Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File:                     R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier:          jJnrklZ/tOnv2WBOBKJE7jt+pVt7zbkM71/pPfpmOaY=
Subject key identifier:   D4:AD:67:2D:2A:EA:64:EC:3C:FD:AD:96:AE:D7:BB:D1:CE:AD:15:04
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer:       /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial:       019369D8E43921D893C03EC7264471AAA78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number:          0525
Signing time:             Tue 26 Nov 2024 19:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:42 +0000
Files and hashes:         1: KzjuDcAG1spTjgwprmz0htgXoUQ.roa (hash: //YbDUZK0VEB87ilMEvu0OIADezqKmr30CfQCaLCMJI=)
                          2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: kGlXOamUAWOLpoegSfk/uzBdsVCTZ3DsgJoASNAis5I=)
                          3: Spr7XYr4Eg0E5NoymTlFVbuRPc8.roa (hash: +iKawylRL616JcFjbydkive5RVbnS0dDkv/FtKlbFpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e4:39:21:d8:93:c0:3e:c7:26:44:71:aa:a7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
        Validity
            Not Before: Nov 26 19:00:42 2024 GMT
            Not After : Nov 27 19:00:42 2024 GMT
        Subject: CN=d4ad672d2aea64ec3cfdad96aed7bbd1cead1504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:92:87:79:4b:3b:94:d9:f8:8e:9a:b9:6b:
                    68:c6:0a:37:a9:1f:e6:ff:28:0e:1d:f7:97:dd:db:
                    8b:f2:87:3c:50:c2:1f:25:52:80:18:db:27:9c:8b:
                    90:16:15:fd:00:bd:b7:b7:d1:b0:67:3b:71:fa:92:
                    2f:c3:ea:a1:ae:21:c1:74:44:a0:89:3d:84:3a:36:
                    03:a6:b6:3f:96:08:36:eb:cd:59:52:bb:d6:e2:65:
                    69:c6:2e:57:7d:5c:67:fb:1d:b9:e6:46:ac:0b:53:
                    84:66:b8:e2:d5:51:53:97:d7:10:b6:2e:6a:67:ce:
                    c2:ce:7f:5e:4c:c5:17:ad:64:26:ef:86:a5:c5:1f:
                    cc:b9:9d:74:ed:43:25:f5:6e:e3:c5:a0:14:04:ce:
                    97:4f:2e:40:b9:1c:f9:c9:f7:25:4e:1d:38:9a:80:
                    a8:cd:7e:34:51:0d:9c:6e:fa:e2:64:5d:a1:61:c8:
                    61:ed:2b:34:8c:3f:68:12:ef:2f:72:8e:b4:8c:8d:
                    91:b5:92:03:2d:f7:af:45:c9:54:93:74:52:44:e8:
                    75:0b:b4:a3:c5:13:03:cc:28:9d:07:8a:3c:f9:18:
                    a5:92:fd:0a:34:8e:da:e7:fc:fc:73:53:23:77:f3:
                    e4:c6:d5:fe:35:a1:85:e9:84:e8:fb:59:7c:e2:b1:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AD:67:2D:2A:EA:64:EC:3C:FD:AD:96:AE:D7:BB:D1:CE:AD:15:04
            X509v3 Authority Key Identifier:
                keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:04:57:8b:43:1e:f6:2f:c6:3b:63:32:ac:cb:f7:2c:5f:
         12:63:e0:23:d2:1f:a0:a2:0d:1e:ec:29:b6:57:4d:f7:f5:2e:
         13:0e:61:2d:e3:21:a3:1b:31:8e:14:f8:4c:9d:61:08:e0:0c:
         1a:dd:75:8d:4c:21:fd:74:34:93:e9:b7:06:7a:90:d3:d5:0f:
         18:55:b3:f3:6a:64:b5:9b:fb:3d:93:ce:56:a6:f0:42:fd:4b:
         28:af:23:13:33:a9:a6:46:b7:00:22:0f:18:9a:04:a7:37:83:
         e6:86:c3:f3:7d:d9:4f:66:4c:52:4b:58:c3:e3:66:6d:28:36:
         48:6f:5a:b2:d4:b8:62:aa:9d:7c:6f:07:90:af:2e:24:8a:ea:
         39:78:81:b9:46:66:2d:7c:c6:d8:49:8f:0b:98:6d:e4:09:26:
         9e:e2:1d:e4:35:f3:f3:e2:19:e5:49:96:d4:45:4a:97:87:45:
         a9:08:d1:c4:79:51:a7:57:7d:a3:d4:c0:78:6d:af:a1:a9:8f:
         51:2e:2e:25:71:03:1b:5e:45:07:73:6c:00:ec:5a:31:fb:85:
         91:71:2a:3a:ae:e9:09:3e:f9:8d:26:c4:c2:98:a9:de:7d:85:
         37:d7:d8:4c:a1:8f:d7:84:db:b9:f5:e3:46:5f:6d:49:ea:a8:
         ba:2c:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----