Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          lmFk8mmFIaqMWNKsi1mBvOD1F5oIv52BQAto7Oum5h8=
Subject key identifier:   02:11:3C:A1:15:43:2F:4B:6A:F5:BB:0D:E7:FA:8F:8B:CC:27:E4:E1
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       019358094B3C7028502A37C01617B4FB11EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0B0B
Signing time:             Sat 23 Nov 2024 08:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:24 +0000
Files and hashes:         1: 9bPGNtKShWxSVGxvvwEJV7GVBko.roa (hash: OdpA7SAjb8zio/08bXjleqQmiSBMbfXb8W6j4+tsGh0=)
                          2: AISIiFU7ojKk8ZnCm6J_NwGCG4o.roa (hash: aM0GTUOzYh+1nbNDr9TAQ5eubBPDeTCS1oiYwg5mxes=)
                          3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: 2jtkm2s7mn/7JGgzGfcsTa/oyNg3ZG58CYabfSHyXX8=)
                          4: qoqnzEgXNZEznyZMDTxHr0kovJ4.roa (hash: qQ/dWvYXKPbX7Nz1E4iHq6eo8QKMNbpPsLUPn3nEOHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:4b:3c:70:28:50:2a:37:c0:16:17:b4:fb:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Nov 23 08:00:24 2024 GMT
            Not After : Nov 24 08:00:24 2024 GMT
        Subject: CN=02113ca115432f4b6af5bb0de7fa8f8bcc27e4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:c5:0e:92:e1:9b:16:cc:d7:a9:5a:09:4c:
                    51:ce:24:96:e1:cd:66:02:5a:80:6e:05:dc:a5:27:
                    45:9f:3c:c2:b0:e5:49:a8:7c:e9:db:fa:21:c2:83:
                    c3:c5:dd:90:a1:93:89:db:17:cf:7e:5e:da:dd:6e:
                    b2:4a:a9:c7:fa:49:cc:b5:5c:49:5d:04:f7:e7:99:
                    93:1b:94:85:75:35:0e:db:6e:79:da:5a:1a:30:09:
                    d1:8a:4f:10:5a:76:7d:a0:d0:60:d0:96:e6:55:5c:
                    d4:24:d2:81:de:8d:9b:25:f6:03:55:dd:b3:29:bd:
                    f1:e7:1a:5b:9c:fd:2e:4e:9b:6d:aa:16:80:2b:22:
                    97:12:35:cd:76:94:e1:9a:b7:b3:17:7a:dd:53:45:
                    b5:34:65:1a:4f:33:b8:ef:1c:a1:20:71:28:c9:8d:
                    01:ec:d5:79:c4:dd:9f:67:d1:7a:0b:94:28:51:08:
                    1a:7f:d5:4b:a5:28:55:07:5d:02:4f:55:8a:cc:79:
                    15:13:3a:11:c9:74:4e:f5:c8:39:5c:c7:b6:d8:a5:
                    ad:a5:f5:4e:29:e6:8e:3a:b0:5c:44:c3:3e:59:2f:
                    93:9c:72:09:18:58:c8:9f:98:8a:d4:dc:1f:5e:1b:
                    06:91:ca:83:f6:9b:2c:60:97:c7:1b:37:df:52:25:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:3C:A1:15:43:2F:4B:6A:F5:BB:0D:E7:FA:8F:8B:CC:27:E4:E1
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:81:fc:d8:67:57:3e:3b:72:8c:a0:ce:34:1b:04:76:dd:f9:
         37:42:11:3f:fc:f2:d6:9d:a7:b5:f4:d2:a0:ec:9f:b7:35:e6:
         f3:d7:d3:da:5b:59:4a:72:ce:ad:0b:d2:29:66:a5:b5:96:e1:
         a7:12:ac:28:a9:65:58:56:c5:8b:0c:cb:bf:28:1f:c9:5b:56:
         b2:69:73:85:90:04:e8:e9:07:40:86:1a:56:d6:d7:3e:25:96:
         53:9d:75:e7:24:3b:cd:62:a0:e5:0f:5d:6d:1c:05:25:e4:b3:
         05:5e:e3:ac:73:94:50:2a:d3:89:09:86:48:2c:1d:1e:64:61:
         76:04:b5:69:14:66:fb:17:7d:dc:fc:9f:8f:f2:4a:23:0c:e0:
         8a:0d:f9:fd:12:6d:0b:80:6f:d5:97:9c:ac:a4:00:54:0a:2e:
         55:b7:04:43:84:9b:34:85:b6:d0:5c:82:5d:54:b8:c9:05:75:
         0f:09:13:56:ef:9b:59:9f:c5:e4:79:02:6d:5d:8d:2e:a1:c0:
         82:9c:e3:b1:0d:e0:62:fb:64:aa:a4:de:ca:f2:c9:88:11:84:
         b9:62:2c:e8:4a:83:4e:21:3c:91:94:d0:5c:04:3f:36:f3:7a:
         4c:34:be:cc:78:5b:24:89:aa:aa:5a:77:7d:a2:2a:34:4f:ec:
         da:89:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----