Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File:                     Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier:          vt9P32ErntYQmA0oP0V2uqWi9dEAzpgaN67q+PxEtFI=
Subject key identifier:   C1:97:2A:6A:CF:20:C0:62:47:88:2D:F3:D8:59:DB:C1:9B:C3:3D:48
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer:       /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial:       01935689E9889B73193085EE0B80088F8051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:01:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:38 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:38 +0000
Files and hashes:         1: 7hsD7gHsyY4ERbhEncNpMVV9bdY.roa (hash: qkDbSJE8IVcg6eh0uaDe35Rl3uaY3UczyVKxCv8yck0=)
                          2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: zOPvmXcpTpgZ3AbtOElURKdOthC7Tb6y5LrDgeXBl8o=)
                          3: oProo_5e6IRWdeysuLLP0xx2_sw.roa (hash: oXT79SyE08tyNUmsE392QhVO39RuzLrd05M+oaIMl9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e9:88:9b:73:19:30:85:ee:0b:80:08:8f:80:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
        Validity
            Not Before: Nov 23 01:01:38 2024 GMT
            Not After : Nov 24 01:01:38 2024 GMT
        Subject: CN=c1972a6acf20c06247882df3d859dbc19bc33d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:33:61:5f:d0:76:c1:fd:ca:9d:e9:9e:d8:
                    20:87:cd:8a:44:bb:0d:39:a5:46:0d:29:73:25:46:
                    ce:9c:fd:45:6e:5f:57:ee:7d:3a:81:23:f8:1d:ae:
                    25:bf:72:ce:a4:5e:c3:02:7b:55:74:88:2f:8c:63:
                    df:c8:6b:62:ef:9f:6c:5e:f1:a7:f6:bc:da:d3:be:
                    47:7c:0c:89:dc:33:e6:d7:29:8a:87:72:7c:c4:94:
                    7b:25:fa:21:81:11:83:b5:1b:7d:d5:3d:67:33:a7:
                    34:a1:ea:a5:ae:b4:69:de:5f:4d:18:f2:6b:2d:6b:
                    ee:5f:b1:74:d9:33:6c:3b:f5:00:74:cf:9c:3d:24:
                    de:56:32:10:69:35:7e:28:cc:25:d9:09:89:82:39:
                    d6:c3:25:7d:1c:58:ff:23:46:21:d4:b9:91:de:ab:
                    d4:75:82:ed:7f:7e:c3:46:40:20:a7:f0:a7:8c:6c:
                    d3:b7:90:69:b2:bb:09:1b:1d:2c:0e:ca:c4:5b:79:
                    2c:c2:0d:3c:a5:fc:8c:55:c0:73:91:39:d0:bd:00:
                    22:71:6f:88:7d:bf:b8:e2:73:da:79:4e:e6:de:63:
                    3f:9e:a3:d0:7c:a8:78:32:71:71:5e:0f:5a:a6:03:
                    7f:8a:1d:81:89:3d:fb:46:ac:2c:c9:bc:38:a8:f6:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:97:2A:6A:CF:20:C0:62:47:88:2D:F3:D8:59:DB:C1:9B:C3:3D:48
            X509v3 Authority Key Identifier:
                keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:e9:18:72:b5:c9:c8:0e:3f:6d:dc:4d:9b:cf:16:6f:c6:
         50:85:1f:e5:79:70:4d:f4:e7:e5:40:85:3e:76:1a:ce:f0:be:
         4f:b1:30:94:c9:56:88:bb:fb:0b:e0:4d:bb:58:a2:12:62:72:
         81:75:0d:07:a3:19:e2:a6:df:ca:4a:3f:1a:8a:1a:92:74:f4:
         5f:f5:ed:c2:07:f7:b7:df:d8:c3:7b:69:67:b0:07:03:db:58:
         c7:eb:0a:20:6a:df:19:f6:3e:db:a8:69:41:4d:94:3b:1a:f0:
         5c:26:a1:14:18:c4:6d:8a:62:a4:2b:ee:76:51:e2:19:23:05:
         1d:da:e2:89:b9:ac:8e:b0:fa:ed:b8:48:c7:47:ad:25:02:ec:
         b5:ce:44:01:36:33:32:d9:38:4b:06:1e:7f:21:82:da:0e:90:
         76:68:73:2d:55:28:ea:b0:50:75:ad:2a:69:c5:fa:0d:30:4f:
         6f:ae:4f:4a:f4:09:41:a1:e6:d5:58:db:51:bb:9a:06:16:03:
         c4:8e:72:17:b1:82:90:ad:d1:99:52:48:e8:27:27:3e:48:5e:
         ac:f4:e8:fa:f2:df:29:46:f1:81:a2:93:fa:3b:b9:9b:0f:2a:
         ea:03:f4:80:3e:54:01:af:19:ad:13:f9:eb:ad:b1:46:4d:91:
         94:b5:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----