Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File:                     4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier:          Nx/qgw1LkQTX3ppokSvJwiVyHzFSkA0WjDwjibWTHAw=
Subject key identifier:   78:C0:5C:52:0E:BE:66:BD:61:06:24:E7:18:2D:1F:7E:F4:12:0E:C5
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer:       /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial:       0193591BE491FAB9A52D6413EAE2DD367C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 13:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:20 +0000
Files and hashes:         1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: lpZWzZf6cT5nqNaUhcdkTdoSALj7bLVCmz8PD+r2NKE=)
                          2: t80-OTjveQq7E1uzjTwi8q4xuwY.roa (hash: 0Q8AoFo0yij/NSGYNgAW2Xeq7suc/mBsKV0d/kcroAY=)
                          3: wRmBVNq4SuoYg9dcKHhpfeRj7aY.roa (hash: sNRpqX/JzPTTZMrBK701JR5MnGSxwYGIwJ6vq9nAoKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1b:e4:91:fa:b9:a5:2d:64:13:ea:e2:dd:36:7c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
        Validity
            Not Before: Nov 23 13:00:20 2024 GMT
            Not After : Nov 24 13:00:20 2024 GMT
        Subject: CN=78c05c520ebe66bd610624e7182d1f7ef4120ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:f1:a4:da:49:91:32:04:05:cf:1e:b2:70:
                    58:d4:d7:4d:fb:43:b5:2e:08:2b:8a:cf:68:91:0d:
                    16:a2:2b:de:6f:b8:03:db:24:22:09:7f:4b:cc:c6:
                    4d:6e:ac:24:ef:0e:c3:e9:4c:a9:30:09:40:e0:5c:
                    96:db:1b:e2:3c:43:f8:da:84:81:b4:43:9b:30:c2:
                    ee:c8:d7:58:94:09:68:cb:30:9b:e1:42:87:f5:e5:
                    8a:e2:2f:f0:41:43:3d:fa:95:74:ce:4d:82:bd:5f:
                    f8:fa:9a:5d:7e:a8:8f:6c:2a:eb:89:59:81:41:1f:
                    b9:ee:96:e3:b2:27:b2:17:58:1a:fd:8e:4b:07:4d:
                    0c:ea:2d:be:d3:88:84:1a:0c:1e:3c:a2:ce:3e:48:
                    73:20:48:fd:b7:61:51:91:d1:b9:20:84:d8:25:ba:
                    ad:71:64:40:fb:b4:63:8d:85:80:9d:92:4c:7d:27:
                    3e:20:82:27:e9:47:df:6d:4b:53:9e:4c:b6:82:37:
                    e2:d1:ef:7e:9f:4f:c0:9a:ea:00:0f:91:1a:28:0e:
                    7e:3d:20:19:e0:91:e4:6d:1a:1a:07:cd:5c:08:f1:
                    eb:5d:43:f4:b8:0f:8c:e8:f8:3b:57:85:ce:16:da:
                    45:bf:64:75:7f:52:d2:05:ef:ae:c0:b7:26:3e:dc:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:5C:52:0E:BE:66:BD:61:06:24:E7:18:2D:1F:7E:F4:12:0E:C5
            X509v3 Authority Key Identifier:
                keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:67:1f:54:11:02:04:4a:19:8a:f0:2b:07:05:19:9d:3d:5d:
         10:c5:d3:a9:68:8a:a1:4a:97:ca:c0:a6:7e:fb:f5:ee:6f:e6:
         ff:c9:0d:4f:ff:93:9e:0d:be:03:02:52:7c:d0:e4:07:89:5c:
         36:df:a6:1f:68:ca:e0:84:32:18:48:b3:bd:93:8a:c9:8d:02:
         a8:89:67:41:40:01:eb:3a:86:b2:61:9d:d2:26:df:1e:17:e2:
         2a:4c:f2:55:26:f1:df:00:e2:79:04:0d:ce:a3:28:c0:b8:15:
         8e:a9:d8:6b:22:bd:1f:d5:ae:85:40:d8:75:75:99:15:ea:79:
         c9:34:19:46:bc:93:85:48:86:ed:95:38:56:6f:a4:9d:16:a7:
         84:21:5e:bb:a5:f4:32:17:e4:0c:2d:ea:07:70:af:f8:22:a7:
         ab:13:09:76:4f:18:1d:23:c0:06:06:12:fd:49:dc:9b:35:00:
         c2:8c:e3:0a:4b:47:0f:ab:38:fe:25:63:e2:0f:01:3c:63:0b:
         ae:f4:26:94:15:05:70:4a:eb:d0:c0:41:d8:24:32:fb:bc:c6:
         9a:7d:63:d6:20:52:b2:55:f8:be:56:72:b0:10:8e:43:b2:2b:
         2a:75:a4:f2:9b:42:74:c9:b7:19:26:13:e4:e8:67:67:84:ad:
         03:c9:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----