Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File:                     1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier:          RezS0yxrdACQ/e5p8WWbQqZKMSEg0BIxNlZ/VljhuCU=
Subject key identifier:   10:71:F3:C0:03:CB:37:C5:75:A2:36:83:4B:75:6F:0A:DD:34:3C:F6
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer:       /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial:       01936A465DF5909C44D3CC2591737527E175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number:          0D3A
Signing time:             Tue 26 Nov 2024 21:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:16 +0000
Files and hashes:         1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: KrdNwOJQFmpW+FW1bYNBYM7iTIWhJhEmzU0+cGkVha4=)
                          2: OSYoV2BfvJ_-lYuXmQ06HlFl4eo.roa (hash: 4DXSM6Ys38F3FTnQR79uBZA7pD+aL4w7lO3ahxjv5gs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:5d:f5:90:9c:44:d3:cc:25:91:73:75:27:e1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
        Validity
            Not Before: Nov 26 21:00:16 2024 GMT
            Not After : Nov 27 21:00:16 2024 GMT
        Subject: CN=1071f3c003cb37c575a236834b756f0add343cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:a0:63:e1:ac:87:e5:f5:c4:9b:14:28:fb:
                    df:67:b4:4a:13:e7:85:78:97:56:32:80:57:74:2c:
                    ac:ec:8d:20:2f:f0:be:69:a2:85:c0:0f:38:b1:06:
                    f0:59:79:c0:ec:31:aa:fe:e0:e1:ab:c3:5e:99:69:
                    7e:35:e1:24:7a:ee:4e:de:91:c8:6e:03:d2:c0:1f:
                    50:c9:2f:ae:26:19:4b:f5:e6:74:0e:da:da:82:86:
                    dc:9e:a3:ba:90:3e:75:33:d8:f3:60:aa:27:d3:87:
                    22:89:6a:fa:7a:a8:f6:cc:67:ec:0f:04:c6:b4:b0:
                    70:87:61:44:d5:39:71:09:62:fa:a8:b5:a3:ea:52:
                    cd:e8:01:3b:b0:1a:84:1d:59:22:fd:1a:67:cb:e5:
                    93:23:23:47:8d:b5:b1:53:66:ec:eb:28:d2:22:b5:
                    a2:1b:a4:18:a2:35:0e:62:3d:b3:97:8d:55:d9:2d:
                    43:9f:07:9c:1b:10:c2:45:8b:41:fd:3a:92:14:56:
                    47:55:dc:1d:3e:3a:79:3d:ad:ff:66:0e:d6:88:a2:
                    ff:12:b0:bf:9a:de:20:e5:e8:a5:5c:89:3c:63:81:
                    98:01:18:1c:dd:5a:d0:7d:9a:85:dc:a7:d1:f9:c6:
                    32:80:bf:2d:97:72:23:e5:ba:a6:02:ec:82:93:cd:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:F3:C0:03:CB:37:C5:75:A2:36:83:4B:75:6F:0A:DD:34:3C:F6
            X509v3 Authority Key Identifier:
                keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:bb:ae:43:10:9f:31:d4:f6:39:b9:21:cf:71:6c:96:e1:81:
         94:9f:c3:af:7c:7b:b2:fa:1a:8f:3e:75:85:2e:1e:76:50:56:
         74:1f:18:26:41:60:39:84:ed:49:0c:f1:2f:f4:dc:52:92:86:
         a8:17:a8:02:02:10:25:f3:e5:36:ec:b5:01:62:f2:be:d4:57:
         4a:9e:0e:7e:6b:aa:34:b6:a1:c6:c9:a5:e8:ae:e2:d0:e3:18:
         c9:f3:c7:5f:89:bc:39:d8:0b:cd:26:9f:d6:19:f8:39:7b:76:
         41:c4:49:af:07:b6:37:9e:24:a7:2f:7b:90:32:b1:88:94:fb:
         88:93:9d:ee:1a:f6:96:8c:a6:35:86:9b:33:43:11:df:28:46:
         58:3f:59:d9:c3:9f:f6:70:14:99:bb:ef:ac:98:d4:23:fd:1d:
         d7:69:ab:a7:f8:54:51:5a:84:c7:3d:1c:ad:1f:9a:ac:69:d4:
         98:eb:3e:0b:ac:18:e2:98:dd:23:de:26:aa:d0:b8:e3:82:04:
         44:ea:79:5a:77:81:62:7f:de:6e:9e:33:2b:85:60:e9:c2:9c:
         8f:61:bc:31:ee:0f:ee:95:35:ce:02:cf:f3:c7:71:c5:5d:36:
         8c:b5:fb:8a:48:10:fe:88:b9:8d:20:a0:20:59:a5:f9:00:4c:
         c2:ef:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----