Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          0ZYHwG9cNo8yA2cyzK32CHrTcui4LWEkP/eiS/OdocU=
Subject key identifier:   54:35:E1:00:0B:54:6F:FD:B3:E1:9B:B7:1A:7F:C4:68:1E:E3:57:76
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       0193579BAD2F74B774190C0E587C2899A68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0AA7
Signing time:             Sat 23 Nov 2024 06:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:40 +0000
Files and hashes:         1: HAW0RAIP2Pn0we7vxTE0vnZYitc.roa (hash: ow/IQkjvTCoVlthzuAoHFSUJLQmjKMEzjfqH4Ru28tI=)
                          2: KoYY3ODyM1Q4r_Cj-jn3gpx73g8.roa (hash: XoIHk9saCv77K3bZ8FbGiUDxedRqQWKImsWhb7pSdqc=)
                          3: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: UywPpVCL4axytUrI2Td+RBC9aRqVtxs4tKd33fuDOWg=)
                          4: z_dT6nkhGjINS_F5mg5a7v5MXEM.roa (hash: iV1nv/0On7ohCIZpXDSi1vHV4Tzf0uXM1nsIQGMwyLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ad:2f:74:b7:74:19:0c:0e:58:7c:28:99:a6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Nov 23 06:00:40 2024 GMT
            Not After : Nov 24 06:00:40 2024 GMT
        Subject: CN=5435e1000b546ffdb3e19bb71a7fc4681ee35776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:51:d6:5d:01:1c:00:3d:12:da:c7:b3:6b:
                    15:48:3e:65:3c:41:c4:2a:d0:08:1c:69:37:53:1a:
                    64:cb:ee:e5:ee:ac:1f:02:e7:b3:e2:34:6f:2a:c7:
                    93:ab:38:b3:67:b0:f4:06:cf:26:ae:c4:c2:ee:74:
                    6f:ff:2d:55:a6:cb:60:8f:82:52:07:3f:09:90:fd:
                    da:2a:31:ed:9a:b6:39:da:a6:a8:99:c0:3a:45:08:
                    ae:9f:b0:f9:0e:3d:8d:9b:15:a5:70:f2:67:6f:fd:
                    58:07:41:3c:14:6e:73:81:2f:13:f8:72:0d:97:13:
                    d9:23:a2:75:87:e6:20:68:b7:48:30:ff:4b:7f:3a:
                    0f:33:fb:3b:aa:23:49:c7:cf:6d:ad:e1:a2:62:76:
                    7f:51:45:de:b8:89:06:85:4f:32:42:b0:78:52:48:
                    96:58:33:ad:33:5c:d7:3c:27:7f:55:03:25:a0:51:
                    a8:fb:1a:a8:24:37:c3:d5:f4:92:66:e4:bc:25:0f:
                    6a:90:ff:21:fd:97:47:1b:dd:36:c5:bf:fd:d2:76:
                    58:62:e5:e2:0a:df:cb:b4:e3:21:b9:b8:94:eb:e8:
                    03:3e:1b:b3:3f:34:d9:1e:37:b5:66:cd:ca:06:01:
                    93:2b:2f:dc:dd:6b:80:1e:8a:83:6d:77:f5:ca:a8:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:E1:00:0B:54:6F:FD:B3:E1:9B:B7:1A:7F:C4:68:1E:E3:57:76
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:01:d9:a7:f2:21:fd:87:93:e3:10:22:5c:0f:09:0b:43:2f:
         f5:02:1e:a2:80:32:91:94:a4:8d:bd:52:f0:7a:04:66:fd:a9:
         5f:5d:9c:ec:19:b8:ad:07:ef:7a:0a:07:3b:04:48:fd:70:61:
         8d:eb:f3:26:1d:00:c6:21:de:11:df:63:c1:18:96:19:b3:4e:
         fc:af:9a:3c:1a:75:a2:41:6e:14:91:2a:3b:54:60:64:97:1b:
         fa:f9:4f:22:33:63:be:ab:47:10:56:fd:56:00:da:8d:7f:dd:
         c4:18:cd:6c:dc:a5:86:fe:13:a4:07:95:e8:26:e5:14:d2:73:
         d5:8d:a8:19:9d:08:fd:fd:50:30:fb:82:44:09:37:8a:92:66:
         91:af:f2:32:d1:1c:1c:d3:67:4f:94:67:cb:60:d9:cc:9f:65:
         ad:80:0e:d3:55:74:95:5e:c0:12:d7:e9:57:dc:24:7b:1d:7f:
         68:ca:da:5d:b9:46:82:67:f2:ad:65:72:c6:a5:d3:03:5f:d7:
         69:bd:66:bb:44:d1:b2:b7:78:b5:c8:ed:27:ff:bd:bf:3e:b5:
         b2:85:9d:4f:04:da:7f:fe:6e:b0:96:e2:6e:0e:c8:66:ba:08:
         df:ed:26:e0:3d:dd:c8:60:79:13:d8:5b:da:7e:e3:14:88:88:
         b4:3c:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----