Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
File:                     pF3taOImAyG8o56EZbScJdWKVuY.mft (raw, json)
Hash identifier:          nKEStCFM2bgbgLd2unkvKhIAXPWlj/qSjGx/aXcuGqc=
Subject key identifier:   05:F4:E0:E7:E3:71:F4:25:C7:91:B4:47:A0:D5:E5:DE:E1:A9:FB:42
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Certificate issuer:       /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial:       0193644460821D6EFAC4C5BA732336AA1BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
Manifest number:          0AF4
Signing time:             Mon 25 Nov 2024 17:00:22 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:22 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:22 +0000
Files and hashes:         1: 9vHrqQ9e6Tk0PoHoqRwnWYOs6TQ.roa (hash: Rtagawwq1eAQVgDt0Tz4oz4Q1TjQ01SF2sdkaVR8AtM=)
                          2: DqQLTGlYPqP4PbcWT9xn9ttyRhQ.roa (hash: 62EApHSCW/VajssDqzexu4Amaw2ffAl20HJf9/ETHkQ=)
                          3: Ip3Zys08q81AOlsE9U_D_c9BlCw.roa (hash: iQBUVcBYDepUZ8dFc3+TPSauDQWJVg9t++HG8Gwy1as=)
                          4: bZ0StKlDkY6Ak2ujWUmCpx3JnCk.roa (hash: PV60ogp1+F07ogm8RhAQNtQBKdrBP/rSF/IU0GQkJFY=)
                          5: jEbh7e1lo_PSjVT9HHODJ3hxm4o.roa (hash: fZYeIg6xdX+XGArETTO2iqAa+UWc5N7QNoFGlC7/YNM=)
                          6: jX7UTDcWPV66DrTelOBJVcoyOp8.roa (hash: ZJAnzxoEc86PcWxo0bZXyNAURKDOZOu4LKhVeql4Zzs=)
                          7: pF3taOImAyG8o56EZbScJdWKVuY.crl (hash: yytB8EJKhniS1Te9bCRJIymQE3+5ylEWLxvzCBMEuAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:60:82:1d:6e:fa:c4:c5:ba:73:23:36:aa:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
        Validity
            Not Before: Nov 25 17:00:22 2024 GMT
            Not After : Nov 26 17:00:22 2024 GMT
        Subject: CN=05f4e0e7e371f425c791b447a0d5e5dee1a9fb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:7b:66:89:ae:08:93:5f:3b:2b:dd:b8:30:
                    6d:61:97:e6:5a:fd:63:63:26:9d:0e:5b:1a:28:71:
                    00:76:10:f3:57:88:97:bd:a6:5f:00:fa:da:bc:52:
                    62:0c:15:a6:f1:07:03:7a:f7:91:3f:90:29:07:a8:
                    4b:75:07:68:99:9e:aa:25:d4:67:3d:26:3f:3e:c9:
                    fb:6f:8e:37:6a:86:df:59:27:c5:c5:08:45:a5:bd:
                    b3:c7:72:57:9d:14:dc:16:6a:0e:46:6a:3d:f5:fb:
                    e0:67:57:cf:16:24:4f:1d:ea:80:b6:70:81:e5:3e:
                    94:43:97:18:99:18:e6:eb:e0:54:c5:88:49:a8:52:
                    6b:4f:8e:c4:75:9f:59:0b:80:40:74:84:a2:c2:26:
                    ba:bf:c6:53:f4:78:cb:5b:1c:9a:72:30:39:34:2e:
                    41:18:07:28:d2:b9:e9:98:37:44:31:6b:1d:2b:f0:
                    28:c0:32:a3:15:ac:4d:26:76:a9:d8:45:39:9a:80:
                    13:a8:d2:fd:cf:3a:8d:34:fe:73:2f:3a:83:c1:2f:
                    4a:5c:85:fa:f2:af:e9:10:76:9b:59:52:0a:aa:ed:
                    f3:48:82:c6:7e:d8:6a:ae:11:e4:39:05:95:2b:94:
                    1d:11:90:4e:4e:7c:f6:7f:ea:77:4f:3c:9a:4f:4b:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:E0:E7:E3:71:F4:25:C7:91:B4:47:A0:D5:E5:DE:E1:A9:FB:42
            X509v3 Authority Key Identifier:
                keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:51:8c:de:7d:95:3b:a2:29:72:9d:84:ad:8a:62:be:99:18:
         58:fe:d2:2c:12:2f:76:25:d9:17:d5:7a:07:59:49:4a:ff:8a:
         24:6d:92:ca:b9:9a:c7:e1:99:6f:e2:8d:d6:46:88:38:b9:52:
         18:9a:81:b8:27:8c:e3:3f:e6:61:85:dd:fa:d2:f4:85:9f:c3:
         16:e6:20:1c:7b:f3:97:dd:e9:af:77:0c:28:80:6a:d7:01:1a:
         ff:da:b0:a1:42:26:9e:a3:9c:09:75:6f:94:d0:5d:f1:40:51:
         eb:b7:56:b7:0f:fc:0a:39:62:5a:34:28:19:b4:8e:b3:a5:87:
         08:e6:63:57:d0:3e:24:6a:76:aa:3d:11:bf:82:d3:09:ef:e0:
         01:64:5e:ed:91:e2:75:cb:01:61:07:ed:fb:b3:62:d7:7b:37:
         b6:55:b2:cf:ba:3b:30:73:f3:03:6a:77:a8:20:ef:eb:fd:c7:
         79:53:d4:db:9d:0b:09:2d:1f:43:e0:b3:38:26:b7:13:95:a9:
         7d:ea:77:99:3b:0c:b2:b9:5b:00:b9:dc:c7:d3:ee:6c:11:cd:
         61:f0:3a:b7:30:f9:84:a2:09:23:ef:e1:8a:40:e5:0d:0c:c2:
         1c:6f:80:9d:ab:bc:8b:8b:46:a0:61:7c:54:d9:01:fc:fd:f3:
         31:38:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----