Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File:                     mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier:          r3+u3D6cISbR4BJudWUBiJ7yH7mvPSMEg52AM35Ukzo=
Subject key identifier:   E0:DB:BC:59:65:85:FC:85:93:95:18:C7:12:FB:09:2F:AA:37:B0:DA
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer:       /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial:       0193579BD7E066F7305BFE57028FF78016F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number:          0628
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: UuBG0aOb6_GftuhFLQe4PZGjyng.roa (hash: sdSq+5L8tFFEWuJI49wUxFMZoGaEooBPts7hj6uRRyk=)
                          2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: whLtiqO9wjiFXPcXKCVc0V6HBrPViFIUfYjufbU88BA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:e0:66:f7:30:5b:fe:57:02:8f:f7:80:16:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=e0dbbc596585fc85939518c712fb092faa37b0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:a1:ca:78:36:d9:4e:16:aa:dc:7c:78:7c:
                    bb:b3:1a:e6:20:b9:46:6c:23:e0:7e:32:0f:78:69:
                    5c:55:6c:6d:cd:23:a3:97:55:6e:1b:fe:b7:04:de:
                    f1:24:fe:b7:53:cf:3c:ce:79:22:38:23:a1:26:0f:
                    2d:c5:3b:28:20:42:43:21:2a:bb:e2:52:80:52:1c:
                    1a:1f:cd:4a:db:12:1f:5e:3f:8f:19:4d:72:84:a5:
                    28:73:9d:e6:46:ab:be:2b:39:07:ad:90:ba:37:ab:
                    7e:7f:85:5a:97:3e:a2:55:54:1d:a0:64:00:54:d7:
                    df:70:c6:d9:5e:94:20:89:f4:4f:47:8d:81:7f:2d:
                    22:96:6d:2d:81:52:85:e2:f0:88:2d:3f:35:be:f9:
                    3d:db:32:86:bf:f6:cd:3f:aa:fa:6b:13:22:dd:df:
                    e8:0d:4e:22:bd:c9:19:83:d1:84:43:af:36:0e:60:
                    4d:b6:11:cb:15:6a:ba:6b:d1:3a:62:55:58:51:fc:
                    ea:bb:71:9f:21:a0:5f:db:f1:3f:52:74:0b:48:7f:
                    7e:c8:53:e3:30:f8:0e:32:06:62:24:97:2d:04:ae:
                    fa:e2:d0:3a:92:1d:5f:95:50:12:e5:2b:84:47:c5:
                    cf:6e:6d:82:f1:e3:dc:87:26:b2:93:7d:ee:44:5f:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DB:BC:59:65:85:FC:85:93:95:18:C7:12:FB:09:2F:AA:37:B0:DA
            X509v3 Authority Key Identifier:
                keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:84:d8:fa:78:99:7e:9e:74:0c:28:50:7d:3a:05:48:21:d7:
         be:c9:cd:99:df:f5:f0:c9:35:26:75:75:55:9b:5b:92:6f:5a:
         20:b8:d0:f8:e1:17:80:f4:09:1d:9a:5b:1b:23:7c:03:8d:30:
         0d:d9:37:0e:5a:c5:3c:36:7b:53:ca:8c:3e:db:6a:19:a9:a6:
         82:8d:ac:f1:2c:d7:3d:f0:20:6d:d4:a2:b8:3f:b7:64:f3:a7:
         02:fb:f2:6d:b9:62:b8:03:2f:66:e2:32:ac:fb:52:6c:64:74:
         4d:3f:5f:7b:fa:4d:fc:c1:51:eb:a8:a2:07:3a:99:90:67:7e:
         ca:26:5b:ec:6d:15:e4:84:d0:87:5e:e4:0e:75:5c:9c:75:36:
         c4:34:c1:5d:e1:1c:cf:cf:36:36:a1:f8:bc:f1:52:6c:5b:26:
         d8:d0:09:a9:ab:87:97:2f:a7:b9:06:8d:a6:ad:bb:12:05:41:
         40:c8:16:a6:54:44:af:94:c1:5c:3a:4d:20:22:41:49:60:bb:
         57:8f:2f:20:60:3d:f1:9c:df:49:68:9e:40:25:d9:30:b2:f4:
         59:75:ef:a3:82:5c:51:5b:15:b3:34:2d:c1:61:47:fd:04:74:
         ef:0c:b3:c5:c7:48:77:1c:6b:5a:c5:85:64:2b:16:28:bd:9c:
         ed:2b:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----