Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File:                     UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier:          tPLadAnEkKzzuNxgMd2Cc4tTsKl6BIxvNEQz7IgNolY=
Subject key identifier:   51:E5:EC:64:4C:C1:37:8A:36:42:EF:3C:CB:F7:62:28:A0:3F:23:73
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       01935162F399FA70B041B0CA535AB3B955F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number:          0FDF
Signing time:             Fri 22 Nov 2024 01:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:59 +0000
Files and hashes:         1: 2sLJBNI5DRBDmFHQo9NHuH0YdgY.roa (hash: NulK76zmY/XB1rNBZ0EJGrWs9IGbPyFIzscsawCfmjY=)
                          2: 3kbuFjosr6hpduK7j1XJSiJp0oQ.roa (hash: qCSVhL/OpjpGVHjXQodW6GInqX1tTBK4qK53A9O8b70=)
                          3: 7pqmuZp7k4eQBkOtPCSsDmyuq5s.roa (hash: /2GBUp8XpAqFrzNNkoOuGLzggSnOFfeuYnrugUp54ac=)
                          4: 82Fn2JZNV-xXZd5fWsjXKsAcB6I.roa (hash: EZYNoVBuDuwJF48L9SYfVVuYez340Cb//zmx/2l0VDI=)
                          5: A9_1rrjLJEngR5Zc08gWHnw_7QE.roa (hash: U9ffBB+hbE7Rfxj69YU1Bh85BgYuOMrwEEFGu9UWO9k=)
                          6: ElzTNMvuHLuwKh7_6ACoCPUbsd4.roa (hash: f1+i9gr2hfeCLjNxy8K76Ur5Y5NtWUBv1YjnV7841r0=)
                          7: F7s91KoIj1ZfYv6eslwPJ9GkTpY.roa (hash: 7CNsQFwOexBGk0I2UbSUn4SDfWly9O+9IWn189MkLJc=)
                          8: FH93-OaeippN5t42y288UZnWD5E.roa (hash: Lptz/0Y3Q0wKxZsBAdl3N4Er2YjK4t59OJhs3vHvnEI=)
                          9: J9yG1tiLB3dCh9EGSlW4GgCAIWw.roa (hash: QyjSyMB4TIk423pYyP5c88ubu2NNLgYkvUBV3SLjNjo=)
                          10: NmUD43JLSVioro4Eta_CpZrEBfE.roa (hash: EpEH6ZTyQo1i/d2HlgdEGpwjuT/FJ93PSVE34NFIb58=)
                          11: P4dmzUcfZjbktzVOjYfcEqJ4Zdg.roa (hash: 1TqykqnDJThghmS8IxN0rmaKfwS/ZBrLGHoxNLxSW1k=)
                          12: PcRtmgZltHHZlzfsc6O3w8LJBaQ.roa (hash: ODIn7vaP8BmU4V1bOflKwglkhP11oR60J2buC2YCULs=)
                          13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: i+Od82jdxMA9H2WsXQ7YuGitaYkEybP/VY50/8mSsvg=)
                          14: XSupLy8IB8_HrepE7950ENHqc7M.roa (hash: YolxdL5a1dI9gl0M/wu2XHghQVq18s6HsabZtoxJbSY=)
                          15: Y4dSWpJtPM-1Z1NNbNxYNjzOrlU.roa (hash: OvZ58vgQl9CVMwGZQZNO0KfbgAYUlMANlm/TM7ucEi4=)
                          16: ZcctDcY1DIMRZtSaDutpt6Gobqk.roa (hash: V1d7L6uE3rWeHZoFS9M2C569SmBPPoxJzhEwURXIeqI=)
                          17: gqxI9_DmjGOikveNdwHj-UvpL0U.roa (hash: 0SkH5PbeNvopKohJwHtDtig8KefWDvvw+W5TkurTjTU=)
                          18: iRgkVcJTF0YDWbFTOj07f-Jb0KU.roa (hash: NaMPJiEZ/1NQNduOeLq2m2KzSia3BbATa1riuBS4qjY=)
                          19: iTmXSF2wJVjlAuotaDYEWMx8YvM.roa (hash: rzh6ZFd+Zxgj9D/SBJfIJUUn5CdIcem6vGjUUKRTUQU=)
                          20: mUiOdnSfkO6ooXT96hXEw8DMtQ0.roa (hash: jCr5xDvWM+7xLHy5HYmCSZ7g/wSsH274Kuqt7jJw68w=)
                          21: nDKGQ3EtYAnkRGPpDip5ZwR942E.roa (hash: 6m7qLGhEU4pemxqSNwDdGlSZ8Xogv8QqReZpK2qTpr4=)
                          22: pu8qds1FAIq3hV4zVKF-P5VeYBE.roa (hash: xOynbR8neAO7FFYBNHw6wavABG7MtWkHqqJcROSBiU0=)
