Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File:                     vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier:          T7x6SovbFh0lX4oXuDQb0/52FL5usZtZOK+mHGsjNRk=
Subject key identifier:   9B:FA:A8:AA:C5:B7:44:12:B2:75:0A:D6:3B:8A:D6:7B:8F:E6:C4:B1
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       019369D91F3DD5353EC3C3EBD7BCFB803653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:57 +0000
Files and hashes:         1: 25HCzTOvQ-JFhWSIZngD3pCN32M.roa (hash: 10V0fw89+BmmtP5LqpNt1evcWzjIUGFqVXmCVDh8asQ=)
                          2: YJxBPcbL2KropNEniMdBnt4wcFQ.roa (hash: 0SIuNT/tu1pEsxQtg67Spwm/8iC/D7S/XJe3DErvo38=)
                          3: n7CyrdPwSlNozvx38omnSjloa18.roa (hash: kYwto9ngiEnCiB587q7vIUk88/9yB6a38eIVD0aRwHE=)
                          4: qgWojbiRuqBFoOwI2cMj_kzSmWQ.roa (hash: 8Ltt3vtuJsjMHe4X3U98OAGjOZHkb8mvBtqNIc/vOg0=)
                          5: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: 8QPr+bOdhPej0ovianxaK8ZJgNKOZqCjfY7QT79Rdys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:1f:3d:d5:35:3e:c3:c3:eb:d7:bc:fb:80:36:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: Nov 26 19:00:57 2024 GMT
            Not After : Nov 27 19:00:57 2024 GMT
        Subject: CN=9bfaa8aac5b74412b2750ad63b8ad67b8fe6c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:eb:49:64:13:22:b2:3e:1e:4c:ad:58:e2:85:
                    7a:ea:14:a4:bf:87:21:eb:1a:29:e5:a2:2a:92:78:
                    f4:72:83:d4:86:af:9e:0d:3c:1d:b9:bf:ba:9d:9c:
                    a5:d6:9c:d3:92:80:0c:53:07:d6:dd:c2:f7:ad:60:
                    f7:1e:96:c5:27:fb:1f:b7:21:a6:07:91:d8:a1:cb:
                    8e:bc:32:04:16:b8:0e:2f:cb:78:79:40:2e:7e:a9:
                    1e:f0:be:df:d4:d1:b6:4f:a2:d6:b7:d6:f0:2c:8a:
                    87:2d:f1:3d:88:35:9f:f8:87:96:24:7d:48:5f:9a:
                    c1:43:c2:a3:25:35:70:ba:b9:de:e8:b3:01:d9:1c:
                    81:82:28:58:30:9b:88:89:75:73:05:dd:e0:da:92:
                    97:b8:27:27:79:99:02:e5:1c:8e:ec:92:7a:42:9e:
                    ee:c9:b3:65:06:ba:b5:c2:8c:89:f8:51:21:15:22:
                    42:7a:5d:84:81:7b:e4:1d:f2:fa:2e:cf:71:7c:17:
                    7d:12:30:cb:67:54:c2:dc:ae:de:ec:bb:ff:f3:d8:
                    cb:b0:c2:f3:34:f2:d9:b5:0d:aa:8a:d9:b8:4d:0b:
                    d5:78:b9:5a:9f:92:9e:a6:7d:2a:4c:a4:7b:d6:8c:
                    59:6e:5a:d9:f7:c2:a4:da:8c:b7:be:c5:a7:6a:73:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:A8:AA:C5:B7:44:12:B2:75:0A:D6:3B:8A:D6:7B:8F:E6:C4:B1
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:1d:48:22:5f:ba:87:83:09:d9:0e:85:be:27:15:9f:05:
         c1:92:b7:13:2d:76:f3:5f:58:c9:ce:6c:e1:60:b3:6e:b3:04:
         f6:b1:e0:3e:e9:0d:4c:a9:3f:35:a3:29:86:c0:dc:74:dc:6c:
         34:ff:14:bf:ef:ee:09:15:f8:9d:4d:ce:91:3a:e8:e5:2d:2b:
         b9:4d:3a:b9:dc:1c:a1:f2:5b:aa:ed:42:54:2b:e3:43:be:06:
         05:e9:a3:34:88:15:22:1f:24:5b:da:4c:0f:80:1b:55:da:55:
         ba:19:83:eb:ec:d6:c8:aa:04:bc:ad:54:ce:79:b3:7f:a3:e4:
         a4:6d:11:83:ab:5e:eb:e7:06:eb:c1:d5:e5:7a:9b:95:fd:18:
         48:d4:f6:6d:3e:ba:7f:02:9f:c9:d6:b3:49:ac:33:04:cc:c2:
         b6:29:a2:c5:0a:1d:e8:99:d4:ac:be:41:c3:a9:bd:ef:9d:3a:
         9e:d0:9a:2c:00:fa:42:4c:1b:43:ed:0c:6e:d2:fe:8a:38:57:
         00:fe:f6:b5:c3:bf:c7:a5:78:55:ce:ea:b8:f0:99:03:f2:04:
         ed:44:69:0b:38:51:59:a8:ac:56:34:8a:f1:3d:2e:43:30:fb:
         02:ed:ef:83:59:e2:8a:e6:d3:bb:7b:df:26:ef:13:c3:c9:86:
         91:d8:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----