Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File:                     Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier:          t0siM5EdnGYi6TPJt8DHamYMoxSVKDlIyg4wxxIhWF0=
Subject key identifier:   A8:2E:4F:E0:35:8D:E7:B0:E7:07:53:3E:50:DE:04:30:9B:41:12:A1
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer:       /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial:       0194056A46C1F2579685040A7FBDDB89D701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number:          034E
Signing time:             Fri 27 Dec 2024 00:00:38 +0000
Manifest this update:     Fri 27 Dec 2024 00:00:38 +0000
Manifest next update:     Sat 28 Dec 2024 00:00:38 +0000
Files and hashes:         1: BkbiRb_G_YxQgK5zn3ODjJPbuB0.roa (hash: ynurRT13WCciU1l3YQlro6G6xkF3wGXKTugqIfAgvNQ=)
                          2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: K9G/6KVgmQssieKwY7qHKJ3cV2lAX6vp6usRt4inlJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:6a:46:c1:f2:57:96:85:04:0a:7f:bd:db:89:d7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
        Validity
            Not Before: Dec 27 00:00:38 2024 GMT
            Not After : Dec 28 00:00:38 2024 GMT
        Subject: CN=a82e4fe0358de7b0e707533e50de04309b4112a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:fb:71:ea:76:58:cb:e9:ff:9b:3c:9e:1a:
                    b5:26:48:c2:a6:c7:b4:d8:87:9c:d6:e7:77:c2:23:
                    b4:ab:6c:c0:35:55:e4:fb:a3:25:80:a8:01:53:58:
                    ba:af:78:2d:3c:29:8b:19:c1:a4:1a:f9:06:a2:37:
                    ec:f5:8a:b7:7b:0a:c6:54:97:40:87:ce:ec:0c:7c:
                    3d:57:76:e1:b7:af:e0:d9:ad:46:4a:a5:c7:53:f3:
                    67:05:9a:40:35:b3:c4:cd:da:86:b3:76:6d:92:74:
                    70:c2:42:b8:11:c6:9f:15:1e:69:5a:8f:bf:b4:b7:
                    11:e3:99:ed:ef:7d:6b:72:69:f8:19:b3:e3:88:46:
                    b0:b9:80:4a:3e:17:a8:00:b3:e7:8d:7a:11:f1:c4:
                    08:77:35:d2:e8:c3:bb:b4:ec:e2:93:15:27:ec:d5:
                    e9:0d:d7:bb:f0:03:e3:f9:e3:94:8b:7a:db:64:2a:
                    ca:8c:1c:16:a3:4c:f1:be:87:48:93:2e:b3:17:0e:
                    3b:33:71:b0:d8:e1:86:dd:52:18:c3:cd:f9:e9:f2:
                    5f:5a:c8:3e:a0:5e:d0:82:b8:2c:1d:f3:f6:7b:d2:
                    7d:ff:ca:08:63:84:d0:4b:15:70:bf:65:af:d5:26:
                    20:13:5f:4c:b1:5f:48:0b:f0:c7:2b:49:0b:e6:b1:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:4F:E0:35:8D:E7:B0:E7:07:53:3E:50:DE:04:30:9B:41:12:A1
            X509v3 Authority Key Identifier:
                keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:c3:e5:de:f4:b0:0a:a7:ae:f9:31:d6:4f:13:3f:a3:26:
         92:4f:45:e3:11:ad:30:dd:a0:24:24:95:21:88:e6:85:bb:0a:
         79:31:2b:23:cb:52:eb:c4:38:31:21:70:66:4d:e9:59:1e:70:
         d5:7f:7b:98:63:60:1c:52:a5:e3:67:29:e1:dc:ab:3d:03:24:
         0c:d5:99:f2:f6:41:dd:8e:53:ed:a6:a4:52:74:b6:60:3b:9b:
         65:b4:3b:b2:0a:bd:63:69:d7:65:32:45:69:7c:fb:fc:bc:5f:
         0b:cb:dc:8f:1e:4f:3f:2f:40:e9:8d:62:42:10:66:53:1e:0a:
         7b:b4:c7:a5:bd:7a:5a:8f:f4:47:e8:0b:3a:7f:a6:58:d9:97:
         a4:10:cb:ed:d3:5f:7c:12:87:e8:e8:2d:76:c6:fd:c0:d8:ee:
         21:0d:c3:49:ec:11:34:9c:1a:f2:be:f7:d8:2d:32:12:95:96:
         94:87:77:10:28:4b:8b:66:fe:ca:77:f3:2d:96:01:15:4f:f8:
         66:71:fc:e7:c2:6f:db:3d:b4:9b:e9:06:7d:b7:a4:f9:27:0f:
         7b:30:66:0c:e3:62:8e:4a:e9:d3:1f:7f:18:2a:35:8c:bb:95:
         93:6c:55:d5:b3:4b:9d:3d:2d:d6:7c:58:64:db:3d:a6:63:5a:
         dc:1f:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----