Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          mu+JdjeZfZHhc2xafEd1uoNJrwoxEOij/VkgJjVirG8=
Subject key identifier:   D5:9A:AF:7B:A0:6B:A8:87:D0:AE:FF:50:A9:68:D5:15:2E:C1:C4:B6
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       019355E47C8772657DE64FFF314369C62C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 22:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:57 +0000
Files and hashes:         1: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: ua1rSmO+ancBrXKfTsHEi7KiafnkZP/fwDB9gZa23xQ=)
                          2: JOTAHPuuVCpVRI1W8RQhBRy-iGQ.roa (hash: U7pRBipp/fg3lAqSY8H5YHaO3VwaaWPieMeh7p+tMdw=)
                          3: MGllzYCse42xpHuUCUGNYxyM1uQ.roa (hash: 18o8tZOrzPqvTntMPUB20hl94ZBQy6iZVWnEmQXOvdk=)
                          4: pr9o5qTWF3YuN4aK2p8O3yS6f-w.roa (hash: ZZnyCruQ3aGtdPVMmmmxg5lmCWYDYwdcx00iGoydAoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:7c:87:72:65:7d:e6:4f:ff:31:43:69:c6:2c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Nov 22 22:00:57 2024 GMT
            Not After : Nov 23 22:00:57 2024 GMT
        Subject: CN=d59aaf7ba06ba887d0aeff50a968d5152ec1c4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:2d:a2:84:af:b9:f8:73:e6:9b:08:6f:c7:
                    20:9f:4b:f3:34:c9:36:b2:fe:b2:13:05:d5:cf:9e:
                    f2:07:95:a1:3f:3c:31:26:b5:84:f0:e0:e8:8b:f3:
                    4b:9c:98:3d:fc:51:4b:16:9c:48:4a:26:34:42:37:
                    f7:16:11:3c:de:0e:1b:58:78:45:fa:d4:9b:eb:94:
                    f5:f5:bc:f9:8d:51:93:78:94:5a:ba:6b:66:4e:d1:
                    b5:ed:24:e0:de:02:6d:a1:e6:17:7d:e1:11:22:8b:
                    83:1e:86:67:99:c7:28:91:e3:f8:d7:3b:69:76:c3:
                    5f:97:77:e5:51:c4:74:10:f5:15:d4:0c:9a:b6:08:
                    60:b9:ed:99:98:e9:b4:7b:03:b6:2d:10:d3:10:de:
                    fe:8e:78:9e:84:a7:0a:21:29:d4:ac:c4:6f:a1:06:
                    5c:a3:dc:53:89:3a:cf:7e:a9:09:1d:23:e8:37:32:
                    a9:d5:c7:e8:9f:d2:3f:66:04:e8:f7:0c:26:86:c7:
                    2a:06:db:cb:9e:10:f9:bd:68:05:04:e2:ea:c2:20:
                    a4:f1:fe:f6:db:8a:07:f4:16:ec:b5:fe:2a:25:bb:
                    60:18:03:83:d5:1f:c8:28:dc:f9:3f:d5:e1:81:de:
                    ef:50:eb:9a:e5:d4:21:10:c8:65:9d:8d:63:5a:8a:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:AF:7B:A0:6B:A8:87:D0:AE:FF:50:A9:68:D5:15:2E:C1:C4:B6
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:db:6d:97:5b:9e:bf:ea:7e:71:6d:24:1e:f0:f1:dc:7e:92:
         f3:95:75:e8:e9:f2:57:94:65:79:69:f6:c2:0a:ed:5e:d1:ce:
         40:da:bb:91:ee:3a:62:ed:74:97:4c:0c:29:d1:5a:dd:b1:1f:
         8f:06:0d:76:2d:61:bf:45:89:af:ee:9f:00:72:45:c3:8f:9d:
         84:3d:cf:6f:c1:0a:d8:11:bb:09:54:70:dd:81:20:17:bf:e5:
         f1:75:2a:75:37:0a:ce:3b:68:6d:06:7d:63:7c:5f:e6:7c:54:
         e2:20:d3:dc:b0:d3:f5:41:0c:cb:a6:14:84:47:53:86:57:5b:
         28:6c:b3:30:45:6b:28:26:27:11:5e:cf:c1:66:41:4a:e8:97:
         e2:39:ed:32:f3:d4:ae:13:80:e0:5f:d9:f1:63:db:b7:a4:a2:
         b6:f7:c4:b4:b3:73:fa:10:38:a3:4b:05:86:79:15:f3:2b:6d:
         5d:f3:6c:98:fd:9f:f0:ae:95:a4:0d:47:8d:37:87:56:a7:79:
         d4:f4:00:a0:63:33:06:5f:b1:d3:10:41:87:12:c1:79:6b:46:
         23:78:af:a9:0d:70:a6:24:cf:ef:7b:c4:3e:cb:7d:bf:e3:9b:
         1f:17:8d:77:2e:ff:9b:ba:ce:8d:f4:fe:8f:0d:5b:e2:10:42:
         c0:16:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----