Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          CrI0H2pIeaKxFS3vW+eKz5YBotri2eTK80GN/9CnsKI=
Subject key identifier:   01:7C:1C:F2:1E:1A:8E:B2:77:3F:04:24:6F:AD:74:D3:C3:A4:5E:6F
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       019369DAD672F33680D723E2E1EB8CAB5627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          11B0
Signing time:             Tue 26 Nov 2024 19:02:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:49 +0000
Files and hashes:         1: 57z-8vZ-fthIAOx4DRVBNuyq128.roa (hash: PKlJPV1svuiuaRS1qLfF6wa5BxF/ew+e/cttbe6jEt8=)
                          2: DnAotxnVt7a2OeX9UYRpQc7YVDw.roa (hash: pal98otex1l0w8vJT9yPkWuua1LoIkDHbyBSIaIOmsM=)
                          3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: EO/Ocgp1Vm0ZcIFla70JiuHyNuaiBeviYUUN9WTeLBs=)
                          4: wIMaul9hBG7ig-nqFFlk3jjHLGw.roa (hash: B2MZbuA78Bm24pJMwb+ebY71joVAztTJJsUNqM/HyGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:d6:72:f3:36:80:d7:23:e2:e1:eb:8c:ab:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Nov 26 19:02:49 2024 GMT
            Not After : Nov 27 19:02:49 2024 GMT
        Subject: CN=017c1cf21e1a8eb2773f04246fad74d3c3a45e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:64:a3:f7:cc:10:1d:e6:dd:09:89:d3:da:
                    f4:6d:5d:6e:88:93:60:bd:d1:17:f0:ab:a9:27:d2:
                    12:d5:b1:34:1e:88:4b:d6:2b:c0:72:86:ab:e3:7a:
                    01:f9:6d:94:b7:11:0c:f8:15:0c:01:17:63:f0:6c:
                    b0:b2:da:c9:23:76:8d:4b:28:e5:a7:fa:fb:51:a3:
                    7d:3f:a4:54:d0:3c:ad:93:d7:0d:24:af:13:9a:bc:
                    34:50:3f:e8:d5:d7:60:1a:bb:b9:54:e2:0c:85:d1:
                    1d:62:1c:25:34:fc:c9:38:9b:98:eb:15:18:57:de:
                    9b:fb:04:be:29:d3:2b:64:aa:27:d4:1a:27:69:28:
                    30:33:2e:8c:71:f2:13:be:4e:bc:3a:11:9b:12:83:
                    e7:0a:51:22:0b:5d:b9:c0:5b:18:6c:96:79:c4:96:
                    37:fc:13:83:15:d2:a3:45:be:f0:e5:44:e5:b8:14:
                    8b:02:0a:4e:d8:54:a8:fe:c2:49:e3:40:ef:05:ea:
                    8c:79:34:35:47:d5:52:70:f2:84:0a:59:2a:44:91:
                    43:a7:8a:21:39:21:f0:bc:d4:80:08:b0:f8:fc:67:
                    fd:9e:b8:47:be:64:d6:a0:b8:2a:11:19:b2:8e:98:
                    2c:5f:dc:29:4e:d8:11:cd:84:62:53:b4:40:87:6f:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7C:1C:F2:1E:1A:8E:B2:77:3F:04:24:6F:AD:74:D3:C3:A4:5E:6F
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:c5:5d:06:47:cb:d5:67:4c:a9:4f:ad:c7:0d:f3:82:33:
         f9:7d:2c:8c:94:6f:54:37:02:39:f4:01:50:00:bb:48:07:60:
         ab:b5:92:74:51:a7:cb:5e:86:c5:c6:0a:19:64:a8:19:3f:19:
         c2:87:61:a4:6a:f4:e8:c4:7b:08:0f:08:c6:39:d9:6b:1f:7a:
         43:ef:00:ba:51:10:05:ff:94:40:d5:64:7b:50:a3:1f:fb:19:
         b0:7f:b9:e7:ff:71:17:15:04:47:66:cf:f7:cb:d0:55:3c:0b:
         73:7a:6c:ab:91:19:4e:88:ac:f9:ce:cd:b6:a8:0c:c7:64:8a:
         06:16:68:19:71:7d:fe:9a:0e:27:ac:bd:17:53:9e:3e:83:45:
         07:67:88:76:1f:0a:74:8d:df:67:95:dd:04:33:99:05:15:09:
         99:96:d0:57:e1:81:92:78:09:d9:6a:96:4b:5d:15:d0:19:85:
         b4:44:9f:43:ca:df:02:07:6a:c6:fa:c6:ef:84:63:ae:2d:89:
         1a:8c:f7:09:a7:dd:e8:7b:14:c2:6c:98:51:cd:80:fd:b0:f2:
         b1:0b:26:63:29:ec:17:37:1c:ba:68:07:99:4b:53:21:50:e3:
         e0:22:da:f9:37:4e:33:a8:eb:b3:d9:0e:ab:af:81:96:4b:b5:
         19:f9:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----