Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File:                     3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier:          rC9EbK+e+Gh9ay9inJGfS5gcxCSsp4PXHtbFEsoH7F4=
Subject key identifier:   77:5E:E2:AD:18:80:02:35:36:13:01:67:4B:29:95:D4:23:06:CE:DD
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer:       /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial:       019352AD877036638EA55218A31A8705290B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number:          1193
Signing time:             Fri 22 Nov 2024 07:02:04 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:04 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:04 +0000
Files and hashes:         1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: cWmsKs/GizPUb2OZ3Ur7b+80DCyPzWI8bQ0lkjm2+uA=)
                          2: 6DUQ869KtkAddqX5BJXWzU-Oo10.roa (hash: WfIQW1ZM7y3p2JXQIQ//Q6GHkYgKlFlbBYjXoY3Ffm4=)
                          3: c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa (hash: UFY+22wwM/Wr2ITxyrvkg6+Zb/RvP21dZrRLOQn8U4c=)
                          4: tLU8YTa50BNFR815aO3wRQWQeOU.roa (hash: zKU8zGeZgDYdgb9bdeIWosjG2Cp7PA508CX52QOSIVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:87:70:36:63:8e:a5:52:18:a3:1a:87:05:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
        Validity
            Not Before: Nov 22 07:02:04 2024 GMT
            Not After : Nov 23 07:02:04 2024 GMT
        Subject: CN=775ee2ad18800235361301674b2995d42306cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:a1:2c:e6:f5:18:8e:70:de:64:52:aa:ac:
                    ae:7c:83:4a:c0:ad:10:f7:c8:c7:49:6d:91:f6:33:
                    b4:f8:7b:2d:67:bb:77:66:ee:a7:8e:03:ec:a7:ac:
                    5d:f1:fc:16:dc:91:92:15:b1:9a:4a:23:31:07:52:
                    74:76:79:ef:c0:60:35:7e:df:f4:16:3b:d4:ad:3c:
                    97:87:16:cf:82:e7:34:0a:38:e7:6d:a0:1b:91:2a:
                    68:cd:d6:15:ef:80:b0:0b:70:2a:86:be:1f:ab:ca:
                    88:19:68:82:63:2a:97:77:a2:4d:2d:d9:02:d8:39:
                    6a:0a:c3:29:46:49:d6:ca:69:90:01:80:61:84:57:
                    a1:a9:fb:ff:03:4b:87:75:44:10:2a:7b:4d:7e:7c:
                    c8:0f:d5:3f:80:a1:9f:bb:ba:08:20:63:67:11:df:
                    e7:e5:1c:9a:61:62:84:0f:d8:df:5c:33:92:92:59:
                    05:93:70:0c:c9:d8:31:5d:12:fe:3e:20:57:d8:a5:
                    ff:e0:c2:01:7e:31:da:46:25:25:39:21:f9:24:3c:
                    5c:d8:75:e4:b3:b5:80:8b:04:4a:2f:d3:da:ea:a3:
                    62:ae:fb:94:d4:de:ae:d7:0e:37:b2:bd:a9:1c:e5:
                    dc:19:01:89:56:ff:3b:95:dd:97:7e:62:d5:f9:fc:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5E:E2:AD:18:80:02:35:36:13:01:67:4B:29:95:D4:23:06:CE:DD
            X509v3 Authority Key Identifier:
                keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:4f:e6:d6:8e:4d:f8:43:9d:0e:b2:7c:57:aa:34:1f:03:
         d5:99:b2:6a:91:ef:c5:87:27:82:45:b3:54:0b:46:40:56:c9:
         2f:2f:d4:39:aa:9d:8b:11:5f:02:3d:10:dc:de:27:b1:d0:e1:
         70:16:7c:ec:84:db:e5:1d:42:ed:02:23:ab:07:7b:de:7c:71:
         ed:85:d9:5a:3d:3e:ff:fd:7a:a3:65:95:3e:c4:f8:b2:a3:c2:
         0f:ae:21:4f:d0:aa:45:f4:ba:eb:37:63:60:ab:a2:6e:18:11:
         9a:ab:cd:36:15:0c:23:2a:11:45:cf:67:d2:ba:7a:7b:b0:d7:
         34:73:d2:57:fc:77:70:c3:0e:83:48:21:b6:5a:20:2f:42:87:
         97:0f:ea:48:99:a8:a5:b6:7b:f6:0f:26:85:05:61:4d:c6:17:
         6d:69:b0:45:67:c3:6e:f8:f8:da:ed:42:cf:cc:f2:34:f8:fb:
         10:2f:e3:6a:35:2f:af:26:44:e2:4b:02:c8:70:92:61:50:9f:
         03:f7:09:ac:1c:cf:f4:d0:0e:bb:a1:d3:6d:f7:f5:a0:91:37:
         f1:2a:a4:f9:0f:24:4c:13:df:cd:75:0b:13:85:8e:f3:a9:f9:
         51:e8:0f:7b:3f:2f:1d:8d:2d:ff:ad:d7:ae:0a:34:64:f8:c6:
         46:24:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----