Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File:                     Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier:          bYOvf59NJSMdsAFCBlm2pPzx8CrAHrVutDgJob42/aw=
Subject key identifier:   26:B5:1F:D5:6E:F4:D9:11:3B:0C:EE:C4:12:D8:F4:72:11:44:E2:85
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer:       /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial:       019355E434BAB54AD7E012AACF4C270F7647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number:          137F
Signing time:             Fri 22 Nov 2024 22:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:39 +0000
Files and hashes:         1: Jq6qGMrbyHE2OxCF31WAy5vB27s.roa (hash: 95q4knRGTcp0oZ602dC/onm1KqXoKc3IaeFwwbdllQ0=)
                          2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: T582RIAZAiWloKo469qqlz2Nffvd24VxDneqkqQg2Zc=)
                          3: prdhkuLNMJj1XAbV4hJ7mUCi7Qw.roa (hash: oahacznGoyma8DTbD+BBBz1F9ri9P/GutwaYvNZhnjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:34:ba:b5:4a:d7:e0:12:aa:cf:4c:27:0f:76:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
        Validity
            Not Before: Nov 22 22:00:39 2024 GMT
            Not After : Nov 23 22:00:39 2024 GMT
        Subject: CN=26b51fd56ef4d9113b0ceec412d8f4721144e285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:10:2b:37:67:1c:37:28:41:2a:55:ce:03:
                    81:ee:8f:7c:85:7b:62:ef:c9:ff:c3:3a:8e:9c:ed:
                    e1:a2:0d:ef:57:9f:8c:f2:6f:d6:2e:3e:96:35:bc:
                    8c:ff:da:76:ce:6b:90:42:58:20:ad:fc:3a:0c:c7:
                    f3:7e:f0:95:bf:7e:03:28:9f:b9:47:2d:7d:50:7c:
                    89:7e:d0:8a:cc:e1:65:0d:06:e4:5d:62:13:de:95:
                    bc:35:e4:5d:89:b8:cb:de:a6:f2:99:3e:1d:b0:1d:
                    9a:c2:ff:05:01:90:df:ec:b3:1f:64:0a:f2:ea:d7:
                    18:17:6c:34:e1:6b:7d:20:d8:45:17:51:f8:c7:b7:
                    b3:f9:93:62:39:84:7e:9b:b5:f9:c7:e7:c7:af:e2:
                    3b:7e:da:03:74:ca:52:6b:81:e7:0e:68:52:a5:1f:
                    ee:76:4a:67:65:2c:b9:e3:5e:86:97:c1:fb:5f:36:
                    10:1b:e3:66:10:03:2a:53:fb:43:7d:7e:e6:2e:31:
                    7e:ce:06:95:7b:09:6a:fe:c5:55:1f:b9:fe:05:86:
                    2c:8a:f9:7a:b7:0f:9c:66:44:32:99:1e:97:e4:58:
                    57:0c:c3:57:68:31:ff:9d:76:0b:11:b0:e3:fd:26:
                    17:bb:14:de:d8:79:35:0b:3e:1b:f7:9b:e9:8c:14:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:1F:D5:6E:F4:D9:11:3B:0C:EE:C4:12:D8:F4:72:11:44:E2:85
            X509v3 Authority Key Identifier:
                keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:74:da:d7:da:7a:10:f4:c7:72:ea:0d:60:c5:93:e3:e9:59:
         54:f7:dc:11:9b:63:a8:c6:f1:51:e0:43:e8:70:00:5d:76:56:
         da:e3:7a:af:65:33:38:bb:d2:38:19:29:8b:af:90:04:2d:75:
         48:a7:5f:89:7f:1c:f3:58:58:9e:cc:19:9a:32:c3:f9:12:3a:
         69:48:3b:e8:df:ff:d6:f0:91:67:42:ca:bc:56:69:1d:5a:a2:
         99:6b:9f:99:25:74:6c:60:e5:97:7f:55:32:d9:4a:ba:21:e5:
         2d:e9:10:21:65:f4:cc:a9:c7:c2:a2:85:9a:2c:5c:07:31:a5:
         90:15:57:78:0a:a4:c2:97:11:dc:6a:db:32:b6:14:1e:aa:7d:
         01:54:6c:ef:1c:ec:8e:95:4d:3b:81:06:7b:97:38:2c:65:0f:
         64:ea:04:10:c8:32:7f:b2:a2:fb:dd:1b:ff:ef:54:9e:db:7e:
         09:fd:10:86:41:d9:7f:e8:9c:1e:f8:6a:fe:a6:05:36:eb:da:
         10:34:ba:e8:35:bb:65:39:63:7e:d6:2a:79:fc:ff:09:f3:07:
         b5:ea:40:8e:60:48:ba:28:ca:26:90:e4:38:0f:72:2f:5f:67:
         5f:85:3a:a2:ec:bd:12:35:af:11:d5:98:ed:e6:d8:9f:31:5b:
         c8:a0:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----