Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File:                     D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier:          i5R5ATIo3msX4c26Ir5eDnAKGyUB6YjMF0xdfdRdcVM=
Subject key identifier:   AE:B1:96:AD:E2:1E:7D:32:AB:10:4C:15:B2:3C:D8:C7:1B:40:DB:C5
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer:       /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial:       019356895640962F94ADD52B7D288CFA2CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number:          114E
Signing time:             Sat 23 Nov 2024 01:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:01 +0000
Files and hashes:         1: ChFzTQyDe2rUWR_lesDMTvBCVo8.roa (hash: /iLoKMTx/x26nDfvAxNEhaHYzWIGiByKXdPIpUTwebg=)
                          2: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: +qzYypCLjIPNP1zif5Gx2SDz+zNYZWSf2Yn4PKfgXvE=)
                          3: l9d0U-tpIe0mGZQbfqNZ-M4aoVs.roa (hash: 2eUTk6VBBs9hR1T7rEa3G3hXQ1mh4+U5kzPyLu9h5yI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:56:40:96:2f:94:ad:d5:2b:7d:28:8c:fa:2c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
        Validity
            Not Before: Nov 23 01:01:01 2024 GMT
            Not After : Nov 24 01:01:01 2024 GMT
        Subject: CN=aeb196ade21e7d32ab104c15b23cd8c71b40dbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:3e:2b:d0:80:7b:44:b8:06:34:0b:26:f0:
                    18:3f:a6:11:22:52:17:de:c0:ec:7d:cc:e0:8a:1f:
                    26:6c:9c:13:a4:c1:8e:2e:08:a4:cd:29:ef:fc:fe:
                    83:2f:46:64:51:44:b5:44:7f:65:76:bf:d1:64:a6:
                    71:7e:27:3f:b7:8a:58:da:f7:2c:ae:df:7c:08:09:
                    75:9b:39:6d:d8:ce:1d:7e:33:f2:21:a1:63:a6:f5:
                    c8:7b:c3:86:37:ab:04:ae:7b:e0:8a:15:d0:1f:c1:
                    f4:06:61:28:e4:a8:f5:59:89:e1:ea:7c:88:5e:23:
                    08:7b:d3:da:5c:75:fc:cf:2e:71:7b:fb:5c:9a:a7:
                    2f:9a:9d:43:fd:94:00:8d:55:87:b1:a6:4c:e2:28:
                    76:76:85:75:3d:d8:6a:d6:fd:d0:3f:8d:c3:a8:8b:
                    f0:fe:01:4c:b3:bd:de:3d:36:c4:97:e1:5e:0e:25:
                    26:87:38:0a:56:6f:5f:f6:08:57:35:8e:b5:86:b7:
                    76:e3:69:1c:cd:71:c3:c7:e3:78:58:78:f4:b1:3a:
                    ae:4b:32:80:75:22:b6:fd:2a:24:19:8a:b7:d3:6d:
                    ac:f5:97:8e:2b:7f:52:fd:86:dd:73:6f:e4:05:6f:
                    f7:ad:52:84:7c:8d:b3:29:ee:7b:76:b1:0f:69:df:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:96:AD:E2:1E:7D:32:AB:10:4C:15:B2:3C:D8:C7:1B:40:DB:C5
            X509v3 Authority Key Identifier:
                keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:0b:9f:bd:36:2f:05:73:da:04:bc:d5:35:dd:38:56:10:
         b4:8c:26:03:0c:2b:a9:dd:b2:a9:dc:29:fe:05:fc:09:b9:97:
         ff:60:6c:fa:31:7e:b7:5a:ac:7c:f7:2d:bd:08:fe:b0:4d:2b:
         b0:1e:bb:65:f4:61:9f:c7:c9:b6:9c:5d:31:7d:cd:13:d3:44:
         72:5c:ec:1a:4e:b7:42:d1:3c:a1:38:52:aa:1a:ad:5e:a2:7f:
         89:52:54:24:3d:e6:c4:2a:c0:42:6a:a4:29:47:5b:b1:89:6c:
         0e:6c:e6:f3:09:d7:9c:fe:fb:3a:e8:a0:a1:14:67:be:0f:f5:
         c4:c6:f8:b7:f6:42:46:41:5a:ce:62:9c:ee:42:7e:59:82:a1:
         fb:ad:82:4d:7b:b0:84:7f:3f:7c:34:4f:e8:72:09:af:e4:8c:
         25:3e:81:4f:55:e6:74:7c:8b:6b:59:62:68:f4:59:78:d2:8b:
         35:14:a7:3e:88:07:cb:f4:3e:f4:b5:21:ff:fb:e2:7c:c8:0a:
         99:5f:73:14:b1:1e:32:f8:ac:31:27:c1:69:76:85:fa:a1:be:
         01:d3:21:17:9c:3f:fb:77:f1:2e:21:f0:61:56:a7:84:7c:d1:
         d1:33:d5:ef:c3:b1:63:ad:b6:e0:ec:2c:77:fd:42:18:a8:56:
         7f:e1:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----