Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File:                     nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier:          yeKV7c7RAn+jqCsKr5LLp/t2DQCxGWWt/BvgGe9f3AY=
Subject key identifier:   62:D4:CB:F8:3B:0B:11:B6:14:3B:37:1F:AE:77:90:2A:1D:1B:FE:2B
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer:       /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial:       0193568A61F4C603F5DA5817AE859267F39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 01:02:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:09 +0000
Files and hashes:         1: WEqDCxa2emjk_Cwu9ZqceluqyLQ.roa (hash: 3bKUEZNS5F1yx+tSbA8a/h984N512z7i+yCjKeKLDKI=)
                          2: kYh36f0YdUvvuTwyW87_JP_us5E.roa (hash: DVxYvOUx/QV+WNXoUqY5dmtKsgwNzPVYskV/EXWehoM=)
                          3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: dXNKUQsnaH4zvWZgaBnzDxjlBJMBrXrQi7bxjcN009Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:61:f4:c6:03:f5:da:58:17:ae:85:92:67:f3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
        Validity
            Not Before: Nov 23 01:02:09 2024 GMT
            Not After : Nov 24 01:02:09 2024 GMT
        Subject: CN=62d4cbf83b0b11b6143b371fae77902a1d1bfe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:76:3e:c2:0b:f0:9c:82:62:f6:f6:92:51:
                    9e:e4:00:16:cc:aa:42:05:2b:aa:de:a2:35:61:03:
                    f3:6b:aa:7b:6c:a7:15:5c:1b:ee:95:d5:cb:4e:b2:
                    e9:d0:11:a6:71:a6:21:fb:e3:cf:43:e6:92:99:0c:
                    81:29:b5:a1:b5:af:f7:6f:fb:64:e1:0a:26:f5:61:
                    5c:eb:8a:90:78:e1:8e:00:07:8d:37:08:e0:7e:f5:
                    0e:11:42:e6:1d:64:e3:52:4e:b7:48:22:0e:f0:4b:
                    98:cd:5a:b6:ff:2d:88:fa:e5:ce:b7:e5:fb:08:3b:
                    35:f2:8d:0c:9d:41:da:92:d2:20:d2:ad:0e:24:36:
                    be:86:9a:9b:65:fe:2e:0e:4a:b1:32:dc:a3:09:bb:
                    47:85:05:78:09:a6:ff:ef:8e:01:00:42:a2:16:06:
                    fd:00:dc:bb:22:f8:1a:d6:a3:fb:b4:e5:69:5b:16:
                    dd:69:fa:b1:69:b9:e0:e2:2f:d4:ba:a2:cb:94:5a:
                    a8:ae:88:27:ea:31:71:32:fe:b2:9d:64:c2:cf:f0:
                    fc:7d:e7:0a:81:87:7a:8e:0c:c6:d9:c4:e6:4c:fb:
                    4f:f5:32:ed:12:ee:6e:7f:00:ea:31:da:30:ca:fc:
                    42:92:24:83:ac:ce:d2:b9:84:9b:3f:f4:60:61:92:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:CB:F8:3B:0B:11:B6:14:3B:37:1F:AE:77:90:2A:1D:1B:FE:2B
            X509v3 Authority Key Identifier:
                keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:f5:af:cd:cc:5c:24:4e:36:97:33:72:02:da:fb:b2:d5:
         49:db:05:b2:d1:70:71:b7:bd:19:53:1c:56:27:97:a4:75:ec:
         bb:98:fd:f9:28:48:92:02:bc:4b:fa:28:2d:c1:df:0c:4d:df:
         b7:16:f7:73:19:88:b6:62:0c:a2:46:72:2f:5c:b3:d5:7d:9d:
         18:39:83:35:37:bd:c7:c7:63:5b:13:f1:66:1b:e0:ee:0f:ef:
         fe:0b:18:c5:d1:9f:92:e7:eb:93:a3:74:2e:10:72:aa:e3:fb:
         04:0a:10:98:3d:00:a9:67:d5:7f:d0:4b:f0:21:bb:73:cf:ba:
         bb:41:7d:b5:4c:50:b7:6a:6b:a8:cd:45:be:f9:ee:f9:bc:18:
         9a:3c:df:9f:49:12:40:ab:ff:00:a5:91:97:0e:ec:f8:b6:3f:
         72:72:94:06:f2:18:30:84:c5:5c:f6:fc:0e:65:8a:ab:7c:44:
         0f:2f:ce:b4:cd:fd:d5:68:70:5e:66:b2:a0:75:b1:df:e1:8a:
         09:7d:73:28:f7:82:d9:3a:57:11:c2:19:db:8b:93:0b:e4:9c:
         d6:2c:0e:39:a9:69:39:f8:8f:5b:38:39:84:22:7c:60:8d:64:
         d1:4b:e8:db:f3:22:17:d6:82:36:f2:f9:8f:20:32:ac:69:29:
         16:22:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----