Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File:                     YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier:          PGEY4rKGJ5f347ArdG9jV05kAZF/j/+xm3jMocjoFgo=
Subject key identifier:   D5:58:7C:2B:02:48:92:26:DC:51:6E:6E:3F:05:D6:32:D3:0F:00:F4
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer:       /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial:       0193568A40B9919BB01325391EF48824CE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:02:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:01 +0000
Files and hashes:         1: 7M2GulaXs8u9bhmxeEqqIDK1WfI.roa (hash: Fh1DGq3vQlBNacKMMdtlpJTIxFqesezw3arkJ5wceKk=)
                          2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: BHbfW/hQkck1JB8ltu1c0xnsNFerdXR2OlU9+WzdOlQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:40:b9:91:9b:b0:13:25:39:1e:f4:88:24:ce:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
        Validity
            Not Before: Nov 23 01:02:01 2024 GMT
            Not After : Nov 24 01:02:01 2024 GMT
        Subject: CN=d5587c2b02489226dc516e6e3f05d632d30f00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:fa:eb:fc:4a:2f:bf:08:f5:fe:cd:45:a8:
                    73:ec:51:08:b9:72:ae:9c:97:cb:cf:38:71:e5:a0:
                    89:a4:c1:bd:ab:2d:05:1f:ba:e2:49:9a:af:43:23:
                    b1:aa:4e:3c:18:26:77:8e:a8:24:ff:96:15:2f:d4:
                    a6:ff:c7:de:b2:51:be:3a:42:5d:d9:35:8d:94:01:
                    0e:07:94:c8:d8:8e:5e:23:d5:19:cc:30:ba:77:05:
                    0b:ed:19:f1:d4:71:7c:3a:3a:d1:a7:80:90:7b:94:
                    50:82:71:9b:ca:d9:a5:a6:c8:fb:d5:bc:db:c7:45:
                    58:b2:68:84:05:18:9d:ee:a1:b5:dd:32:d5:80:51:
                    b0:00:be:0c:5b:22:57:ee:bd:0e:62:79:d2:69:8b:
                    02:33:62:df:19:42:f7:91:d5:7c:04:38:ca:ee:13:
                    52:6f:d0:b8:83:c6:d2:e7:22:91:62:2f:c2:7f:ec:
                    c8:39:90:b9:6f:2d:28:9a:8b:b0:53:aa:c4:c0:17:
                    4d:1e:50:a2:2e:35:5c:c2:32:0e:e9:a5:6c:dc:3f:
                    3c:ce:97:38:2d:33:2b:61:7f:7c:e9:92:a6:6e:0e:
                    13:6a:6f:ef:81:8c:a7:54:23:44:bd:d4:13:7d:67:
                    47:93:79:8a:55:68:27:c4:8f:6f:eb:ab:f0:81:75:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:7C:2B:02:48:92:26:DC:51:6E:6E:3F:05:D6:32:D3:0F:00:F4
            X509v3 Authority Key Identifier:
                keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:15:0a:a3:c8:8f:29:f4:fd:16:54:fa:a2:90:8e:39:1b:
         42:a7:3b:de:6c:1e:3b:d2:c6:59:ec:6b:bf:b9:d4:4d:b8:aa:
         11:e8:cc:40:3b:34:71:10:8c:16:ec:90:08:05:3d:64:60:79:
         23:0c:4f:f1:db:fa:4c:f0:fc:32:80:82:d3:6e:21:78:bf:b3:
         13:d9:a6:af:90:09:3e:f1:ac:62:8f:14:f0:11:9a:2e:20:c4:
         a7:b3:d0:e4:de:97:bf:e7:09:2b:4d:ed:0d:9b:2f:0c:68:3c:
         97:0f:f0:60:90:42:4f:40:67:19:f5:e3:9b:26:07:3c:74:61:
         96:06:9a:98:0b:95:d8:d1:de:43:a0:fc:7d:4f:a5:97:ad:ec:
         dd:9b:ae:28:99:c1:de:07:48:0c:9c:56:08:98:62:bd:b8:35:
         1b:29:c8:09:ac:24:ee:b2:6d:8d:42:f8:5b:c7:10:72:db:52:
         34:21:43:79:1e:57:17:60:75:5c:f9:82:50:e3:a2:e4:0b:36:
         0c:62:9a:9b:97:ce:b6:3f:f6:52:a7:20:ab:57:e6:67:7f:d0:
         d5:6b:89:d8:e3:26:30:a2:a8:6e:4f:f9:d0:a3:0e:ca:a8:13:
         03:aa:ad:15:3f:4c:ff:d0:f6:87:c5:4a:90:60:1d:5f:60:fc:
         a8:19:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----