Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File:                     XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier:          t5RduxjGBPVyj+bMMWzv1ZEldqYBwQXABpQGb4LPyX0=
Subject key identifier:   A3:CB:7D:1E:57:D4:AD:87:6E:15:60:5A:62:CA:4A:61:31:65:82:98
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer:       /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial:       0193549A3A7F3BB9EF576BBC6D4574731A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number:          1078
Signing time:             Fri 22 Nov 2024 16:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:13 +0000
Files and hashes:         1: LpKCzSUTISdjMEMcN_78uSHLNYA.roa (hash: rCz3kNaw5t8EdsRPD+lOpqx/ZQ3IkXfBPJxgUSPmsnM=)
                          2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: mAj7OW5nkrtbSo7Y0igBut8ygre+t0Vs3vdVnRUl3l4=)
                          3: wGFkrHDcrAGgGYj_3_M1rspDbEk.roa (hash: hVn7CQxG3WI0sTMTo9g6HAzbB/pBLkCtH6MUYxgzy+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:3a:7f:3b:b9:ef:57:6b:bc:6d:45:74:73:1a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
        Validity
            Not Before: Nov 22 16:00:13 2024 GMT
            Not After : Nov 23 16:00:13 2024 GMT
        Subject: CN=a3cb7d1e57d4ad876e15605a62ca4a6131658298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:28:bc:28:f1:7a:5c:25:6c:20:5c:3c:0a:
                    43:ed:f7:c7:d9:0a:ed:42:6d:6c:97:d8:88:31:62:
                    90:80:0c:c9:4e:9a:5e:6f:3d:f3:cf:93:f2:c8:61:
                    6f:e0:45:86:ae:5d:42:4e:44:c2:ea:ae:71:f8:22:
                    61:f0:14:60:cb:68:7a:a9:2f:47:57:de:a3:8e:5b:
                    d6:b9:f9:12:84:99:1e:f8:23:55:00:82:74:b0:04:
                    38:5c:6b:03:1e:68:15:a1:81:8c:fb:3e:7a:7c:66:
                    1a:a0:97:c7:3a:86:14:f0:80:55:f5:5e:2e:75:a9:
                    25:cb:6c:28:ff:41:14:ec:90:6d:70:24:20:54:a8:
                    8a:a1:02:6a:05:81:f7:8d:31:71:82:cd:ac:c2:b3:
                    04:c8:c6:13:46:fe:5e:d9:3c:ee:87:78:3f:95:46:
                    68:87:27:97:da:24:d0:23:28:ad:94:b6:de:e1:c6:
                    62:20:8d:67:09:11:2b:cc:83:29:d4:08:3b:5a:b3:
                    52:2f:b1:69:a8:68:c1:27:84:a1:06:6c:fa:5e:6e:
                    e7:9f:31:05:8f:d2:d3:a1:99:f5:7a:9f:16:6f:f1:
                    41:6b:7b:73:51:bc:40:63:eb:2f:90:74:27:9d:89:
                    09:46:8f:e4:a2:8a:8a:44:4b:30:cf:30:61:a0:7f:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CB:7D:1E:57:D4:AD:87:6E:15:60:5A:62:CA:4A:61:31:65:82:98
            X509v3 Authority Key Identifier:
                keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:35:40:06:e6:c0:f8:00:87:36:34:3a:e7:97:7d:9a:53:
         82:04:c6:32:fd:ff:2d:86:89:c3:0a:4f:1f:d3:6b:92:dd:63:
         28:97:a7:41:90:57:f2:e0:1a:22:1b:2a:20:ec:f6:7e:be:5c:
         b7:fc:72:f0:c4:37:7e:ff:bc:d7:b2:26:1b:b9:2f:ad:d6:d7:
         c3:9f:f3:3d:78:bb:52:f7:21:89:dd:b5:42:3c:93:e5:1f:06:
         96:2d:77:4a:d1:24:33:41:26:62:de:07:d1:ab:0e:05:4d:18:
         12:78:11:d9:04:43:09:95:07:39:a2:3c:54:9b:09:60:77:29:
         5f:1d:23:99:9f:d7:f5:13:76:a2:9a:7f:23:b2:11:40:0f:c4:
         fb:e1:15:36:95:f2:92:55:3f:3d:e7:d3:cc:73:4a:43:46:05:
         02:3d:86:5f:2e:cf:e7:44:3d:60:24:9e:47:ae:98:ca:2f:ba:
         57:0a:a7:d5:46:6b:9a:f0:14:5e:8a:1f:32:44:9a:b1:e6:bc:
         c9:2f:b1:92:39:68:54:9e:d9:e4:d1:99:ed:b2:af:f3:b5:2c:
         d7:63:c8:83:34:90:12:a6:bd:c1:c9:d7:ad:2e:50:3c:e1:00:
         e0:e1:fa:fd:d3:e9:b5:3b:d2:b8:24:8c:39:c4:8d:24:57:17:
         f1:1e:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----