Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File:                     ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier:          oFXHdcnjmZyv0arQpu0bAyhFDhkX7630UkdJNZNhBOE=
Subject key identifier:   8D:59:BD:D9:5D:18:77:93:60:12:D1:3A:0B:B4:8D:9E:22:15:69:EB
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer:       /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial:       019354D132BF46896597AC0F466AD50F542D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number:          014B
Signing time:             Fri 22 Nov 2024 17:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:16 +0000
Files and hashes:         1: Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa (hash: aV9ijG5xbK2AlYOJNT1d1Ex2iHxCo5sGJvE+INOlCs8=)
                          2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: o1Gz1qpYFvIFferCMwwnklFyzz2zqWSel2QlvHEnyl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:32:bf:46:89:65:97:ac:0f:46:6a:d5:0f:54:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
        Validity
            Not Before: Nov 22 17:00:16 2024 GMT
            Not After : Nov 23 17:00:16 2024 GMT
        Subject: CN=8d59bdd95d1877936012d13a0bb48d9e221569eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:26:1f:93:b3:3e:52:24:7c:d9:cd:f7:e8:
                    86:7d:88:2f:6d:4d:2d:b3:50:f7:5c:4a:a2:ad:1f:
                    67:55:60:72:a4:63:b2:93:7b:28:ab:58:b1:53:02:
                    5f:bd:0d:f6:9b:a4:a3:d5:3f:5d:db:7f:36:34:2e:
                    36:a8:83:15:c7:aa:88:22:a4:0f:25:05:bb:02:55:
                    08:43:2d:bf:e9:84:ec:ef:b6:8f:2b:03:b2:a1:fa:
                    3a:ef:9e:11:32:98:eb:0a:29:c0:9e:e0:99:90:6a:
                    e8:c5:7f:9a:af:3e:8b:a4:30:89:2f:d9:c8:cc:69:
                    f5:45:2b:2a:f3:94:6e:e9:a3:93:d0:9c:c2:71:2b:
                    8e:dc:85:f2:b0:01:06:e4:cf:88:99:87:b4:af:bc:
                    b5:0b:dd:88:a5:a9:db:1f:5b:8c:a7:89:46:91:f3:
                    e4:d7:2b:e4:29:b3:5c:5b:cd:fe:c4:8a:6f:f2:45:
                    08:ed:8b:99:55:df:4f:d7:5a:6c:48:c9:69:63:53:
                    29:85:6e:c5:21:9e:d0:60:87:dd:a7:3d:2c:93:c3:
                    6b:35:1b:61:8f:6a:12:e5:f8:dc:29:a7:04:0d:b7:
                    53:e9:73:90:77:2c:41:41:2a:84:ef:21:c8:bc:a8:
                    a1:09:11:ec:8c:1a:34:97:70:a3:b9:49:0e:2d:40:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:BD:D9:5D:18:77:93:60:12:D1:3A:0B:B4:8D:9E:22:15:69:EB
            X509v3 Authority Key Identifier:
                keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:15:11:10:8a:fd:51:7e:4b:b8:62:9f:ea:14:0e:50:fa:
         89:a5:87:d4:24:b0:3a:2a:9b:17:e9:24:36:10:f5:3e:e5:5b:
         42:c3:64:87:4c:c6:12:9e:90:e4:c5:28:0d:97:9e:1d:0e:54:
         0e:73:9b:8f:8a:d4:39:29:e2:ca:51:d5:55:a6:1d:d6:bd:55:
         3c:98:99:33:c1:e5:26:b6:91:54:25:d7:15:ae:c1:0b:92:fc:
         f3:d0:85:4e:23:de:7a:ea:69:3f:98:88:63:ce:48:d1:36:d0:
         44:52:8a:76:89:55:b9:7a:c2:ef:d7:64:72:7f:76:77:f2:86:
         e7:07:cf:83:fb:2e:93:2d:54:d7:9f:91:d0:e0:f7:98:71:68:
         b8:7d:7b:ad:52:50:39:7e:c6:4d:cd:43:e9:54:8e:6c:e4:ac:
         78:9e:5f:39:bc:24:39:21:0c:15:4a:e0:20:cd:ea:39:20:db:
         cc:22:de:9e:2e:90:c7:2f:34:2b:ea:29:40:9d:7b:58:e1:e5:
         ff:56:9c:1a:26:b6:f1:b4:fc:96:7e:29:6b:82:33:31:96:57:
         6c:05:40:46:09:3e:d8:4d:16:2c:c1:b9:55:33:12:5c:44:bd:
         32:1f:02:59:a1:13:ec:d7:5d:39:85:bb:c4:72:2d:16:81:30:
         12:11:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----