Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File:                     qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier:          F6bm7Barp9bEWYxy+ZEforRlAv3c/dAyd/w++3kM0QQ=
Subject key identifier:   DA:8A:31:E3:2B:A2:56:A9:85:60:01:D8:EA:E5:D4:79:54:AE:49:96
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer:       /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial:       019233923BB4B2BFE23102E6E95515DCC0D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number:          12B2
Signing time:             Fri 27 Sep 2024 13:01:14 +0000
Manifest this update:     Fri 27 Sep 2024 13:01:14 +0000
Manifest next update:     Sat 28 Sep 2024 13:01:14 +0000
Files and hashes:         1: 9PecE79656DPdYv9GoodkguUtlU.roa (hash: QC1TMFstkTeMzI1vSYpIbBijOPmVw71G3lj4/BSQc60=)
                          2: hhPgXvUcRmC2TUO_q-TKXjYPTkU.roa (hash: B1vJ9YpVhqlbehY9Pjx88rXjq4zvkC3AQA3CRXGOEBs=)
                          3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: x1L4K28gnrnTdpAZcOOUOTMevfw2Jf4CUxfiEGwz9bA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:92:3b:b4:b2:bf:e2:31:02:e6:e9:55:15:dc:c0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
        Validity
            Not Before: Sep 27 13:01:14 2024 GMT
            Not After : Sep 28 13:01:14 2024 GMT
        Subject: CN=da8a31e32ba256a9856001d8eae5d47954ae4996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e5:5e:27:4f:fd:29:66:dd:07:8b:65:a8:28:
                    a5:39:73:b4:4b:30:86:60:58:70:fa:c6:6b:f5:78:
                    75:c7:72:c7:aa:70:90:c2:02:da:59:d2:d0:1f:79:
                    ec:40:5f:f0:3a:b5:9a:7d:d9:8a:16:55:35:2c:1f:
                    e8:28:5c:30:c3:f8:a8:7e:e7:ba:fd:fd:d4:2c:b7:
                    c6:a7:15:fd:3b:57:fe:e1:b1:18:2b:db:a2:f9:ec:
                    ac:b8:3f:93:ed:fc:29:4d:c5:1f:30:67:32:08:6d:
                    6c:c6:2c:cc:8a:89:03:f9:0f:34:72:73:60:58:7d:
                    2f:2b:83:d4:a5:1b:92:08:29:ca:ea:15:72:cb:94:
                    fc:00:6b:58:ca:fc:84:88:3e:60:9f:6f:11:d9:ae:
                    e8:f1:46:51:21:3f:ab:37:7e:03:f6:a0:b3:ea:5a:
                    78:04:97:a9:d9:76:a1:61:7d:23:52:05:dd:cd:2f:
                    3e:b5:82:0f:3b:54:fc:d0:64:d6:7a:06:da:5f:73:
                    44:50:2c:9d:64:3f:da:97:4e:ea:46:5d:1b:94:c6:
                    74:40:6f:b5:36:44:8a:f3:44:67:42:3b:ea:3c:67:
                    1d:c4:bd:2b:bd:b2:e0:d0:cc:65:75:c9:65:09:21:
                    dc:2c:24:60:03:de:e3:d4:55:2f:1f:fc:31:4f:b4:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8A:31:E3:2B:A2:56:A9:85:60:01:D8:EA:E5:D4:79:54:AE:49:96
            X509v3 Authority Key Identifier:
                keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:94:e3:bf:87:0a:9c:7c:f6:06:83:0e:43:5b:16:4e:d6:
         fe:a6:ed:55:48:41:0c:7e:b5:fe:b4:2c:10:dc:1f:57:f5:ba:
         fc:23:17:fb:dd:b8:ae:57:95:90:eb:be:0c:83:aa:fe:1d:7d:
         99:9f:9a:98:ef:4d:9f:99:36:61:74:4b:58:cd:99:5c:3e:64:
         b7:aa:33:94:c6:7e:ea:b0:5c:4d:df:8e:e4:fb:36:84:8f:6f:
         d8:23:8a:eb:2a:51:1d:f8:63:e1:1c:1c:6e:ae:67:9b:bf:6a:
         c8:04:70:29:eb:18:d7:3d:3c:75:3f:62:c6:82:fb:1a:5f:64:
         fe:d0:c0:f3:13:c3:0b:d9:52:f3:a6:d8:ed:f1:21:3a:cf:c9:
         e5:2f:2b:8a:45:67:ee:20:c7:dd:e6:7a:a9:2f:13:60:b3:b5:
         3f:59:41:2d:4f:4d:17:7a:cc:09:12:2d:a3:08:a9:52:e4:b6:
         f7:43:e6:4a:9b:de:01:a3:56:89:19:0b:88:64:b9:d6:52:94:
         e4:f3:12:f8:42:d9:5b:c7:61:ee:1b:fb:9d:60:9a:d5:cd:70:
         c0:6b:3c:3c:ca:66:4e:79:0f:35:55:4a:bc:8c:15:b2:a0:31:
         e6:4a:4f:8c:8f:05:74:62:42:2c:90:1d:73:64:66:43:48:95:
         b0:51:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----