:ed:17:26:cb:a7:12:12:9f:83:
         84:4c:44:8a:1e:29:17:8f:11:54:79:6d:a5:91:ad:fb:d8:57:
         ad:0c:75:8b:4d:05:59:a3:d2:5c:83:e5:0a:c9:9e:bf:e2:e7:
         1a:dc:07:6c:37:e4:8e:95:08:b4:1a:1f:af:0b:f7:7e:6f:52:
         c1:fc:ba:a3:f5:47:77:15:9e:0a:89:77:1e:98:d0:25:b8:66:
         ba:7a:a7:a2:eb:a3:5a:0d:c6:53:05:85:b1:8c:47:e1:d2:88:
         bf:6d:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----