                          23: smwiCcfPiZQxHzUiwBbVqoWakgs.roa (hash: VTpOWgcMg3rsLs8m+Qh76MQTe5SdrNraeUcUeWisbHs=)
                          24: yvk2SvL7P28o0pPT-rWJrD5b2ic.roa (hash: PKdVlx/Z827Nilbb25fPI8MqLTe6eoNMMsiO4ERVZOw=)
                          25: yy4AghrqSprO_lv2t13R_ztxYqI.roa (hash: jCY89jOOVqrHCyvqmjmE4RrVVz1u5UMKNGiBAlyWpIQ=)
                          26: zjhp9sRJkZlGX9_ZmzTaUsYlwvo.roa (hash: pZJ0et6W/uUDm1S/JW4gqKCMOx1ZwGJ+wg9vz5XCbiI=)
                          27: zoAGCpo2f-yPiC7w5Y2t_4YGUc0.roa (hash: KK5p8eqZI/yj/axkvFnDldfhrcIXRMS20QDyNe5seto=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:f3:99:fa:70:b0:41:b0:ca:53:5a:b3:b9:55:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Nov 22 01:00:59 2024 GMT
            Not After : Nov 23 01:00:59 2024 GMT
        Subject: CN=51e5ec644cc1378a3642ef3ccbf76228a03f2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:d6:22:51:7c:82:50:ff:a9:33:a9:fe:6c:
                    a4:c9:36:ad:90:b5:bc:b0:dc:ea:8c:e3:cb:47:9d:
                    8c:a0:81:9d:1a:96:af:0b:b1:69:df:7f:6b:7a:26:
                    d6:f9:54:d8:32:27:fc:bb:d6:47:70:ce:72:e2:cb:
                    a8:d7:61:ff:fe:25:38:17:b1:d5:00:24:36:b8:0b:
                    36:c9:52:bd:35:e8:07:59:99:7f:fd:a4:b9:c7:ac:
                    44:1c:d4:b1:4f:04:ec:b3:80:52:ec:93:a6:53:8e:
                    5e:a7:a6:be:9c:34:25:8a:05:8c:58:fd:ae:89:a4:
                    58:07:f1:b2:ae:d2:ac:34:62:b6:b6:29:34:d3:63:
                    ad:ea:6a:2f:96:3f:4c:1a:2e:88:50:29:30:de:4b:
                    db:27:99:fd:aa:ff:8f:27:23:bc:09:9c:dd:7b:ef:
                    c7:83:5a:89:ba:08:ab:e3:59:65:64:19:08:26:49:
                    6b:3f:a4:99:2c:21:4d:11:df:35:bd:63:d0:c2:7a:
                    98:f7:c1:ad:30:7c:9b:ee:85:99:81:f4:8b:f8:4d:
                    8b:c2:54:12:22:9b:01:3d:b0:f9:5e:84:30:1c:38:
                    42:94:f0:53:ca:d4:f0:ba:bd:a0:60:af:06:50:6d:
                    54:e2:d7:af:99:13:7a:e5:0b:cc:86:12:74:eb:49:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:EC:64:4C:C1:37:8A:36:42:EF:3C:CB:F7:62:28:A0:3F:23:73
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:ce:35:84:65:98:af:e9:f9:91:30:ef:a4:22:7d:cf:88:
         21:58:b6:50:24:22:01:91:2f:85:ee:f5:9d:ab:8c:dd:22:f7:
         3a:81:f6:c5:c1:51:d1:2c:ae:7d:29:b1:bb:31:f9:4e:bb:92:
         39:4e:f7:45:7f:fe:c5:7f:53:11:1a:2e:f0:a4:30:b5:30:4f:
         d0:d0:c5:fc:b1:ed:fd:91:15:58:80:b9:37:32:8c:d6:1f:d0:
         cb:58:43:cf:d2:bc:d8:c7:ce:be:c1:39:ff:d0:ed:99:f5:43:
         ce:a8:e1:d8:11:a4:1f:fd:6f:47:34:a8:69:78:d1:28:b5:4e:
         90:5a:99:8d:8a:d8:4d:f1:59:23:73:58:c1:58:14:f3:45:b8:
         74:f2:df:05:e1:f2:6a:f2:3d:52:45:af:75:69:56:61:84:56:
         ec:9b:57:f1:91:65:5c:09:83:cb:43:0c:bd:6e:12:d1:c3:2b:
         d5:37:79:84:62:c9:9c:79:50:ad:3d:b5:fc:e1:b3:b4:15:84:
         cc:54:97:ab:4b:34:3e:8e:e1:24:54:5f:af:98:3d:08:44:ff:
         b7:b6:64:32:f3:8c:84:d1:82:5d:21:b6:63:f6:f4:77:e9:ea:
         14:24:73:7d:35:cf:f0:9a:05:2a:18:cd:49:06:86:67:ed:6e:
         9f:52:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----