Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File:                     3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier:          dKTVKch2W59y53YX2db9gv5wYbQ5yOmc1PHGwi6lu+Y=
Subject key identifier:   58:35:36:4D:77:E5:6C:A8:97:15:A0:4D:F0:5C:55:55:86:EC:C5:C3
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer:       /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial:       019406B41682B68E7AE6571072D2B96FA854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 06:00:52 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:52 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:52 +0000
Files and hashes:         1: 1-C3-WRlAd7e9wQqP2qsRXkzlvP0.roa (hash: OWpCl97jKV/Mw3cRdzPqC15vk+2F2AJ7OPTRm6tSLKM=)
                          2: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 3BeMpOhlhJGmI0b8mS4oHCQXc7YsINDTkOBU+sHRh/8=)
                          3: Uu-twUVldjr_oEZ0y2ql0PTNJ1M.roa (hash: 3hPqYy5WoGWMWA4gqs0dXFaS1nRTYeA2qjp4I1TcUuc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:16:82:b6:8e:7a:e6:57:10:72:d2:b9:6f:a8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
        Validity
            Not Before: Dec 27 06:00:52 2024 GMT
            Not After : Dec 28 06:00:52 2024 GMT
        Subject: CN=5835364d77e56ca89715a04df05c555586ecc5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:b0:09:ef:54:9f:a1:04:8e:43:e4:dd:3a:
                    4c:82:68:18:21:4e:35:78:d9:9a:95:d2:24:a5:29:
                    0f:c1:16:b5:22:49:ca:31:65:d8:a5:09:5d:26:14:
                    a4:0c:c5:18:2c:c6:e1:c8:e3:72:f1:77:6a:ce:ef:
                    08:56:8f:b3:13:7c:9a:5d:57:b4:e6:ac:a5:07:91:
                    42:c8:76:a3:2f:08:b9:b1:ed:45:3d:d9:37:b3:d4:
                    b1:f7:0f:a7:c3:5b:de:fd:a6:60:43:6e:74:38:6d:
                    ea:7b:14:88:10:9b:a9:e3:e9:10:ab:6f:de:f0:44:
                    9c:d1:99:86:47:82:ca:dd:06:8e:25:8a:b7:ec:31:
                    48:8f:b4:8d:39:24:2d:8e:13:72:f2:3f:f0:80:80:
                    71:85:dd:bc:b3:7a:3c:36:01:0b:b4:6e:48:5b:76:
                    e8:dd:c2:5b:a9:a2:b6:0c:80:c2:c2:82:b6:c6:0a:
                    34:6c:58:60:18:4a:0e:e6:fd:10:38:9e:02:fc:c2:
                    5a:91:9f:bf:59:b8:90:9d:45:0e:4b:85:62:4e:f3:
                    69:43:15:6c:96:b6:f5:75:be:db:33:6d:5d:26:d2:
                    ee:8a:c5:89:f1:ce:00:8e:f2:61:c7:3b:a1:34:a7:
                    8a:4f:33:db:53:e8:51:94:19:1d:d6:98:08:23:be:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:36:4D:77:E5:6C:A8:97:15:A0:4D:F0:5C:55:55:86:EC:C5:C3
            X509v3 Authority Key Identifier:
                keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c9:55:94:be:f1:6c:e5:29:d7:df:cb:ea:16:80:cb:a4:c2:
         b3:31:06:8e:16:8b:44:fd:1f:6d:6c:fc:47:ac:18:2f:89:bc:
         0a:19:0f:a9:45:b4:f1:d1:5d:7f:50:3e:0a:ad:39:df:05:3c:
         1b:f4:68:52:e2:05:d3:fc:00:91:ff:c3:33:be:29:c2:bd:01:
         37:55:f4:a9:db:02:71:ec:41:5a:64:2c:5a:10:88:ef:96:96:
         b1:19:39:d8:05:60:82:98:3d:6a:35:72:94:d3:37:e3:56:26:
         1d:48:b8:a2:93:d7:81:9e:ca:2a:e7:f9:79:e7:3f:1a:d8:4c:
         8d:b7:82:c2:b3:b1:c3:96:9f:4c:df:bf:74:91:7a:68:fe:cf:
         bc:36:95:aa:f8:03:9f:e0:41:61:b1:a8:f4:bc:4f:55:f1:05:
         ac:8b:53:72:91:ca:49:d2:35:46:86:75:75:3b:46:6d:16:7a:
         dd:33:0c:5e:f5:05:fb:f6:7a:84:1e:d9:e4:d8:89:38:30:dc:
         1b:dd:b4:6d:cd:37:93:e9:9f:2b:5b:71:54:52:85:90:48:7b:
         9a:70:c0:bf:aa:f6:c8:44:2b:ad:a0:4e:31:ed:1c:98:c7:e5:
         69:8e:da:65:d7:a4:ad:18:d0:36:97:dd:f7:da:e4:89:22:2d:
         cf:22:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----