Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          uqRNTL+UCvTMpoS5oNBYYmKEp0ltLne/mKPFwzwvn+o=
Subject key identifier:   BD:8C:CE:D6:AE:CE:BA:85:54:38:25:19:7C:87:29:69:B3:D9:E2:89
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       0193568965248FAB658ECE9A14A528707615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0C98
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: JETztV2gCQIxAkX3Ax31JBUkm/u5tKNaM8SIeHxqpig=)
                          2: wQ8lKiM-P3Cl5D066iucEUjsiQk.roa (hash: swJBKwGrDpp+RPL+AhUpmfuC+tf/QNWqv2Lroz0GeOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:65:24:8f:ab:65:8e:ce:9a:14:a5:28:70:76:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=bd8cced6aeceba85543825197c872969b3d9e289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:9e:be:ac:24:a2:e1:0a:52:17:b6:65:79:
                    9e:82:95:a5:e4:8c:3a:55:07:a6:82:6a:cb:31:01:
                    bd:9a:2e:d6:aa:af:f7:8f:f2:94:48:6d:8e:ee:96:
                    38:05:4f:24:55:82:ba:d4:f6:08:89:0a:a4:f7:c5:
                    34:c5:c0:83:32:b1:2a:3c:68:8d:ba:70:a1:c6:5a:
                    d7:7b:35:cf:63:88:21:59:81:6a:5d:ae:90:c9:4c:
                    75:a0:fc:69:60:b2:e6:fe:04:17:52:be:f5:34:e8:
                    50:a1:c5:bd:cc:de:b8:98:05:7e:71:0e:85:91:49:
                    9b:23:06:7a:f6:79:a1:1c:d7:eb:b2:26:39:9b:c9:
                    1d:57:b1:51:16:18:d0:a2:86:6b:17:58:31:3a:d6:
                    f0:e2:e1:61:8a:c7:ee:d2:65:9b:b4:32:9e:20:5a:
                    1a:e2:8c:f8:40:0b:e2:c1:b6:c9:9a:ea:93:09:15:
                    fc:d7:27:8a:db:b7:45:be:97:98:d7:14:88:7b:13:
                    c0:0b:94:8a:88:cc:16:cf:45:12:0f:a2:11:38:b8:
                    af:91:58:67:81:80:2a:15:d2:42:27:2b:8f:a6:bd:
                    bc:02:36:50:33:a9:07:37:e4:c5:11:2a:b3:63:41:
                    1e:35:45:ea:d5:25:e0:b7:36:97:aa:33:57:05:a3:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8C:CE:D6:AE:CE:BA:85:54:38:25:19:7C:87:29:69:B3:D9:E2:89
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:38:31:cd:b5:d2:34:87:22:95:a3:29:e3:8d:a3:2c:6a:
         dc:da:15:17:59:3e:eb:ab:20:06:3a:ca:46:ca:79:1c:a3:82:
         1c:a9:80:9b:f2:46:3c:a2:bc:af:94:82:b0:93:f1:5b:b2:7c:
         a7:25:c8:3a:bc:32:cd:32:31:4f:7f:19:a4:71:f8:9b:9b:25:
         bd:df:21:9f:18:d0:d4:a0:9f:31:38:7d:5a:df:d0:ea:a9:1a:
         db:8c:bd:7c:71:bd:36:94:42:e1:f6:ca:f9:29:bf:8d:b7:ce:
         90:d0:70:40:3a:a2:ae:48:ba:ca:17:b3:4d:1e:0e:e6:57:18:
         5d:ed:e3:3c:0d:79:e4:16:59:16:a0:57:a4:70:d4:c6:b8:c2:
         08:4a:0e:b3:f4:d4:c6:ca:99:d1:a1:6a:f7:47:42:13:03:9b:
         1e:e4:48:68:1a:30:e7:40:61:9f:7a:73:37:b8:bf:8b:87:4a:
         62:0f:19:49:c0:63:f9:99:6b:c5:4d:48:8a:f8:49:13:60:1c:
         8d:c3:1a:3b:9b:fc:ba:70:94:5f:06:f5:98:4d:92:09:13:77:
         8f:c6:d7:6b:a0:ce:05:29:cc:b4:f2:43:cb:64:cb:cf:d0:81:
         66:39:a5:f3:08:75:39:b8:d1:79:de:c0:85:dd:72:85:d7:f2:
         7c:3e:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----