Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File:                     QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier:          vV5G1VIK0PPg3DYW8ODNB3HUqaHqsoc8bGqDXpzpFGM=
Subject key identifier:   B4:3D:44:84:26:32:5C:D7:B1:42:DD:EA:63:3A:8C:49:95:2A:2D:09
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer:       /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial:       019357650769AC908292DE583E75C28CFB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number:          0759
Signing time:             Sat 23 Nov 2024 05:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:58 +0000
Files and hashes:         1: B0FGg804ellbBK0luHmJHMcIeCM.roa (hash: RjQNBPXgb5cNzcikLy0Dd2pQhxT1Q4r6SjAoj2xFFcs=)
                          2: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: UWxSwxC6qeqmpBRRelRNOA2eV+9hpyhVXNGP/bFPY48=)
                          3: W3foxkznU27gdbAIvCDdksgRneI.roa (hash: 2K+K9Ux3ePc4XVJlTqVAmIKO3Z59ECndjujKuGnXxDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:07:69:ac:90:82:92:de:58:3e:75:c2:8c:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
        Validity
            Not Before: Nov 23 05:00:58 2024 GMT
            Not After : Nov 24 05:00:58 2024 GMT
        Subject: CN=b43d448426325cd7b142ddea633a8c49952a2d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:c8:82:c9:5f:39:2d:ed:d5:82:ac:8e:9b:
                    ae:12:f0:c6:f2:c0:08:ce:08:a2:4f:d8:c0:ab:6b:
                    c5:b5:66:86:64:64:ba:6a:9d:a2:2d:13:d7:fa:54:
                    3a:4b:e9:94:40:45:f4:69:b8:20:d0:8a:7e:17:2f:
                    f6:fb:53:b0:69:0b:b3:4b:85:c8:d0:11:70:83:14:
                    2e:e8:bb:25:64:0f:60:66:1c:b8:66:6e:1c:00:15:
                    d5:a3:8d:fb:79:7c:2c:4a:14:1c:46:0f:c6:9a:71:
                    da:31:fd:06:f8:93:36:9d:cf:78:6a:c4:d8:a2:a3:
                    99:8a:48:a3:82:c5:13:23:7c:83:5f:01:2a:c3:c5:
                    12:1f:64:34:c3:fb:ae:e0:41:f8:f9:f3:52:ae:80:
                    f1:c6:f6:85:d2:f7:47:6f:a0:07:94:37:26:8e:58:
                    f4:1c:4a:d1:98:68:6f:48:d7:21:68:cf:71:1e:8c:
                    00:ac:77:f6:19:c4:c3:a3:55:59:7e:8e:86:62:73:
                    3a:f9:ed:98:f6:bc:ad:6f:89:39:a9:22:3c:db:27:
                    3b:f1:d2:2e:96:19:52:3d:81:55:54:a7:49:0c:fc:
                    61:8e:4f:48:c6:15:55:50:96:83:e1:98:ad:a7:eb:
                    43:f4:b8:03:ff:15:fc:2f:57:d6:03:18:2b:00:4c:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:44:84:26:32:5C:D7:B1:42:DD:EA:63:3A:8C:49:95:2A:2D:09
            X509v3 Authority Key Identifier:
                keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:be:e9:38:1d:a5:76:85:51:4d:2b:86:fa:76:29:3d:7c:
         08:2e:a7:31:a8:ab:ea:ab:e3:2e:ab:24:c0:70:0d:65:08:21:
         f4:e1:52:03:2e:7b:c4:aa:9d:c6:d7:b9:a1:75:34:2f:a6:91:
         1d:7e:68:c6:c1:da:00:ed:9b:9b:9b:62:6d:3c:63:b3:cf:2f:
         04:ee:3b:99:1e:8a:f1:e5:7e:e8:08:67:3c:46:06:e6:b8:86:
         1f:ac:1f:8f:92:12:63:0a:6e:7c:03:e4:42:0c:f0:ba:11:4a:
         3b:a5:0f:7f:2c:59:10:12:ff:96:77:26:8e:80:f4:1f:46:87:
         c8:11:27:fe:b8:7f:09:2d:04:28:e3:2b:68:27:a6:c6:10:b0:
         16:36:be:93:36:e0:b2:02:56:4d:d4:20:c1:9c:83:2b:01:2e:
         2a:2e:cc:71:d9:0e:53:6e:80:96:ec:9f:20:24:9e:28:ff:3e:
         15:41:f1:b9:a0:9c:33:a9:47:c7:a5:e0:d7:d7:d1:7b:09:4f:
         2e:21:7b:ba:03:26:81:61:75:01:84:8a:a7:6d:8f:bf:22:9f:
         3b:ab:1d:1f:b6:c8:f2:53:0f:87:73:8e:5f:f4:b7:02:12:60:
         34:ec:e1:d5:76:d1:5d:5b:47:4e:f1:7e:3b:96:ef:83:0e:6d:
         b4:bf:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----