Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          GTimb6Eg+IsEe2BSqtsHdZKvKmXD0dDA1W6MVGxVhoM=
Subject key identifier:   9B:28:63:90:65:A2:9D:EA:16:83:98:E1:F5:CD:3C:BC:D9:89:23:B1
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       019359C0BCA6469E8098698E6BB36ED8B468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          04E2
Signing time:             Sat 23 Nov 2024 16:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:23 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: ChQMz3e0j96a9epSkVDML3iJBD3OnSkQv/mJcomJr70=)
                          2: Ofv25ztr1wpVbud404AipzYBaSE.roa (hash: VUlB8+HA4yS9CCgxwvxydJviyR3aHd8OaRLV+CIlwKE=)
                          3: e6_qcKx9AuYIGSumMHiTqfcazGY.roa (hash: CeOZOUH9hkSdTEb2HMF5SZctDqqu/8djDlHM4RBzQlc=)
                          4: thyHkU3tMD6U1Zzf4WIVttMpRsI.roa (hash: VnzmMLVuEegUFC1m7sthGVTdBM4NIl+xdYrFMuS7Wpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:bc:a6:46:9e:80:98:69:8e:6b:b3:6e:d8:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Nov 23 16:00:23 2024 GMT
            Not After : Nov 24 16:00:23 2024 GMT
        Subject: CN=9b28639065a29dea168398e1f5cd3cbcd98923b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:e0:b1:40:b5:b4:38:24:1f:5f:59:be:08:
                    99:33:4e:32:56:1b:c5:8e:ab:44:c7:3b:65:86:dc:
                    ae:dd:96:a2:24:d2:26:9c:57:d6:83:79:c5:cb:37:
                    71:21:bb:5a:95:03:d5:2d:9b:21:2e:4d:0a:bc:79:
                    3f:51:69:60:4b:39:fc:b8:d9:5e:ff:b1:76:a6:e6:
                    bc:4a:ff:bd:66:e5:fb:bf:c9:ef:82:1a:1b:a2:ae:
                    53:b5:bf:c7:cf:78:23:ea:38:8e:31:23:1c:57:dd:
                    76:81:08:77:f3:80:87:6a:18:68:70:c4:4a:75:f0:
                    17:1f:1c:db:93:b7:a6:a2:4b:f8:a2:a3:11:18:59:
                    46:32:3f:e9:85:11:d1:97:0d:a3:ad:6d:ff:a5:2c:
                    c4:28:32:20:bd:05:61:03:6e:64:7c:80:80:b9:c6:
                    d8:73:6c:5c:3c:4a:8e:a2:3a:bc:44:49:3c:62:f8:
                    7c:ce:66:c4:a8:80:1e:dc:73:63:9b:51:18:b4:c3:
                    1a:0b:31:f7:65:02:92:dc:0d:48:6e:b1:be:99:72:
                    d3:78:a9:7a:a9:62:83:09:67:5f:98:9e:63:cb:a3:
                    81:3e:9e:25:66:c2:67:0e:0f:a4:32:50:f2:cf:5d:
                    8a:c7:27:ad:a3:8a:dc:82:43:51:82:5e:7a:29:26:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:28:63:90:65:A2:9D:EA:16:83:98:E1:F5:CD:3C:BC:D9:89:23:B1
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:40:1b:3e:11:5a:fb:bf:a8:f5:b9:85:8a:c2:6b:4b:1a:
         b3:94:89:a7:6e:82:29:51:eb:e9:a1:2c:f5:00:e0:07:8e:0b:
         48:c1:5e:43:4f:0d:7b:72:39:e1:ee:61:d3:03:63:bf:86:8f:
         b8:d8:f3:58:16:6b:24:c0:bd:40:11:af:ce:31:01:43:96:a6:
         c9:a0:40:1b:d6:70:b3:8f:cd:b5:a7:6a:f3:d1:05:e8:45:7a:
         e7:07:5c:d1:92:93:25:e8:21:f5:28:7e:91:a9:23:76:6e:7c:
         6c:76:4d:5a:d0:4e:16:37:b2:c6:30:7b:ec:e9:e9:be:63:48:
         e9:59:04:37:4f:ca:d1:df:cb:9c:1a:92:31:b1:7f:32:61:98:
         3f:90:a5:cf:12:91:80:31:96:ad:79:eb:ed:cb:0b:97:6f:92:
         39:da:33:b7:9d:e1:c1:52:1f:dc:00:82:bf:0c:f4:cc:a8:d9:
         16:f7:1c:f7:2e:e4:e8:4a:00:23:fe:e2:cb:14:5a:bd:02:82:
         19:55:5e:48:e4:3e:90:9d:41:07:1b:50:2d:28:0b:13:83:eb:
         02:6b:8a:06:bd:f7:3f:13:e3:af:73:19:ae:30:88:cd:8d:b2:
         eb:72:eb:79:6b:f2:1e:0b:53:d6:78:e6:50:22:c4:18:59:33:
         19:ee:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----