Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File:                     FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier:          07bRCivTmP8skPEW2/4jhRdZQwA2Ze3HS+4YyP7ltDE=
Subject key identifier:   23:28:CC:47:CB:3D:70:0C:01:B2:46:1A:84:77:00:1B:A0:2F:72:0B
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer:       /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial:       01940647DECD970ABD22A86B7857FF25ECAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number:          13CC
Signing time:             Fri 27 Dec 2024 04:02:40 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:40 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:40 +0000
Files and hashes:         1: EMObNw5KYyJCS7w_cjJprb9dpg4.roa (hash: 8j8XnA5IvxYKl/aqFfNIIIcRlUAVfOm57FP0WTmck3Q=)
                          2: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: fi+PXbPtTrC50SVR2dI9CIPgOviZnL5/CmUW0TmM91w=)
                          3: LZm2bA5yVA2ALg1nvXHFqE4ZdZI.roa (hash: /P/f53cFTSQRWmVmDFDr8jHYaP0WFwPpHNo1obW92Bc=)
                          4: h7KFWNjT07gwReGJ-UIT6KdGM9w.roa (hash: 6tUDWPirv44VxYu4sCPsUuiGs7RWSYiYx24T58ZksSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:de:cd:97:0a:bd:22:a8:6b:78:57:ff:25:ec:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
        Validity
            Not Before: Dec 27 04:02:40 2024 GMT
            Not After : Dec 28 04:02:40 2024 GMT
        Subject: CN=2328cc47cb3d700c01b2461a8477001ba02f720b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:8c:39:4c:ab:78:90:1d:fd:8b:d6:41:e5:
                    3d:b5:d6:ae:a0:e8:97:39:40:3c:79:70:1c:2f:2c:
                    ca:65:e0:50:35:f0:ec:d8:93:28:48:d5:f3:3c:13:
                    15:80:61:f9:37:47:fe:a8:93:8c:7e:58:db:6d:24:
                    0a:d2:8b:59:b3:67:e2:83:0c:e6:c9:ca:80:68:f0:
                    d0:33:d8:47:a2:6e:8e:65:85:db:44:0d:d4:8f:d4:
                    cd:2f:aa:62:f9:da:77:e6:f6:88:4b:5a:14:12:1b:
                    ec:a6:2c:1a:6a:ae:9a:44:c6:79:9d:91:70:d3:4e:
                    3e:2c:b9:f6:62:99:80:06:7f:59:87:9c:ca:38:f7:
                    f4:09:9e:b8:43:cf:b1:44:e1:eb:5c:6f:6d:c5:2f:
                    80:5c:f4:ef:be:05:d4:d0:2a:06:a6:d7:14:5b:73:
                    68:06:6d:1d:41:ac:92:81:72:cd:16:e9:0d:4c:46:
                    8d:ff:49:95:44:26:e8:ff:0b:61:df:08:79:3b:46:
                    2d:40:c9:c4:d6:8c:07:27:95:5a:73:da:c8:55:72:
                    5b:d8:69:48:d5:43:94:95:c7:26:97:68:1b:83:ad:
                    d7:83:07:92:36:9b:87:64:1c:71:2a:77:87:cd:c1:
                    54:de:5e:0f:6b:ee:93:a4:f0:9d:fc:78:4d:be:f9:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:CC:47:CB:3D:70:0C:01:B2:46:1A:84:77:00:1B:A0:2F:72:0B
            X509v3 Authority Key Identifier:
                keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:20:a2:31:07:84:a2:45:8b:c3:7d:4e:d4:57:2c:5f:1c:15:
         a5:f8:0d:ca:4c:d6:e0:e8:a4:a4:a2:be:dd:24:c0:e1:b8:59:
         20:a3:67:1d:2e:a2:cf:7c:02:54:10:9b:00:7e:eb:3d:f8:57:
         46:b1:1e:e0:b1:da:f2:0b:a0:33:49:be:47:2e:3a:db:e2:12:
         54:1f:a3:87:54:a0:f2:77:12:5c:bd:eb:50:6e:eb:bc:f6:d5:
         8a:28:b7:80:b8:7e:ff:5f:b6:8f:d6:5d:ed:5a:9d:4a:fe:d4:
         3e:08:63:8b:a8:3c:4b:59:15:36:6e:12:a0:e8:47:5a:bf:2f:
         24:bd:2a:bb:43:60:84:f2:61:da:fd:02:d0:65:61:b4:1e:7d:
         36:6e:77:3a:d1:85:9d:52:b0:ef:d6:bf:f6:ac:61:06:76:ff:
         7b:c6:47:b7:2e:fb:e5:13:0a:5a:a1:11:06:20:6b:f0:fa:83:
         c0:8a:87:d5:c4:e3:bd:36:08:1a:8f:19:fa:03:ea:61:de:28:
         5a:81:b7:fd:1a:6d:f7:32:a7:e0:bf:ec:22:c5:d9:bb:c9:1e:
         20:28:8f:e0:1e:84:92:ab:6e:c4:fc:40:ae:6a:01:5a:3f:01:
         65:f3:60:14:d9:53:4a:0d:73:67:73:e0:ce:2a:d0:e7:02:dc:
         00:75:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----