Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          OUdOEVRCLWPa89YVIv9HZ9NuUOeWCF7aJM2jPjWyZvQ=
Subject key identifier:   7E:09:84:0B:33:EC:1E:1D:60:A5:CE:E0:9F:A0:C3:48:3B:02:F9:B1
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       0193549A4296DA450AA48C082D9BEEB04862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:15 +0000
Files and hashes:         1: 7G7P5tUIQlh_pUaER1GOX1p0vYo.roa (hash: v2YLuMts4v/hp2oKBhGF444o8f6PSGazceCz7PJcdkw=)
                          2: OQRcfzOP1c5BKCV75NGf-zc0JG0.roa (hash: jqSWQr5hS+p16E6WMEFV1CsRjiW4PUHXys4rBr326Vw=)
                          3: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: mDbqanY8iQF3lTaT9KsEeRnF1q4OLMb5W7UN/yo8WdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:42:96:da:45:0a:a4:8c:08:2d:9b:ee:b0:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Nov 22 16:00:15 2024 GMT
            Not After : Nov 23 16:00:15 2024 GMT
        Subject: CN=7e09840b33ec1e1d60a5cee09fa0c3483b02f9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:49:72:56:df:3d:f7:73:07:41:16:91:ad:
                    75:03:b2:21:19:fa:bb:5e:1c:55:83:c8:e4:b6:3e:
                    96:9c:50:f3:d9:c5:7f:57:2c:fc:49:52:81:b0:bd:
                    f5:55:de:19:f6:cf:f8:b7:86:28:78:b3:22:38:bf:
                    91:0a:de:17:cc:a9:bd:4a:21:25:f1:d6:d0:2c:a3:
                    ff:08:37:ad:35:04:d2:6b:20:9d:0d:80:ea:4e:28:
                    51:9a:60:04:21:19:3e:80:28:5a:4e:68:c4:01:36:
                    ee:93:cb:60:b6:b4:09:7c:84:c3:a9:0e:37:e2:5b:
                    22:5f:f6:ec:ec:cc:3e:c4:ea:92:e3:0f:44:49:91:
                    15:0a:12:84:bc:0b:90:38:41:29:be:fd:60:8c:f3:
                    0a:dc:2c:ec:e6:18:ca:68:f5:0d:24:2c:92:90:13:
                    63:78:81:f9:a4:bf:44:d0:28:c1:19:dd:bb:92:b8:
                    61:fa:60:38:2b:d0:85:72:e0:23:24:f0:16:56:d0:
                    ea:c3:34:04:f7:b7:44:3d:83:fa:b4:ee:dc:e2:d7:
                    1e:34:28:5b:56:c5:51:c9:2a:d0:c6:32:b6:f2:6f:
                    04:d9:c8:a5:b0:47:6a:19:7a:ae:85:dc:5e:c5:3c:
                    98:ee:4a:9d:05:e5:be:b9:d4:b2:86:33:df:0d:76:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:84:0B:33:EC:1E:1D:60:A5:CE:E0:9F:A0:C3:48:3B:02:F9:B1
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:9f:30:f3:28:63:66:bc:f9:d8:c3:9c:ac:e6:aa:25:b6:
         f9:7c:d1:fd:44:2a:5a:74:70:31:4b:04:d1:88:e2:c9:f5:a4:
         ef:0f:43:14:48:a4:d0:5f:d7:34:f7:b2:76:4e:24:5b:43:42:
         bb:af:45:c9:87:47:81:d0:0e:e3:5d:1d:a5:9e:f8:e8:3c:2f:
         be:77:bd:8c:bb:63:7d:8b:2d:e3:86:11:54:64:07:d8:d8:b1:
         16:51:5e:89:7d:3f:bf:d1:a1:a5:b4:58:c3:41:db:f0:aa:7c:
         cc:5b:e5:4c:cc:48:2d:8d:6a:bb:63:42:41:3b:25:cd:26:a9:
         46:6d:c1:f2:2b:67:10:40:6f:d5:a0:2e:27:8e:15:35:44:a6:
         be:1e:fe:c8:eb:50:99:9e:67:47:96:a0:01:d1:74:e9:84:d6:
         66:d1:5b:00:7b:d5:0a:fa:1c:31:03:82:31:37:00:2b:c1:ee:
         0e:a6:73:4e:97:50:00:f6:31:dd:ac:a8:91:75:76:eb:5d:89:
         03:81:4d:88:50:e0:b4:e6:38:2a:3b:f5:77:68:04:a4:29:f5:
         2f:11:88:47:c9:02:28:0f:e7:51:d5:05:28:e8:7f:09:32:1d:
         0b:a1:e3:17:2d:5a:2b:43:c8:d5:a4:18:68:ed:13:b5:82:9c:
         a6:bb:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----