Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          +oLXUndMFFYI9pVfyq00NwhMMFrQ7d2eTytzDnTXSdo=
Subject key identifier:   B4:A2:9F:6F:0D:D0:66:D7:41:73:17:57:3A:F4:60:98:4E:C8:59:5C
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       01936032D60745DF7093201E01B0B8DDB0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0897
Signing time:             Sun 24 Nov 2024 22:02:44 +0000
Manifest this update:     Sun 24 Nov 2024 22:02:44 +0000
Manifest next update:     Mon 25 Nov 2024 22:02:44 +0000
Files and hashes:         1: H5C9ug6SlIzW8I0KKNPP32nTUPY.roa (hash: z3+G/PNFh1eKLlPvq6KNYFOHP+WbZdRrZCDl68Ej1HE=)
                          2: IrzLGxqFJNr1HbyZId1ZwAxaIu0.roa (hash: 6kRceCQgWHMci2yNu+E/h3nBgsjgEjfZJhdTBCm5Bio=)
                          3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: T/gVPfraXreL7GFTDH/9u8ZQQf99Xi/0wMQgNVjDHSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:32:d6:07:45:df:70:93:20:1e:01:b0:b8:dd:b0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Nov 24 22:02:44 2024 GMT
            Not After : Nov 25 22:02:44 2024 GMT
        Subject: CN=b4a29f6f0dd066d7417317573af460984ec8595c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:96:5e:b3:3c:52:95:17:4f:da:fd:b0:45:
                    eb:08:35:34:9a:54:dd:65:3f:c1:5e:11:0a:01:e0:
                    4d:be:d8:19:42:ac:b7:fd:ab:22:ef:8e:ae:bb:da:
                    0c:68:80:df:7a:75:f1:bb:81:59:a4:1c:7a:37:25:
                    d9:44:c1:88:cf:17:53:ad:83:06:58:51:4a:2f:c8:
                    51:c0:d4:2b:96:42:ae:05:e9:b3:17:c9:85:7b:a6:
                    2a:05:3f:a9:2e:27:d7:ad:8b:60:31:bc:18:fb:bb:
                    b8:1a:e8:3c:9a:48:68:15:11:f2:98:9f:a1:64:0e:
                    dd:ba:a6:fd:08:58:6d:43:81:b8:16:48:a3:2a:3d:
                    2a:2a:82:5a:03:74:b7:14:15:94:ef:30:e3:84:45:
                    db:e9:98:b6:c2:1f:a1:96:37:11:81:60:a3:2a:c4:
                    cf:e4:8d:b3:b7:4e:1e:aa:91:18:1f:15:7d:81:b8:
                    52:3e:c0:ee:24:c9:c5:f3:ca:2f:23:be:c6:0f:86:
                    18:06:49:41:af:75:51:fb:9b:9d:9d:6e:4e:8e:60:
                    e2:c8:a9:0d:bc:ff:a5:fa:c0:21:a4:07:e4:14:e5:
                    c1:12:00:47:15:3b:f9:4c:6a:92:7a:9d:de:79:63:
                    64:4c:ad:e3:93:d5:9d:41:e3:e3:02:fb:1f:f0:b1:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:9F:6F:0D:D0:66:D7:41:73:17:57:3A:F4:60:98:4E:C8:59:5C
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:47:70:3f:aa:78:01:68:ca:c2:65:f3:14:6b:14:3b:73:
         25:37:7b:4a:e2:24:23:fd:d6:01:45:45:18:81:52:1b:d0:c1:
         08:61:93:eb:3f:fb:ea:95:63:93:04:12:80:d3:fc:9e:cc:c5:
         26:71:34:fe:c9:b2:68:18:ff:d0:fd:ce:75:88:fa:5f:28:35:
         82:88:0a:f0:c4:ee:89:c7:d6:ed:e9:9e:f9:2c:dc:3c:92:db:
         c4:9a:e9:aa:11:1c:ae:8c:d5:7b:37:5e:b0:98:f6:5a:84:0a:
         40:44:f2:14:2b:69:c5:bf:0a:27:86:de:12:d1:aa:d8:26:e6:
         63:f4:ac:b4:a5:54:18:eb:8b:4e:fe:c7:e6:65:06:5c:a8:f4:
         c5:9d:13:5a:42:c1:3e:71:3f:ca:75:ed:15:f2:eb:0b:97:58:
         d4:a4:8c:9e:67:88:b4:14:f5:1b:4e:91:04:b5:91:d2:01:dd:
         3c:e6:dc:86:49:0a:2a:aa:48:5a:63:43:9a:4c:ba:34:48:dd:
         98:0b:73:e1:ed:e3:b1:53:b5:56:4a:15:e4:14:1e:75:fd:45:
         30:40:c5:60:4b:fa:20:e0:c6:9c:78:fa:99:44:45:6c:f3:bb:
         bf:6a:f8:6d:2f:4f:d5:ce:7e:c5:7c:47:cd:ee:c4:d4:7f:3e:
         b9:72:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----