Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          B7YXEZ6eNDRP2Z+i+pkT8islDRtoJasgV96A1IrvAbE=
Subject key identifier:   E1:07:BE:C7:03:EC:FF:9F:5F:1D:D0:AD:3A:36:1B:55:D2:E1:73:3F
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       01936B22A2E1E204F03E79EA6A2C8A7C7E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          0ED2
Signing time:             Wed 27 Nov 2024 01:00:52 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:52 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:52 +0000
Files and hashes:         1: AN_i7yNe-jQCObJQyPWftxJZZ8I.roa (hash: +1/h+7+iXe42AzZrE/iSqBa7o4R1kPWMVeYo0I+h6Bk=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: Duj1AZrxrki+7u17/+p9QnrFV52AcuypSWT9+h8/Zfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:a2:e1:e2:04:f0:3e:79:ea:6a:2c:8a:7c:7e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Nov 27 01:00:52 2024 GMT
            Not After : Nov 28 01:00:52 2024 GMT
        Subject: CN=e107bec703ecff9f5f1dd0ad3a361b55d2e1733f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:ee:53:09:8e:85:93:56:c3:41:e8:9d:8f:
                    6b:d8:86:0b:65:ac:cf:52:41:92:37:33:ff:88:7f:
                    90:2f:e2:5d:3d:e3:a4:f1:2b:22:39:4e:47:41:92:
                    6d:aa:41:78:0b:d9:23:f9:82:da:bf:d0:6b:3c:6c:
                    2c:a1:06:0a:e7:60:02:cb:66:8d:43:42:6d:ea:a5:
                    f6:6d:c8:be:12:1b:ff:de:3c:01:09:5f:f2:09:58:
                    8f:ef:31:84:b9:cb:e8:21:11:c8:63:66:79:ff:d1:
                    da:4b:ad:94:90:ea:77:8f:f5:c1:db:8a:34:a5:45:
                    80:f4:9c:0e:1f:03:44:e1:25:bf:07:a3:96:da:71:
                    23:a4:c2:37:83:e8:91:b9:35:26:51:0b:16:eb:a2:
                    e6:61:d6:18:dd:5a:46:c8:84:f0:a7:1e:3a:dc:7d:
                    65:20:0a:fe:37:c1:64:3c:4a:fd:40:c4:00:9d:78:
                    46:37:40:92:d4:d2:74:54:48:38:ea:71:95:54:87:
                    be:c0:75:9a:62:76:66:c9:ac:e0:19:05:be:00:c2:
                    9c:24:35:34:eb:55:5f:71:d4:54:77:08:9e:ff:92:
                    63:0e:88:61:ff:75:97:71:95:ff:da:17:f8:b8:8c:
                    53:78:22:dc:6b:16:c3:80:bc:6b:d5:9f:4a:cb:b1:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:BE:C7:03:EC:FF:9F:5F:1D:D0:AD:3A:36:1B:55:D2:E1:73:3F
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:99:40:62:fb:5d:f0:d2:3c:5d:d6:35:c3:71:de:fa:87:
         67:f9:46:8b:c6:7e:9f:0b:59:e2:ab:68:a3:ff:8a:80:41:62:
         2a:c7:54:55:5c:43:72:68:c2:b8:62:bd:16:82:e5:96:2b:28:
         95:00:5e:56:d7:e0:a5:4f:bb:ab:ae:3e:f8:e3:82:65:2d:4c:
         dd:f5:64:83:f6:53:c5:7b:f7:85:66:79:74:92:b5:07:85:54:
         92:7a:1e:37:3e:63:86:ae:bf:3c:47:8a:c4:e1:bf:04:69:f7:
         0b:5a:cb:1c:ae:27:6e:2a:fb:9c:35:96:cc:e8:2e:12:ac:59:
         0b:b0:43:df:a8:e0:e0:4b:7d:0b:6b:46:b3:ef:2b:3c:93:73:
         f0:fc:8e:54:a7:b4:62:6f:a8:96:02:7d:80:82:43:18:64:2f:
         2b:b7:57:11:49:75:21:56:f1:d8:ec:bc:1d:f9:89:15:74:43:
         76:3f:ed:4f:a4:bd:86:2a:c7:88:bc:14:1b:b3:44:1c:5c:f6:
         7b:a7:7b:f9:b7:85:dd:0d:e8:db:c0:18:95:f0:5d:b7:ad:fc:
         32:80:da:b6:e4:7e:e6:6b:e2:79:2c:fb:b5:79:bc:e5:12:f4:
         f6:91:6a:6f:6b:74:24:24:18:a1:c8:76:c6:58:f5:88:df:6f:
         0a:a4:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----