Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File:                     2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier:          JTc2Ozk05ahEULmN/I5m/4Vo4RoI1Z9lhGSB6tb3DOA=
Subject key identifier:   8E:21:03:4B:5B:5B:C7:5B:01:9E:A1:5D:A7:3B:3B:20:CE:42:2C:2C
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer:       /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial:       01936A0F859F96E45A421C520FF9242EEB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number:          0310
Signing time:             Tue 26 Nov 2024 20:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:22 +0000
Files and hashes:         1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: TpQvyiKas9tKB/e03vbNeYaIpyYkG3JbRy4RcXzotcM=)
                          2: 5vuEoottKw4qA32FTKEfSEHxMmM.roa (hash: 0G9SSSCSlT1J/P/zx7d9l/Fn7ohqqTnOveQQwVyVX9U=)
                          3: GAfi6xC9W3UxLq6dLpjs2V4xoYQ.roa (hash: npwFo19gEU2UMJXI7eSSfmS0RUUGkrmr5NBwqpAElMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:85:9f:96:e4:5a:42:1c:52:0f:f9:24:2e:eb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
        Validity
            Not Before: Nov 26 20:00:22 2024 GMT
            Not After : Nov 27 20:00:22 2024 GMT
        Subject: CN=8e21034b5b5bc75b019ea15da73b3b20ce422c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:1d:33:62:40:0a:41:74:67:aa:30:a2:62:
                    5c:f9:70:89:7d:19:35:a0:92:f5:d2:04:01:88:77:
                    cc:a0:7c:18:97:65:bf:e4:2d:69:ad:39:48:76:8d:
                    97:4d:5d:03:6a:95:a9:dd:c6:7f:89:8f:96:cd:d5:
                    2f:1c:05:a4:56:a6:ae:be:ad:00:83:fa:d3:93:7e:
                    76:d6:59:1b:50:0e:fd:d3:92:65:47:dd:1b:cf:4b:
                    ee:98:9f:3e:60:f3:3e:9e:a7:0d:e7:8a:e5:a7:66:
                    fc:cd:3d:ee:37:e4:da:ef:85:d1:aa:1f:46:fd:92:
                    b0:48:08:6e:3b:72:27:7c:42:4f:63:79:3c:88:88:
                    c3:29:c5:dd:ad:6e:22:51:ab:cd:e7:11:0f:d6:68:
                    46:e5:3d:7b:6b:27:c3:f8:d2:4f:47:1a:9b:75:a2:
                    eb:59:d9:0d:3b:d1:ae:88:41:a1:ad:c6:aa:3d:34:
                    30:f7:0a:1e:fb:10:26:d0:d9:0e:ca:aa:41:57:26:
                    fe:e8:1e:9b:e6:c0:e6:ca:1b:16:d6:d9:f8:23:fd:
                    b3:9e:e9:43:6b:19:bf:32:fb:f4:12:90:5f:73:82:
                    59:ca:11:02:b3:1c:c2:bd:cb:ec:94:b3:a4:44:38:
                    97:27:f9:4e:48:eb:75:80:4a:da:3a:ea:dd:30:4d:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:03:4B:5B:5B:C7:5B:01:9E:A1:5D:A7:3B:3B:20:CE:42:2C:2C
            X509v3 Authority Key Identifier:
                keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:7a:17:b7:e9:b1:e6:cd:77:21:fe:a1:30:5c:a1:ec:13:
         a7:a1:87:b8:0b:7a:1d:1a:95:21:88:2a:7d:99:fa:0a:82:23:
         25:92:71:ed:4e:c1:2e:da:9d:db:ea:e1:e3:e4:24:5c:d3:d6:
         41:76:d5:5e:9c:de:2e:99:11:c9:69:f5:ea:ac:06:8c:e2:ca:
         5d:3c:e1:8c:e4:3d:e1:13:45:ce:26:47:55:20:84:fd:92:59:
         f0:36:f0:74:e5:55:0f:eb:f1:a4:c1:72:79:bd:6b:11:2e:62:
         93:5a:b5:bd:df:1c:df:2a:f2:6c:3b:0e:5a:ed:a0:64:ab:22:
         d9:d7:19:cd:ee:69:25:b4:53:cd:80:76:15:10:03:b3:8a:4e:
         a4:a4:d1:26:e1:a4:90:36:9e:ae:93:b9:f1:c4:01:82:e9:6b:
         64:6c:fa:c7:d1:3f:32:8a:ea:b3:a0:82:75:79:2b:c9:37:e9:
         74:28:bb:77:a5:cc:71:6b:05:f6:26:44:92:4c:7f:ed:fa:62:
         bc:0f:5d:0e:20:87:7e:f2:84:d6:a8:b8:0d:76:f6:b5:2c:ce:
         4e:b1:d0:31:4f:8d:fb:59:b4:60:3a:74:68:22:07:47:74:c5:
         31:81:18:02:57:4a:51:91:95:9c:a7:1c:53:87:77:15:e2:41:
         0d:4a:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----