Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          Uneuym3/Y4yUqjqwZVQHBx7FCmp5OBUI1aeEFap6AvA=
Subject key identifier:   9E:AB:15:9D:A5:F7:C7:19:47:D9:21:BD:27:57:F9:4A:19:7B:3A:6B
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019352AC9EC0F0A85C71C3A184AA0F4B9C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:01:04 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:04 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:04 +0000
Files and hashes:         1: BaWk3eP-0Qhr9wK1FRL89gBULxg.roa (hash: A93OccEHilUwiWDEGiW1pbuGjuWGKMOs7q9ueC8cQ8E=)
                          2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: JvVrJOOfSftcnu+18AXX7pcr1p7VrzLJnaRryUi2Zo4=)
                          3: gHKIfNlbccRWqjzzlddbk9cCpUg.roa (hash: m5RxaEL+uphmE2oRxp3nd4aYWELtOMYNFkXxfjftNg8=)
                          4: lETRbrtL0TlVaWU8p_6rCCtB5AE.roa (hash: jmD1Q4IwmbShlIUzUhp9qUuw79Z8sh58zjA+pNSmAb8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:9e:c0:f0:a8:5c:71:c3:a1:84:aa:0f:4b:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Nov 22 07:01:04 2024 GMT
            Not After : Nov 23 07:01:04 2024 GMT
        Subject: CN=9eab159da5f7c71947d921bd2757f94a197b3a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:66:cb:ac:f5:02:98:63:3c:9d:1a:e5:5c:
                    33:23:2d:ea:7e:d8:97:8e:be:9b:01:da:2d:f1:c6:
                    de:01:d1:10:82:42:29:d9:33:49:f2:ff:96:6c:c0:
                    79:73:1b:82:9c:d0:2d:a8:5f:e6:20:ee:91:b6:6f:
                    13:83:66:b7:13:dd:54:8f:0e:18:45:6b:81:88:a7:
                    b1:81:ac:f5:21:48:97:47:c9:aa:3b:c8:8f:81:15:
                    bb:43:4d:21:a0:1d:bc:25:db:f4:5b:10:06:7b:b2:
                    a7:10:d1:e6:f8:df:c8:3c:82:65:f2:99:e0:b5:c9:
                    ed:a8:f4:3c:01:32:9f:36:8a:0c:a3:ec:34:60:89:
                    1c:fb:17:76:f0:06:f2:f2:d5:ef:5a:73:8c:4a:9c:
                    9c:af:ba:91:6a:ba:a0:e9:76:b6:b0:8c:ad:f1:78:
                    e8:68:45:57:47:e8:64:f3:bc:e4:45:9c:65:c8:76:
                    d8:4d:b5:82:ff:22:bb:61:b1:5c:5b:a0:da:5d:bd:
                    82:61:ea:2f:bc:37:05:5f:12:97:3a:ba:c8:d7:5d:
                    de:63:38:6d:41:6a:95:08:c7:42:d9:d6:ae:3b:f0:
                    b2:52:32:c3:e9:a1:fb:7e:34:a6:85:a3:4a:44:03:
                    8b:2b:5b:90:03:97:cf:20:d1:3c:62:aa:d4:38:04:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:15:9D:A5:F7:C7:19:47:D9:21:BD:27:57:F9:4A:19:7B:3A:6B
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:a1:38:4b:8d:36:69:0b:5e:f3:f1:f8:3c:2f:26:f8:e7:
         09:4c:e7:86:26:fe:2f:32:00:83:42:f0:9d:4c:d4:49:39:b7:
         5c:52:28:68:df:f3:a2:6e:04:d3:92:58:66:60:48:a4:2f:bc:
         b6:16:f5:95:cb:38:b5:04:e5:c0:0b:4b:23:d8:01:30:d1:cc:
         0b:2d:e6:06:9d:3c:15:cf:d7:00:6b:47:07:ea:b8:41:21:89:
         b8:84:2f:9e:fd:41:9a:33:25:4e:22:93:42:fe:41:7c:7a:ff:
         db:f0:11:9c:58:f6:c4:d3:33:b9:6e:c5:f5:98:dc:b3:de:dd:
         75:00:35:a6:1a:00:1c:6c:ad:8a:74:74:01:62:c3:0b:26:54:
         01:7e:bd:df:c3:7b:ef:c9:d8:82:48:0d:59:92:54:a2:62:5e:
         fb:86:1c:be:ff:f3:bd:82:c0:72:ff:5e:bf:9a:f4:07:b6:6f:
         7d:1b:4e:31:e2:fc:78:2f:8d:e0:96:ba:cf:71:da:ff:e7:44:
         d7:d6:8a:30:13:b8:ae:68:03:c2:3c:c0:c8:c6:db:b0:d2:5b:
         51:c2:73:d1:b5:b4:6a:20:d0:ab:cb:6b:42:5f:d4:ab:58:47:
         29:e5:06:16:45:c9:c3:e9:ed:3e:93:70:ae:82:7a:83:2d:07:
         9c:fe:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----