Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          MjvZ18TlDFSlSfXjTDB1j8kkefbZkIB4k7/DGC4fqFw=
Subject key identifier:   74:A2:9F:18:7B:84:22:E3:E5:F5:1C:15:A0:61:E1:38:F7:37:0A:3B
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       01936B2299AAB73F5CFF52967C1A94F2210B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          138A
Signing time:             Wed 27 Nov 2024 01:00:49 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:49 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:49 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: jnQ9e8G+GlTeJbjI7RMoc0kMbBylal+4CxzsTxDxy4M=)
                          2: ZZyXIBIZGuwnYQZXdTQa56lga_0.roa (hash: tnnKUFdSdCe4mgWINoPGC2C7VMnBAatMxCqZQGJ/vks=)
                          3: jNvXIKGEY9DMzzkl_0pImED3CNs.roa (hash: ja1Gb1SU//1Xngs4cExQjqLfANOebN8GXSE50r/SbVg=)
                          4: q20-XppE8gKMi3G3rrmKJXmPZko.roa (hash: cX20xQeWh02s1kLH2zi1tPwgy6qCsrFIlDPSjHYKZ14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:99:aa:b7:3f:5c:ff:52:96:7c:1a:94:f2:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Nov 27 01:00:49 2024 GMT
            Not After : Nov 28 01:00:49 2024 GMT
        Subject: CN=74a29f187b8422e3e5f51c15a061e138f7370a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:57:da:06:71:7a:ba:f0:fc:da:f1:f4:b9:
                    ad:b5:41:51:e0:9b:97:f0:69:0b:bb:93:89:b3:0e:
                    60:9f:5c:3f:9b:2f:bb:85:b5:8d:30:38:28:fe:cc:
                    a1:9f:04:19:94:e6:da:f0:e7:2b:f7:5b:84:79:c7:
                    ab:eb:04:0e:74:40:8d:ff:60:9d:73:d4:33:10:09:
                    66:9e:db:1a:37:86:ee:e5:01:db:e2:04:80:74:53:
                    a0:65:cc:6a:fe:b2:1d:92:65:04:33:92:60:5d:f1:
                    6a:01:ce:6e:59:48:fb:42:13:35:7d:50:89:68:fe:
                    dc:63:c6:30:5b:2c:ec:bb:a7:48:45:db:ed:3a:ca:
                    11:70:b1:bb:c4:13:22:c4:40:da:ae:77:bc:f6:6e:
                    d6:f6:19:95:52:97:6f:56:da:c7:1c:4c:7d:e3:1d:
                    8d:2b:f1:f8:74:56:f1:bd:16:ba:b8:1f:1c:1f:6e:
                    18:1a:17:51:d4:2e:ad:2a:39:6d:d3:76:15:08:a9:
                    96:62:15:73:bb:62:44:53:61:73:25:67:a7:6b:74:
                    90:fd:59:b4:4a:84:a1:e7:f5:d7:ff:25:4c:25:16:
                    48:77:17:c0:b6:f7:19:cc:bb:a8:7e:79:f9:ca:e3:
                    ba:d4:5e:ce:a9:56:02:26:2e:0d:d0:ee:7e:fc:08:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A2:9F:18:7B:84:22:E3:E5:F5:1C:15:A0:61:E1:38:F7:37:0A:3B
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:ac:22:d3:72:97:3d:40:36:9d:c7:a4:d6:3e:c8:d7:2c:
         a7:16:ba:2a:52:d5:e9:b1:25:98:9b:5e:cf:20:af:ad:b2:b3:
         ae:92:a2:f9:4b:70:45:e3:82:c1:de:43:c5:44:40:54:2d:c1:
         3d:3c:35:4c:f5:c2:8c:a2:4e:38:9a:d6:c9:ca:41:a7:62:2e:
         c2:e8:7a:20:ca:36:37:0f:9d:a1:f7:44:97:f6:57:8f:ec:96:
         8e:bd:00:6e:22:2e:05:82:c9:0b:54:f9:e4:aa:9e:3f:e2:8a:
         3f:5d:33:5c:5d:10:e7:ad:c8:2d:a9:12:3c:ae:aa:fb:89:0c:
         a7:99:21:07:aa:77:81:c8:c6:db:67:5c:11:14:e1:df:fe:80:
         cc:9c:de:a4:84:35:a1:3c:54:01:1b:c4:e0:41:e6:3d:2d:79:
         58:a9:8a:c6:2a:d7:7c:f5:f4:52:17:4b:22:ae:93:9c:4e:c5:
         c3:0a:3d:df:d6:d4:d0:3d:71:f1:89:d5:a6:0f:1d:88:81:ce:
         16:5d:71:80:4f:37:51:30:36:b9:f4:50:85:d9:1d:3d:2f:c4:
         25:23:79:a1:bd:f1:f3:4f:7a:63:8c:83:7c:22:b7:bb:9c:9e:
         3f:10:d8:4e:ae:4c:36:5f:0b:dc:d1:c5:62:5a:c5:84:ce:4e:
         8f:86:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----