Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File:                     4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier:          ZnuQZEbOPC7T4vBSDR9dDGJPzmhcAFjkfLaQxr+6z7k=
Subject key identifier:   9F:AF:B5:DD:0C:2E:95:0F:A9:DF:DD:D4:31:86:70:6A:AC:27:29:CD
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer:       /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial:       01935199D663F10A35AAB3A482C3B1207E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number:          0F01
Signing time:             Fri 22 Nov 2024 02:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:56 +0000
Files and hashes:         1: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: pMOpkLd7VfJ0yD0XOXgUdTYblxh4vZQhhWN3jy5P6IM=)
                          2: KsHUVdcrXw3P3Aowo6Hdw1osmkw.roa (hash: pfYt0e/0zBD3vAjPhRuY9FyhzUllqIMIQXO1HSRYPqk=)
                          3: OPszLK1owzcxkE3E3TWCajGiX1w.roa (hash: JOB+klOEXIImnofjWcjWgi4QIF3fd+KeRdt4yYTU5sQ=)
                          4: tr0el6x80qTUSo2RaUODNlA3jTg.roa (hash: pKruG3ZJNxAo8hbtszU5NYCzTFdSaoce6f6E9yjTMJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:d6:63:f1:0a:35:aa:b3:a4:82:c3:b1:20:7e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
        Validity
            Not Before: Nov 22 02:00:56 2024 GMT
            Not After : Nov 23 02:00:56 2024 GMT
        Subject: CN=9fafb5dd0c2e950fa9dfddd43186706aac2729cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:78:25:33:74:58:0a:95:de:4a:5c:5b:4b:
                    c8:9a:93:ee:7c:bf:7c:71:37:ac:8d:e3:65:2f:4c:
                    2d:04:5f:98:9e:80:36:4b:12:9e:5f:3a:c7:ce:de:
                    24:7f:ac:70:54:7c:71:4b:b1:15:96:4b:56:81:79:
                    e0:15:ce:97:e3:c0:65:15:ea:9d:fd:dd:62:9b:91:
                    91:6c:c3:b2:1a:4f:9c:ed:5d:1c:92:dd:77:5e:e3:
                    73:d2:b4:47:ac:4d:3d:ae:15:57:bb:ed:8f:a2:2e:
                    e7:9f:6b:c4:cf:b8:36:f3:fc:8a:22:81:a9:b1:01:
                    c7:88:29:8a:94:a8:35:1f:d1:38:66:01:d5:fc:d1:
                    2d:9f:94:49:c4:71:de:82:0a:e5:b5:0c:ca:8f:90:
                    1b:3d:c6:a4:40:3a:51:e7:7c:c7:16:c2:23:7f:26:
                    04:ce:97:8f:41:12:8a:4d:de:f8:c6:2c:ef:d3:a4:
                    97:dd:49:b7:8a:25:36:86:03:50:7e:e1:0e:b9:8f:
                    d2:49:fa:fb:d2:47:5a:72:58:27:c8:c4:54:18:2f:
                    6d:68:6d:e6:1f:58:7c:21:b9:1a:27:cc:46:90:ec:
                    9f:11:74:b1:ca:90:a4:5d:2b:45:8e:c3:c7:2d:b6:
                    77:85:b4:79:9a:95:dc:fc:08:96:81:7e:81:53:5f:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:B5:DD:0C:2E:95:0F:A9:DF:DD:D4:31:86:70:6A:AC:27:29:CD
            X509v3 Authority Key Identifier:
                keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:04:48:68:b5:d3:37:a2:72:cd:98:b4:a0:15:40:16:77:a8:
         82:c4:8c:49:fa:1e:24:30:27:1d:0f:e2:34:23:a2:7c:2b:49:
         27:1c:70:97:a1:a5:54:72:58:80:ce:02:e3:78:49:90:7a:59:
         28:c2:45:41:88:d0:47:9e:59:a1:7b:47:19:49:c9:3a:5e:2f:
         8e:88:52:0f:be:42:76:0b:f3:5d:c9:75:5d:c8:bc:f9:72:cb:
         e7:f2:c7:bf:80:45:cf:75:7a:1a:7c:9a:4e:df:d0:e7:d1:08:
         72:7d:b7:9d:db:dc:68:1e:9d:c6:b7:19:6b:0b:2d:94:20:ce:
         4f:a0:cc:51:9c:3b:52:93:60:e9:1f:b8:7b:fb:28:32:78:3e:
         ff:80:6d:34:2c:0b:d7:31:8e:3f:15:ba:ac:af:5a:c7:62:8e:
         84:7d:23:15:cd:fe:fb:85:c5:fd:ba:d2:68:50:f8:27:66:15:
         01:e6:98:de:7f:c7:c6:57:3c:5f:ac:47:c0:da:e3:e7:8e:ce:
         38:94:96:48:0a:c1:9e:2e:08:d1:f3:86:66:2e:64:6e:fa:0c:
         4a:15:2a:2c:22:27:eb:f6:9a:c8:23:c3:48:7b:60:b2:dd:64:
         0b:32:7b:4c:17:f8:21:89:db:fa:1c:07:07:e6:4a:cb:7c:f5:
         9c:19:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----