Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          pYUtsXs7PQOWg1jNySNJZBU5IxgWN0nL8ffdOz43cjU=
Subject key identifier:   C7:C1:D0:FD:3B:9B:80:8B:CB:58:24:70:BA:75:4A:B3:92:9C:6A:92
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       01936067B040757D4846BF86DBF7C88A67E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          03E7
Signing time:             Sun 24 Nov 2024 23:00:28 +0000
Manifest this update:     Sun 24 Nov 2024 23:00:28 +0000
Manifest next update:     Mon 25 Nov 2024 23:00:28 +0000
Files and hashes:         1: S4gtWYTYDEjS39eHVUxbFmHGZV4.roa (hash: zKLPTHhzh4CAXPLKwlgSG4GwY02X+J75JpY4N3k3zgw=)
                          2: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 0YN0lcN9a4v05ebVHQEkuzGXO9ewxbK8nNzGMiBLqRE=)
                          3: wEztfgDsD3VgXR_6I7E9tHgko-0.roa (hash: csoAzGEEjkxJQ7QLqTKr0Z1Z0z14AnLYZP4PrJptqYE=)
                          4: yil-i8cAnOl5qnTClU7qPnqdIuU.roa (hash: EymTDlfA1ToaMHTTSx0gGlKgcMeq9SrJOmk8zxrHtBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:67:b0:40:75:7d:48:46:bf:86:db:f7:c8:8a:67:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: Nov 24 23:00:28 2024 GMT
            Not After : Nov 25 23:00:28 2024 GMT
        Subject: CN=c7c1d0fd3b9b808bcb582470ba754ab3929c6a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:e6:da:d9:88:ee:52:2d:3e:f0:2e:bc:92:
                    97:14:74:67:27:73:ce:2a:86:22:cb:69:96:e9:c0:
                    92:3d:c5:de:63:84:48:ad:4e:49:29:79:9f:36:10:
                    e7:06:fb:fa:77:a9:71:52:5d:ed:88:84:bb:38:bd:
                    78:0e:9d:b6:36:c3:6e:c0:09:fe:e6:a2:2c:07:ea:
                    f4:fc:62:c6:92:eb:9b:ac:b1:07:8b:0d:9f:28:43:
                    d2:ac:1f:da:d9:c0:b0:1d:2e:9a:7c:50:ad:cb:6e:
                    e0:64:9c:09:db:da:b9:6c:9e:f7:fe:8c:49:a4:b7:
                    ee:e1:a6:00:4b:3f:4a:4f:42:20:93:ff:13:6b:24:
                    23:d7:e5:99:23:c2:fa:dd:67:1e:49:29:c4:07:07:
                    ff:78:a5:f4:a2:38:4a:48:12:da:50:5d:27:19:7c:
                    e3:c0:47:ea:61:5f:6d:20:87:ce:46:41:db:c7:f1:
                    21:07:d6:33:77:9a:2b:2e:a7:a7:94:f2:aa:bd:d8:
                    8e:3d:b4:11:cc:50:8e:b4:d3:49:b6:71:dc:bc:fb:
                    fc:21:3d:d7:8f:1e:09:59:f1:da:41:81:cf:8d:63:
                    85:ad:cf:84:0c:ec:66:94:e4:01:f3:39:4f:76:bd:
                    2e:80:71:ac:6d:14:8c:e3:67:b7:bf:15:7d:5b:59:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C1:D0:FD:3B:9B:80:8B:CB:58:24:70:BA:75:4A:B3:92:9C:6A:92
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:62:77:2e:5f:28:d8:e0:77:8b:77:14:24:c6:fa:48:1d:
         22:8d:6f:64:10:d6:4a:78:76:75:fe:81:09:fb:8c:2a:fb:d1:
         08:d1:05:44:41:26:b8:05:7b:13:4d:bd:e2:af:ab:ed:a1:b5:
         a0:37:69:0f:e5:15:a7:82:b9:aa:0c:b6:5d:6c:50:09:6b:30:
         5e:2c:70:78:48:80:ec:1f:f1:83:be:2a:6f:7b:70:e7:64:51:
         1c:88:75:63:66:3a:5c:d9:e3:41:14:97:ec:cd:f9:0f:d1:0a:
         5f:58:8d:dc:68:8e:d5:9f:63:bb:8d:a8:03:c6:61:32:dd:c0:
         a5:61:ad:d3:cb:95:89:11:b8:9e:89:c1:72:d8:42:08:0e:cf:
         f9:7f:90:24:5e:6c:e9:ae:24:fc:32:3a:54:23:b1:93:16:f4:
         82:f7:b5:c4:a7:a4:5f:87:06:50:6e:53:ae:2f:02:86:1c:d8:
         7c:83:81:11:24:59:5f:6b:fd:e3:3d:07:20:9e:44:a4:c8:e4:
         64:3b:83:0a:f1:b9:02:3b:3e:b6:02:1e:c4:2e:63:8d:b3:5d:
         12:67:f1:22:6e:c8:d2:91:df:1c:f7:f8:c0:ff:9f:da:71:34:
         a1:94:28:d1:9e:29:4a:0e:db:03:cb:00:19:41:8f:53:18:d5:
         d2:a3:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----