Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          e3BdL1zlbtlC249xJuQ9gpd0xF+S8yYUeGOsh+amFj8=
Subject key identifier:   75:D3:24:86:01:DE:7A:66:DC:6C:0D:36:2B:4B:C5:F2:15:39:1F:5C
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       0193576483B5BD5BB376C7A872371207BFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 05:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:25 +0000
Files and hashes:         1: Uw0T9HAMb4KJumS2TUTy9DiW80g.roa (hash: 0b8UCTu2pMPMMq69i9oYTXSb0GtvAZ1rNv9l/nhef34=)
                          2: p7pjylcwBbPNmwGxAjUlCwTWYW8.roa (hash: 7zc0AT21s1IhQuIFGDGyxAoISI1ow5I42e0tXtGi1Yk=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: Re55fsonKOGrL4Purz3XCsSsu9SNsgRgmpDNnIZno/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:83:b5:bd:5b:b3:76:c7:a8:72:37:12:07:bf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: Nov 23 05:00:25 2024 GMT
            Not After : Nov 24 05:00:25 2024 GMT
        Subject: CN=75d3248601de7a66dc6c0d362b4bc5f215391f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:c1:a0:bf:28:8b:28:f0:6d:57:0b:59:85:
                    d8:e5:a8:82:8b:0b:08:48:11:1a:ed:41:61:e4:b4:
                    d9:53:db:89:29:dc:77:38:a8:6a:df:6b:37:7d:c2:
                    23:4f:93:7b:eb:a3:66:b4:9f:55:93:f9:32:ca:d7:
                    2d:9e:f6:d8:40:3e:05:ad:2b:7e:55:d7:c2:c5:d4:
                    c2:52:ab:05:78:61:dc:65:c9:d4:a1:7a:f0:c4:c3:
                    0f:0a:62:cb:f1:45:f6:9d:fd:b3:64:a2:57:02:6c:
                    de:1e:ba:8a:c4:60:8d:42:92:fb:bd:bb:2a:28:5e:
                    ed:c6:cf:c9:7a:51:69:43:1d:c1:bf:9c:dd:b3:5c:
                    a0:d8:95:26:07:24:96:86:00:74:06:c2:ef:c4:e8:
                    bb:4c:a1:c9:58:15:d7:bc:69:1b:c2:04:1a:d7:5e:
                    4c:5b:ac:e8:73:1d:4d:bd:ab:f1:01:b3:7a:08:d8:
                    c4:11:f2:09:19:98:5f:73:da:42:49:4e:6f:7d:2a:
                    1d:f6:91:6f:b3:b6:1e:53:82:9a:45:23:c3:18:70:
                    f6:06:86:15:c6:7c:44:3d:2e:df:98:8e:4e:7d:b9:
                    52:5b:9e:c3:50:3b:91:10:56:a9:df:59:d6:c0:62:
                    c1:24:ad:ad:65:2f:be:89:8e:de:58:5e:d6:89:49:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:24:86:01:DE:7A:66:DC:6C:0D:36:2B:4B:C5:F2:15:39:1F:5C
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:89:4a:31:8b:39:da:63:86:36:eb:b7:74:68:31:ce:c7:44:
         a1:37:ba:af:be:0d:c7:61:f7:0e:a8:f0:90:d6:bc:59:67:e8:
         c7:fa:03:e9:1e:a3:f8:1c:89:50:66:e8:ec:c7:f5:bd:a0:3c:
         b4:39:68:ad:a8:23:17:98:13:44:48:5b:3f:b4:eb:75:f8:c9:
         5f:00:ac:37:dc:34:2d:9d:8b:2c:6d:a5:61:1a:e5:fb:29:8f:
         3c:34:56:58:ff:6e:68:6c:39:99:06:d4:a4:c8:22:6a:60:78:
         2f:df:39:ce:a5:2c:ff:c3:f0:4b:c5:26:40:25:93:c4:4a:1b:
         9d:f4:a2:6c:54:86:bf:31:59:4d:20:7d:45:b5:fb:e9:b0:ce:
         f6:97:15:36:82:43:c3:8d:e2:be:b1:8d:fc:32:d4:23:87:4c:
         d6:96:a9:74:34:ec:43:69:9f:47:33:36:84:c6:88:c9:62:8b:
         8f:52:dd:8a:4d:e9:30:55:fc:28:a2:37:3e:e8:28:42:b6:4b:
         a5:c4:39:7c:a8:52:2e:d9:7f:01:85:4c:da:be:fe:4d:5c:15:
         e3:61:13:46:8b:2e:4d:1d:e5:0c:10:b0:72:9d:3e:11:3c:2b:
         2d:d4:8d:62:36:6c:33:d3:27:a8:fe:2d:4e:93:a5:8a:c1:2b:
         15:8e:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----