Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          WnLLo0sEzIpXSs/CadWh4AbopcTHFus54nAEo8nhkkk=
Subject key identifier:   66:DC:BB:FE:83:7D:70:3D:19:98:44:CE:DA:E9:2D:D3:D8:C6:DE:54
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019350BEFA0F6663EB520464DF1683A350AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          091B
Signing time:             Thu 21 Nov 2024 22:01:52 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:52 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:52 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: thzLi+DSKvxg2dYKVYzo6NQSQKiuoOJgdz0W9la1a80=)
                          2: 9pmvuyQLNPGKmvQ6L1rVdU7WuJI.roa (hash: 59nkCQnoiLFfQUmaazNfOfHHx+QZAZL5CxcZRD9gS98=)
                          3: RCr_A3s5Cl3Ngw2mr_4-OSBiFvs.roa (hash: F+y2KD9kmh00doqrk5LWPvY1FIS+M7/qIwwiVJTIs/s=)
                          4: lmtCWp6Wih8wZQpZnruWD8objVw.roa (hash: VN6oN50f3dDYJz7QbuBNUxZnFaj6WWan/9t6M/h0VPo=)
                          5: ufM4uDE1WgnaS4kBEdVjCdTVOMQ.roa (hash: H6IPGhC+sx8pX0bzqUL7+gdcT0D0s1XB5/P6g72mXkA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:fa:0f:66:63:eb:52:04:64:df:16:83:a3:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Nov 21 22:01:52 2024 GMT
            Not After : Nov 22 22:01:52 2024 GMT
        Subject: CN=66dcbbfe837d703d199844cedae92dd3d8c6de54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:06:34:bc:b9:96:ce:61:58:0e:9a:f2:d0:
                    ca:39:1c:fe:00:3c:f4:ac:47:bb:4f:e1:f4:c9:26:
                    a8:3e:d9:6c:4d:80:6b:14:30:70:a0:ab:df:0d:47:
                    39:6d:c5:7a:76:59:14:96:c8:a6:64:ff:ad:d4:da:
                    bf:b5:ec:74:72:fa:e4:1b:ed:c3:f6:1e:88:7d:f9:
                    15:f0:0c:2b:14:ab:38:91:d5:ad:ac:da:0e:e2:ef:
                    9f:f2:34:ee:76:22:6b:4c:4c:d9:98:f0:55:6c:7d:
                    af:d6:ec:61:d3:14:13:a5:29:9b:83:92:d3:4f:01:
                    7d:25:ba:4c:07:34:8b:d6:7f:6e:29:3d:eb:0b:86:
                    42:42:32:2f:de:a2:b8:9a:59:c9:4d:de:25:03:0c:
                    09:a9:4d:3c:17:4a:fd:7a:f7:71:d5:d4:f6:67:5f:
                    28:d8:31:7c:22:fb:f9:16:2f:85:0f:38:72:76:aa:
                    e7:a9:ac:61:8a:24:86:40:f0:2d:dc:2b:f5:48:c5:
                    63:dc:4f:89:1d:65:24:db:0b:d1:27:59:77:65:a2:
                    3c:b0:d8:95:0b:47:f3:4f:51:7e:62:63:83:a5:92:
                    b1:a3:9d:37:14:d8:79:15:0e:19:49:dc:b4:b2:c6:
                    0b:e6:43:6b:b0:e3:0a:d6:13:f0:79:fa:a9:d6:15:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:BB:FE:83:7D:70:3D:19:98:44:CE:DA:E9:2D:D3:D8:C6:DE:54
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:69:01:8c:f1:48:14:4e:35:6d:02:3b:d9:48:1c:94:58:
         b0:48:23:c9:8d:f1:e4:13:f7:a5:1b:69:74:12:6f:1d:0d:25:
         e9:4e:47:3f:65:a8:c4:f6:74:ba:dc:e4:26:81:4c:41:d7:ae:
         ec:84:96:9d:03:5e:6e:da:33:c7:b0:7d:0e:e8:49:a0:d8:9f:
         e7:cc:2f:25:d0:cf:c0:fe:0a:fb:94:f3:1f:98:d3:58:c1:78:
         75:b1:5d:4b:44:34:87:a9:d3:40:9d:00:bd:e0:80:aa:ba:37:
         97:1e:d1:e1:ca:04:a3:ea:24:e7:52:1a:d6:e8:9b:cf:36:b0:
         bf:ad:6e:32:5d:cc:04:cf:1b:f7:11:45:a9:b6:65:18:6a:2f:
         0c:9b:bb:1b:82:b1:83:79:31:1f:d8:d5:5e:66:6b:5e:96:72:
         25:e1:d4:aa:f0:70:c2:3e:0b:75:56:0c:0c:f3:68:e9:85:66:
         49:d2:4e:21:f1:03:6f:f4:fd:01:c1:e7:60:69:f5:3b:f7:c1:
         7f:53:56:c1:80:e1:8e:b9:ac:d5:b0:09:0d:22:ee:db:1e:4f:
         1c:38:5c:84:b2:9e:ea:c8:6a:a4:e8:5c:0a:38:52:31:be:dd:
         30:96:ad:92:91:e7:3e:37:82:9a:50:43:e7:a3:e6:3a:4a:b3:
         26:fe:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----