Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File:                     4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier:          2NBlpQYckOzxbgY1UkCPDETxsjdwjeAn01sn2wdZ4kg=
Subject key identifier:   A5:37:7B:FD:D3:33:37:E2:DB:5A:43:7E:DD:85:D3:34:82:A0:FA:DB
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer:       /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial:       0193568A0C198CEA6D8283E3E6061A055235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:47 +0000
Files and hashes:         1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: atu/ifu89yquWPG3MVEN7hZwEmVjnEyub/Stj6kowOM=)
                          2: PNiOY7Qp0D0BODj_4Ud6fGkjS3E.roa (hash: va14OnvbcrmHupiR5eyEy9Ag2iqM9JW6/Qgy1SmaNrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0c:19:8c:ea:6d:82:83:e3:e6:06:1a:05:52:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
        Validity
            Not Before: Nov 23 01:01:47 2024 GMT
            Not After : Nov 24 01:01:47 2024 GMT
        Subject: CN=a5377bfdd33337e2db5a437edd85d33482a0fadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:f5:f2:ca:b4:8a:3e:ec:e4:6d:f2:0c:15:
                    fb:ba:f2:44:bf:62:80:23:35:06:20:d2:2e:94:82:
                    b2:1f:16:54:11:01:dd:ea:49:ba:b1:1f:52:50:c3:
                    18:74:f9:4e:13:b0:bd:04:af:27:49:46:72:98:5d:
                    ee:9e:8e:37:54:d5:0a:0c:7f:4a:91:1a:d3:ed:8c:
                    73:f3:65:32:b1:26:46:0f:5b:f1:43:b8:99:1f:6d:
                    42:f9:53:ab:7e:51:51:42:ec:91:36:53:b9:ee:8d:
                    4c:da:81:e9:cd:f5:c5:c4:3b:56:20:dd:8b:53:81:
                    11:cc:80:a3:ce:ce:4b:a6:a1:20:f4:4f:72:08:bc:
                    b5:61:33:4e:a8:06:ff:d8:00:3f:86:6f:e2:99:27:
                    1d:94:9a:ae:69:c6:87:95:e0:2a:33:aa:30:2f:21:
                    bc:ee:ad:2d:1d:ba:2b:ed:c9:c6:84:0d:b7:fc:53:
                    9f:21:f7:0e:c7:b2:cc:97:6b:bb:51:57:dc:17:29:
                    11:57:16:dc:b5:a6:6c:2b:b4:e0:b2:a0:67:b1:ea:
                    83:ee:31:f1:1a:a7:c8:4a:a8:a8:a4:ac:c3:e4:7e:
                    24:9b:25:a2:1d:b4:9b:d0:00:58:cd:0d:24:86:5d:
                    76:b6:51:d6:4b:ed:c5:1a:02:35:90:b9:31:48:63:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:7B:FD:D3:33:37:E2:DB:5A:43:7E:DD:85:D3:34:82:A0:FA:DB
            X509v3 Authority Key Identifier:
                keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:7e:5e:ce:fe:1c:47:d8:7b:35:c5:a4:d0:33:21:70:1e:
         ca:10:f5:00:ba:40:07:09:96:a7:49:36:80:8e:4b:a4:c0:5f:
         af:32:f6:fd:10:de:9d:86:b3:10:6f:78:80:c8:a9:e9:7a:79:
         a1:c7:da:28:8c:83:ce:0c:c1:7c:79:f6:56:4e:a3:da:7d:01:
         5a:10:3c:b7:4f:90:d9:c8:01:3f:33:f8:8c:83:2d:b6:f3:c4:
         1b:b4:2e:aa:fc:fb:40:54:c2:77:85:bf:c1:48:f3:62:da:59:
         19:d0:88:ba:a8:ff:7c:89:20:bc:ee:15:4a:a8:b6:43:4d:f5:
         1c:4d:91:5f:3b:b1:fc:81:df:75:c5:6b:b8:68:ec:bf:f2:f6:
         de:92:21:1b:20:26:76:29:5c:06:00:be:d8:cf:0f:bb:5a:5f:
         b9:9e:bd:7c:83:5f:7d:c9:2c:b4:84:d7:b4:4c:2a:72:21:31:
         dd:22:89:0f:3d:81:6a:f3:8e:56:fd:4a:3d:48:84:73:85:3a:
         6a:6d:ab:42:23:f7:0d:62:1e:09:ff:a9:8a:69:9d:5a:60:8e:
         74:1c:6f:3e:6a:85:ed:5d:3b:51:3c:3c:28:c5:77:04:70:32:
         8b:32:fb:48:38:ea:2e:72:c9:1c:44:24:92:41:13:ed:9b:ca:
         7a:47:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----