Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File:                     yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier:          AhWJQvLOl0JJQeeOvlV15DnyVhJsxXrZdFngecYjK1k=
Subject key identifier:   7F:A3:3E:7E:A7:FE:20:A1:BD:A3:77:97:DC:FF:7E:4F:66:64:CF:43
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer:       /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial:       0193670ECBEBF1BC55E44CECD022B7CE539D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 06:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:43 +0000
Files and hashes:         1: YzQdD1wQIzgXZjJ4bpH8K1_DI1k.roa (hash: 02LhwizqZZvdU1MCUNrBSxrLGToTKeod4+C85tEONZA=)
                          2: gzBj3P1VHg1kOoGcZBLN8M_0Wfw.roa (hash: LVK5DWVA5LlG7SLRJnFlOIF14bhkp/2jLil7dO3I+rA=)
                          3: wsTaCl5MOS-ELVWn3tri-sQxQRI.roa (hash: lc57uAOf9ulwtnh6DzEVlLKEJZ+LUkAI+mcwnph6ILA=)
                          4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: gMNHYhcmNhGbhMY0t9bdMFfrCt+6KunIvClNI5pPKts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:cb:eb:f1:bc:55:e4:4c:ec:d0:22:b7:ce:53:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
        Validity
            Not Before: Nov 26 06:00:43 2024 GMT
            Not After : Nov 27 06:00:43 2024 GMT
        Subject: CN=7fa33e7ea7fe20a1bda37797dcff7e4f6664cf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:d6:1c:b0:3f:31:83:f7:f0:66:f2:2b:d1:
                    e6:59:a0:7d:8b:f7:10:b0:4f:43:ba:89:eb:a7:3d:
                    52:af:46:aa:1e:cc:55:7c:69:d3:ea:8f:b0:c6:1b:
                    ab:71:78:ae:4d:36:ac:ee:0f:d8:e1:70:88:5c:96:
                    b7:f6:2d:cf:9e:e8:80:2b:e5:c3:b1:05:41:f0:9c:
                    60:fa:6b:92:fa:31:ac:ea:dc:04:38:db:ae:ce:83:
                    78:e1:30:57:3f:71:0a:d4:c1:55:e0:cc:bd:f2:ab:
                    43:27:6c:6a:a1:21:61:20:1a:94:4f:6c:18:4f:99:
                    e0:38:b3:8f:17:45:0a:df:95:6e:fa:bc:33:01:ea:
                    90:87:77:14:f6:90:70:64:6b:84:a1:d9:b6:0b:7b:
                    53:13:a0:a6:3f:fa:b2:dc:d3:30:ad:6e:47:3c:bd:
                    92:f6:22:31:92:a5:c1:3b:b6:49:09:26:b9:dc:84:
                    59:e6:21:c7:6f:39:7d:01:98:97:5a:9e:d2:a1:c7:
                    ba:0e:97:ff:2b:7a:95:5f:fc:5a:38:b2:61:95:92:
                    47:1e:45:19:3a:8f:bb:7d:84:fe:ae:cb:85:9f:07:
                    69:a1:07:8a:76:b4:72:b1:aa:2a:88:7a:98:ac:c9:
                    79:7a:5d:09:ac:31:aa:34:3d:76:2a:08:36:95:8a:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:3E:7E:A7:FE:20:A1:BD:A3:77:97:DC:FF:7E:4F:66:64:CF:43
            X509v3 Authority Key Identifier:
                keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:63:b1:4e:67:ef:c1:7e:6d:3b:63:87:58:55:5f:e1:fe:
         7d:81:44:8e:52:0f:dd:6d:4f:38:3d:fe:2c:f4:8a:48:a0:23:
         77:b4:a4:f7:84:55:6a:0c:2c:e1:ef:f6:ac:06:a8:9b:1b:98:
         b9:23:a2:40:45:86:15:1c:cf:65:72:f8:11:70:f9:25:de:64:
         bf:e7:49:b0:28:da:b0:c0:bb:3e:ec:bc:17:c3:52:02:0a:c9:
         d5:25:5c:4d:e7:79:8d:62:99:a0:0f:13:21:e0:98:e6:4a:5c:
         f0:28:12:08:84:64:6f:ae:b3:31:d5:1b:e0:c6:07:20:c1:b7:
         83:7e:13:d0:65:d4:53:33:36:91:02:1c:49:36:2c:67:90:d5:
         c0:c5:27:0e:8b:1d:89:92:df:b0:e1:31:83:e6:86:4f:38:97:
         87:34:c1:75:f1:7b:92:2f:bc:0b:e9:d5:42:40:4a:04:a7:74:
         20:22:d1:cd:62:8e:00:97:10:cf:b6:ec:fd:9e:d8:cb:96:14:
         4e:e2:f9:7c:b4:95:94:50:09:73:3e:a2:d3:c5:fe:83:df:71:
         86:bb:66:13:2a:c0:2f:51:3b:b5:e6:12:79:b9:bf:d1:57:b5:
         f7:98:41:19:f0:6f:9a:6c:b3:98:19:8e:f2:42:ea:ef:32:87:
         f2:b6:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----