Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          It66ekqNp/sQjMOmajPjhhPBH/wVaLO5cQnJnKvIMBU=
Subject key identifier:   0D:05:FD:CF:B7:03:4D:32:95:86:27:F6:2A:D4:18:0A:AF:7F:5B:0E
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       0193549C6A1528CD485E0AC558198628D571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          018A
Signing time:             Fri 22 Nov 2024 16:02:37 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:37 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:37 +0000
Files and hashes:         1: 2mE-ijfOKoP6FpUKbvaHQI-RUys.roa (hash: BhJHvrEu5akmef6UhIzU6EJF49l37SsGS7/6VdGJcMQ=)
                          2: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: pi7YT1vB0f3XTkHCPjdGOyPuHw54bDjO8owLMVe0Zso=)
                          3: mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa (hash: vxMWG4W9+8gRPK9Vu4qwVZpJXuaeu3SLWH9vTd63/CU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:6a:15:28:cd:48:5e:0a:c5:58:19:86:28:d5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Nov 22 16:02:37 2024 GMT
            Not After : Nov 23 16:02:37 2024 GMT
        Subject: CN=0d05fdcfb7034d32958627f62ad4180aaf7f5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:c9:68:e8:f7:9e:e6:01:c8:ed:e0:c1:36:
                    41:b7:82:7d:23:a4:d0:7c:6f:7f:c7:96:98:f7:39:
                    21:d5:5f:09:2e:b5:7d:da:0a:1b:b6:06:10:38:d4:
                    9b:ec:8f:62:1b:ff:82:52:f0:d6:96:7d:d3:98:04:
                    36:bc:85:94:de:af:f9:58:19:16:79:94:1c:c6:ed:
                    1f:27:e9:b7:d6:14:ce:57:10:08:c9:d8:04:f9:67:
                    d4:a8:90:b1:20:ef:50:c5:0d:78:4d:a2:73:e8:07:
                    07:52:99:54:86:41:da:ed:50:34:ee:9e:99:62:01:
                    43:ab:0d:c0:32:9d:17:d7:32:76:f1:92:1c:f3:88:
                    7a:b6:f9:cc:e9:92:13:86:b8:7c:dd:34:53:44:91:
                    70:ed:cc:9a:9d:e8:97:c6:a4:08:0f:8d:93:cd:c2:
                    97:5b:3e:7c:b4:a8:f6:5f:85:93:c0:7f:99:e2:6d:
                    26:dc:dd:b9:f5:fe:b8:d7:ce:70:5c:ac:56:58:9a:
                    30:3e:bc:4c:df:23:3a:c1:e0:12:ad:3d:d1:40:90:
                    74:18:59:f8:7e:b3:80:16:72:8e:e8:02:ce:20:71:
                    b9:68:78:b4:89:ea:3f:37:ef:fe:18:07:c6:3d:aa:
                    d1:56:ef:11:c6:23:c5:57:57:df:9b:4a:a2:cf:0e:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:FD:CF:B7:03:4D:32:95:86:27:F6:2A:D4:18:0A:AF:7F:5B:0E
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:49:4c:b0:ea:df:44:40:b8:ec:a1:78:69:eb:91:c3:a5:
         63:b3:fe:53:15:3a:df:60:6d:66:46:28:94:55:3f:3e:36:21:
         2d:b6:53:27:75:25:40:36:b8:88:b1:40:5a:55:e6:3b:91:17:
         48:85:ce:6f:4e:d7:60:96:43:82:39:1a:4d:17:be:4e:cb:84:
         47:70:ca:77:8d:88:08:2f:27:21:5b:36:2f:bd:8a:39:6f:72:
         97:8c:27:7e:6a:df:eb:2b:2c:9e:31:ad:e5:d0:80:c6:7b:0e:
         ac:59:79:7c:be:fe:75:f5:e7:14:44:99:b4:5a:e3:7f:91:33:
         cd:5c:60:40:8d:cd:4e:61:94:39:28:77:3d:e6:8d:89:b8:ca:
         88:b3:2e:be:c3:d4:f9:ec:e2:b8:2b:52:19:a8:15:67:15:8c:
         ce:b7:a2:67:b0:5d:65:09:82:d9:42:5e:d5:58:8c:18:c7:ba:
         28:d2:e3:8d:e6:6b:89:f9:50:3e:4b:e5:32:2f:4e:0b:71:e9:
         df:ab:b9:dd:cb:63:ca:94:d6:17:2f:01:5a:a6:75:22:14:3d:
         2d:b0:d4:e9:b4:ff:73:24:85:cb:4c:3f:3d:81:9a:a7:6c:a6:
         d4:f3:f4:ae:e4:98:f7:90:1d:dd:b3:74:48:07:9a:ea:ae:45:
         d8:d0:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----