Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          AcrrR8a9QlQKjxgWJQz2x1oMOcDlSJexheUtGmyTTkE=
Subject key identifier:   90:B8:DD:70:FE:3D:CB:F8:7E:49:4C:9B:6C:18:60:50:20:F9:2B:8F
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       019357647332A1666E37A47F091350C8C8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          0DEA
Signing time:             Sat 23 Nov 2024 05:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:21 +0000
Files and hashes:         1: MZE5UeY91iaWoXZ3Yd78efYzS3g.roa (hash: bYdYVus1k0O/0KYG6BEKo+R1P88RMxLzgnfhEXD2hK8=)
                          2: aLaiV6mXhmyKCRkeyxf1ZnUNYe0.roa (hash: UPnIIURQla7GQTIgzw8y5aMLmeaNNaxHFIL1SF9RSnA=)
                          3: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: Zb4SA7bKu6qLOgJmySc0U3xGNuHvaPzmPnEaW6XLuzs=)
                          4: zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa (hash: Z8R7cGmKx8YBM+S6O6qi7RKKCiSr+umSZ9rN/Zs78SM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:73:32:a1:66:6e:37:a4:7f:09:13:50:c8:c8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Nov 23 05:00:21 2024 GMT
            Not After : Nov 24 05:00:21 2024 GMT
        Subject: CN=90b8dd70fe3dcbf87e494c9b6c18605020f92b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:95:fd:7f:27:e9:ef:65:d0:0d:d7:2f:4f:
                    b4:ac:8e:46:ff:a5:0d:90:bf:36:68:4a:8d:0a:4a:
                    c7:bf:9a:f7:2f:51:94:1c:76:83:f7:1d:ae:9d:61:
                    a7:4e:47:e4:2a:b6:b8:aa:5a:fe:3f:f9:b0:89:2d:
                    db:1f:78:2a:87:b9:de:df:33:58:88:21:5f:75:be:
                    11:d4:e7:5d:62:c5:7e:ba:46:60:ee:29:d9:f2:9c:
                    af:42:5d:52:2b:11:7a:ba:8a:2b:c1:55:8c:95:7a:
                    6c:7d:ea:53:bc:44:07:8a:cd:eb:04:ad:85:d9:c7:
                    57:04:21:fa:97:e4:78:b4:c7:6b:90:5f:4c:66:9e:
                    77:2f:8c:d9:d1:3c:9c:62:de:c1:4a:60:79:80:28:
                    d4:0d:74:8e:e6:4e:66:9d:d4:b3:e4:41:70:6c:97:
                    77:74:cc:8c:30:c1:50:a4:12:5c:5e:d1:c8:ce:94:
                    9c:49:dd:18:cd:f0:66:d8:fa:14:08:4d:33:9a:45:
                    98:c8:13:a5:6f:b1:b1:3b:be:42:dd:af:64:c3:65:
                    28:80:10:6f:6d:be:0c:11:05:d0:c3:cf:52:c7:08:
                    f7:86:a7:76:de:05:68:00:7c:74:4e:76:b7:ef:5f:
                    9a:70:4e:10:b2:9c:e4:14:74:07:1a:d2:16:0b:b1:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B8:DD:70:FE:3D:CB:F8:7E:49:4C:9B:6C:18:60:50:20:F9:2B:8F
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:df:c2:a0:e1:b9:2b:a7:23:42:1c:5c:59:ed:00:72:89:32:
         f8:5f:a3:fb:9b:e8:81:b7:d3:9f:4d:86:f5:c4:bc:41:80:4f:
         6a:d8:4f:e9:76:79:3f:00:25:dc:0d:2b:ee:39:40:69:b2:2d:
         30:43:84:a0:4b:01:4e:5f:25:7b:e8:e6:ce:6f:20:87:19:78:
         d8:ce:f8:ab:e5:21:e0:f9:58:af:e8:23:6b:e8:a5:c4:7f:f2:
         67:ad:77:ac:85:6e:78:16:6c:c3:f6:97:9d:cf:ff:36:ad:9c:
         82:d9:4c:4b:5e:f7:ad:54:25:99:55:b6:37:8a:fb:11:f8:41:
         79:cc:b0:b8:28:05:5c:25:ff:b2:7e:e3:6d:54:a2:0b:7c:d4:
         cc:4c:b2:c9:7a:fe:18:dd:f0:82:8f:e1:1a:63:f6:63:de:7a:
         a6:d9:54:96:97:58:83:06:34:ac:6b:8b:b1:1b:2f:42:ec:28:
         1a:49:a0:68:6e:06:71:42:2d:16:c4:7a:01:80:92:c2:6a:ef:
         81:e3:37:92:53:c8:3c:7b:1a:37:7f:55:e6:b9:35:ed:cd:09:
         6f:98:94:f1:82:13:de:7b:41:ff:4e:13:84:a7:be:d9:03:14:
         81:28:64:5b:f3:24:56:2a:0c:f3:74:dc:ba:29:68:9d:98:6b:
         96:b2:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----