Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File:                     S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier:          EzKJe9WmVSKuhfm0JCkc26iaMmpwPGltaQzvWocTd0s=
Subject key identifier:   95:99:8B:3A:A4:24:68:14:09:9E:FF:F7:7F:13:9B:21:A4:00:52:9E
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer:       /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial:       019356F6BF9BE9A282D802A2F2BE68A08CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: Gl_vAnBQzpsQQ_z58IQem4sBvxY.roa (hash: lOitri7pAEGVH7ShfCFp4NwDW2W+GPMh6msAMdjaeNw=)
                          2: JYMdKgUhQ1Q_RPFQmVk_9JL_Yv4.roa (hash: aIi6e24geumqlz1s/FbMvB0jHKqx39n1sGIcZxYqDnU=)
                          3: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: NgFoe+n6FJWpNiFmOB0HwG19w72kQkLR5XYS+w+k5lo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:bf:9b:e9:a2:82:d8:02:a2:f2:be:68:a0:8c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=95998b3aa4246814099efff77f139b21a400529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7d:09:76:7f:20:15:a3:d9:2a:dd:22:a1:fc:
                    bb:b0:8d:54:1c:19:36:bf:e5:59:c9:65:5b:fb:ad:
                    cc:5b:06:a2:b8:ba:1c:84:71:89:07:d3:d4:69:59:
                    b7:9c:f9:c8:34:27:f3:30:52:1d:e8:b1:94:fa:6f:
                    40:84:fe:17:05:b6:0b:ef:52:ea:1f:db:d6:11:34:
                    80:31:3e:f0:35:e4:ae:a4:c4:68:c9:e6:38:cf:12:
                    aa:a1:6f:9e:bd:47:d8:a3:ef:f9:45:3a:5b:18:47:
                    81:91:0d:86:ff:96:bc:da:d1:39:37:79:0b:64:cd:
                    f6:bd:d7:c9:d4:e6:ff:63:b5:23:f4:97:10:8e:32:
                    d0:4f:ec:02:77:9e:2e:d3:03:9f:c4:72:3e:ea:7e:
                    95:4f:76:6a:86:eb:b9:62:7f:d1:84:c0:ce:50:95:
                    06:f1:11:34:42:90:01:12:7e:e9:df:41:35:fb:55:
                    af:4b:40:9b:2e:66:6a:f1:1b:df:26:4b:9f:b6:e2:
                    1c:57:08:b4:b9:61:82:57:6c:fa:f7:1b:44:29:7b:
                    61:c4:d9:3e:96:5a:21:cb:d3:ec:a1:1d:62:57:ee:
                    70:17:ad:09:d4:ac:fb:c4:bd:a5:19:8e:25:2f:dc:
                    5d:b5:a5:4f:84:04:b2:cd:64:51:62:d5:39:17:e5:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:8B:3A:A4:24:68:14:09:9E:FF:F7:7F:13:9B:21:A4:00:52:9E
            X509v3 Authority Key Identifier:
                keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:02:73:14:05:27:d9:3f:48:de:3f:c3:01:fc:2c:9d:00:
         57:f2:2e:28:ab:7b:bb:26:c7:c8:02:83:8f:8f:fc:dd:21:ec:
         8a:fd:ac:e5:56:61:e8:d9:03:99:71:66:1e:af:91:c9:e9:03:
         0f:50:16:c0:2d:17:df:74:be:a1:f3:57:3c:3b:41:8f:1d:23:
         d6:92:e9:36:6d:ff:fd:52:5a:ee:48:e3:39:43:5f:2a:4c:26:
         09:c9:af:c2:1b:a5:43:8a:d7:fd:d3:dc:62:79:d7:30:d6:4d:
         ef:be:3b:05:1b:3e:7e:6f:d0:64:0c:03:aa:df:7e:94:33:f0:
         04:eb:0b:48:24:17:2e:33:e4:17:db:8c:9e:12:e2:89:96:e9:
         43:77:3c:40:d4:55:2a:26:87:57:a5:1a:ad:2e:5f:a7:9c:d3:
         47:5a:43:0b:19:fe:c1:9d:31:53:e4:da:cd:dd:01:2b:db:21:
         f3:4a:55:8c:27:5f:6b:4f:b0:e0:5a:07:53:8b:88:76:66:ec:
         93:7c:c0:5c:06:85:73:bb:c0:ab:02:27:ed:98:bc:f6:3c:75:
         89:d1:66:78:c6:46:57:3b:2c:fd:d6:3f:31:e4:e9:ec:cb:27:
         e6:5b:01:3f:ac:1a:a2:1e:0b:37:96:fa:8d:24:5b:eb:81:bb:
         ec:be:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----