Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File:                     x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier:          X3Ak5+nMDX83ABQXGDjeSSAG7yxP8kx0bveMKxOe4Uo=
Subject key identifier:   3D:91:D5:F4:5F:0E:A6:37:FB:C7:74:43:86:C5:C2:08:E2:3E:EB:20
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer:       /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial:       0193572DF443C7BE24F620056CC148C9525F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number:          0998
Signing time:             Sat 23 Nov 2024 04:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:49 +0000
Files and hashes:         1: jITbU3zSJQrd44BqEbMTS0qbtl8.roa (hash: 15yUrQCKFBILR3HXPZHMDxo7EXaGYlFtxflDri84oN4=)
                          2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: RBy68kwN4niT29Hl6Oy9AmSYDNVV2/ZgDt85xEh+A9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f4:43:c7:be:24:f6:20:05:6c:c1:48:c9:52:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
        Validity
            Not Before: Nov 23 04:00:49 2024 GMT
            Not After : Nov 24 04:00:49 2024 GMT
        Subject: CN=3d91d5f45f0ea637fbc7744386c5c208e23eeb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:04:c8:ce:15:94:cc:a7:59:f9:af:e9:69:
                    d2:2a:81:40:2a:15:56:05:e7:2e:17:5a:46:87:ce:
                    14:1e:50:1b:81:ba:7e:9f:a2:03:10:01:74:41:94:
                    0b:00:a6:36:db:63:35:a4:fa:bd:f7:cb:e7:6c:ab:
                    c9:37:3b:17:47:a1:a5:db:3d:47:36:3e:3d:75:58:
                    84:8f:d6:2f:34:96:01:fd:0e:9f:3d:5e:b1:b8:87:
                    e1:1c:af:4a:2f:b7:16:b1:01:c8:b4:71:ac:a2:5a:
                    c6:a4:45:14:c3:5d:cf:c8:0c:2b:0c:7a:67:fa:43:
                    8b:2f:c2:69:c9:2b:6e:f8:99:a0:c3:50:39:a2:6a:
                    a8:cf:55:af:c2:5e:5b:45:3f:83:2e:2f:f0:88:6b:
                    c9:cf:8a:58:3e:86:d4:55:32:b8:7a:c6:a1:77:ab:
                    1a:88:89:25:0f:fb:49:d1:50:6c:46:c3:ba:64:d5:
                    bc:0e:81:e6:a9:b2:89:42:93:0b:89:62:b1:7d:47:
                    e2:9f:07:63:3f:33:f6:4f:2f:7b:40:8f:d0:67:7c:
                    ac:4e:4f:02:76:76:78:8f:a4:4e:5d:a3:83:7d:13:
                    b4:ad:64:a5:a0:05:64:86:96:89:71:6b:cb:bc:ef:
                    ae:c4:03:1e:6f:67:3d:4a:93:b0:c2:e9:3d:56:b8:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:D5:F4:5F:0E:A6:37:FB:C7:74:43:86:C5:C2:08:E2:3E:EB:20
            X509v3 Authority Key Identifier:
                keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:60:6e:84:e3:04:ec:15:40:a8:a5:da:c1:6f:dc:c7:5c:85:
         b0:53:da:43:63:e8:8f:31:6f:ed:19:1c:c6:56:15:39:19:3a:
         bc:e9:30:65:c7:3c:47:cb:b3:44:c3:09:5a:90:4b:fd:4f:81:
         9e:85:67:c2:10:4e:de:a5:e7:08:f7:e0:ac:8e:de:e6:3b:0a:
         d2:28:e6:94:ec:b4:06:c0:20:c4:9b:70:24:55:f0:3c:bf:8f:
         ea:0e:18:91:6f:4e:39:7b:2c:0b:cd:9c:87:da:e1:53:4d:eb:
         fd:18:8b:e7:7c:ee:d7:b5:67:c4:c4:d7:7b:3f:25:94:32:42:
         b5:3c:01:79:a8:36:4d:a3:43:b0:75:0f:36:71:38:11:7c:2f:
         61:f1:15:c4:46:be:82:9f:c1:dd:a1:dd:ab:6e:a4:41:d1:06:
         7d:2d:1d:28:80:10:97:df:7f:63:4d:95:50:6c:09:c2:aa:3f:
         c0:6f:34:e0:92:e2:3f:6f:62:82:9e:c8:dc:2f:c0:0d:cc:0f:
         6e:78:e2:1a:ff:70:14:b0:5b:1c:7a:50:b8:12:c9:6d:d1:27:
         98:a2:99:0c:31:c5:42:e9:a2:71:7e:26:77:86:82:60:ca:e4:
         e0:dd:e2:75:bd:77:78:e0:48:d8:09:7b:12:07:df:99:d2:4c:
         f6:f4:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----