Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          fvnQcmVt8k93z84tZhdypuU2LfHKdiNajeCbtEN1HqI=
Subject key identifier:   9A:8C:5A:86:7F:12:1B:BE:99:AF:FA:8A:7A:C9:6B:95:08:EE:F6:10
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       019355760A75CFADEA6573C90570E772059D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          0F4F
Signing time:             Fri 22 Nov 2024 20:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:19 +0000
Files and hashes:         1: R0WK7uZHPkFmVp6gv1uiB1l3Au8.roa (hash: QMIy+guu32WGZidblAOPyQ3ahRYumTXjeZKgDvjBCgQ=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: y1vUFUc85m3tmUWi5Kv3tIYWP9Vmiiq3dlGJ5t1+P9I=)
                          3: t3OYa95kY7YUgDM_KR3k6b2oYiI.roa (hash: wKM1/5/Cxf3QyNhTgh3c5GYbNmoTa8X2IAJ/Dc5sM7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:0a:75:cf:ad:ea:65:73:c9:05:70:e7:72:05:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Nov 22 20:00:19 2024 GMT
            Not After : Nov 23 20:00:19 2024 GMT
        Subject: CN=9a8c5a867f121bbe99affa8a7ac96b9508eef610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:66:bb:18:92:bb:c3:16:65:54:84:45:97:
                    9f:8e:14:c4:39:a0:08:95:ae:42:c4:52:7b:a3:d3:
                    1b:72:e2:34:a5:57:7c:99:10:c4:e0:0a:32:6b:ca:
                    f8:4f:2e:41:cf:38:90:44:c7:62:c3:07:39:e9:7c:
                    99:df:c7:6e:ed:5b:ef:4c:dd:ed:c0:84:c3:5a:d3:
                    80:43:e7:36:04:14:67:ed:a8:fa:d4:9d:2c:52:2b:
                    7b:86:95:10:86:1c:ba:5b:61:c7:92:a1:d9:aa:2a:
                    1f:07:92:11:f6:9f:62:84:14:35:01:d4:e3:10:08:
                    92:50:ae:dd:e2:0a:26:c6:0d:38:f2:3f:b5:f9:2e:
                    35:8d:5f:76:67:4f:fa:ca:f1:c2:ee:70:71:88:d9:
                    51:b1:0e:59:2f:84:4c:13:e4:dc:23:c9:ee:a4:f4:
                    cf:cb:07:46:1e:22:b6:d6:82:10:0f:09:3a:00:e6:
                    a3:1c:18:3b:e2:a2:94:0f:19:62:c8:07:15:19:31:
                    d4:af:57:f3:03:c6:94:7b:c9:1f:55:36:00:43:da:
                    4c:06:9d:d5:2c:4d:fb:89:92:f7:05:e7:56:80:3f:
                    e9:a5:58:69:46:dd:f1:f2:13:82:42:63:c0:fc:76:
                    86:0a:45:68:38:95:cf:2e:52:4d:8d:50:35:bb:5f:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:5A:86:7F:12:1B:BE:99:AF:FA:8A:7A:C9:6B:95:08:EE:F6:10
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:cb:dd:7a:86:1f:af:1a:f3:be:e5:2e:ba:9c:ca:1b:ad:
         7b:35:d4:b3:bd:cb:82:fd:1e:0f:92:d3:3c:0c:35:4b:ea:f7:
         d3:77:40:ef:76:f6:30:ed:46:f2:07:ba:89:69:06:aa:60:c8:
         16:2d:f8:0a:83:2a:dc:59:9d:a3:18:40:4e:7e:9e:56:2c:eb:
         e4:90:b5:1b:17:74:4a:04:b6:94:75:4b:57:e5:66:bb:9e:d6:
         26:b6:9d:0b:7d:63:c9:60:43:ef:d0:14:24:9f:be:f9:87:a1:
         4f:e6:aa:88:37:11:47:e2:bf:b4:7d:17:3a:88:5d:2c:d1:c4:
         1d:71:4f:41:b9:aa:04:36:15:8a:32:4f:27:3e:0d:4d:34:9c:
         0e:a4:10:94:6c:22:bd:30:88:bd:5e:13:d9:4b:6a:5b:2b:73:
         d3:6a:de:5a:59:7c:d7:b6:9b:3e:b9:e0:3e:95:a8:df:7f:d5:
         6b:75:5d:5e:4e:08:dc:72:b2:d5:65:ca:a2:b4:4d:de:7a:1e:
         39:82:be:d1:15:5f:e5:fb:a8:80:f6:3b:c9:c5:74:c2:b7:d5:
         05:6c:50:2a:17:28:0d:11:26:47:f8:a3:2a:85:ec:7e:6e:d1:
         f2:f7:38:13:64:5e:32:98:62:02:ec:37:33:14:9f:1a:ef:e9:
         1a:a8:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----