Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File:                     MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier:          j/kFbFOjWr8s05CAt8/TPQIcmyum1V76gllOxSTyjTc=
Subject key identifier:   83:EE:1C:80:D8:6A:9A:A7:0E:39:97:20:3A:F9:CC:99:DD:3B:C4:AC
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer:       /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial:       0193576466A6AD718BAD7F34FFE53B19C3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 05:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:17 +0000
Files and hashes:         1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: TaT0VFKY73IDKBmrCxq9qBD848mChBKf7V6akh9KCR0=)
                          2: yW6FyxFyxn-CYpMYgNgtNFwD6M8.roa (hash: 99KxzR1XQ6rEWongZIaE0Ox2xrjgt+gVYnpr1qBe30M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:66:a6:ad:71:8b:ad:7f:34:ff:e5:3b:19:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
        Validity
            Not Before: Nov 23 05:00:17 2024 GMT
            Not After : Nov 24 05:00:17 2024 GMT
        Subject: CN=83ee1c80d86a9aa70e3997203af9cc99dd3bc4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:95:58:48:a9:31:62:ef:97:3a:d7:84:1e:
                    2d:4b:d8:30:9f:ba:0d:cc:0e:ce:27:d3:fb:74:39:
                    b0:60:fa:c8:ec:35:11:60:65:a4:96:48:08:9a:0f:
                    3a:68:56:9f:6d:87:22:4c:3a:2d:da:fe:02:a8:4d:
                    45:e6:9a:6d:7b:10:f5:a5:a5:22:16:bc:f5:9d:c0:
                    62:92:13:c9:6e:da:5f:a4:03:a1:2a:35:92:da:4b:
                    e0:8e:cd:be:dc:11:11:71:6c:35:51:78:ef:2c:88:
                    65:bc:fe:9d:62:0c:ff:f5:53:73:91:37:b2:40:81:
                    7b:7f:e6:87:83:5a:ee:2b:74:9a:df:19:fa:89:6f:
                    a4:42:f9:d1:fe:46:36:a5:22:e5:fa:5e:f4:4a:b1:
                    67:db:87:c6:15:bc:d4:4b:0b:d4:80:e0:bb:15:6f:
                    fb:07:cd:e0:3c:ff:19:ea:db:1c:e8:4a:b2:5e:70:
                    9d:0d:c5:8e:3d:6c:9a:c0:48:9b:0e:76:06:67:4f:
                    a0:29:b7:4a:76:c1:2a:8e:c3:ec:8a:e1:1d:06:41:
                    a5:d7:99:80:53:9f:0f:45:19:17:09:5c:fb:9b:2a:
                    54:08:f6:10:29:e3:df:69:0a:6a:42:56:91:fb:d4:
                    63:b0:5e:53:74:fe:ba:bd:ac:2e:44:c8:4a:bf:89:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EE:1C:80:D8:6A:9A:A7:0E:39:97:20:3A:F9:CC:99:DD:3B:C4:AC
            X509v3 Authority Key Identifier:
                keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:c0:e4:03:58:74:fe:43:ec:1d:dc:4e:8d:91:c6:23:5e:
         b4:c1:75:25:44:3d:cb:a1:05:25:23:3f:ee:75:5b:55:d2:6d:
         2a:1f:a7:ad:fb:a4:04:ca:d9:f7:20:68:f7:35:de:f0:31:e1:
         c0:9b:e0:20:f4:a6:bb:c3:43:53:b6:5f:13:89:95:9a:3b:01:
         99:32:a0:04:22:ca:1c:20:2c:b6:1a:33:d2:9a:d3:6f:a5:1f:
         44:0b:51:79:07:c7:d9:c9:d9:22:4e:4c:b4:09:d0:9d:3a:3d:
         57:c9:70:1c:40:e1:a1:7e:50:e3:63:55:d3:dc:34:e3:7e:96:
         bb:d1:d9:f9:8e:c1:26:f9:f0:4d:b5:f4:b6:c4:c9:b0:bf:10:
         3d:8d:85:fb:a3:70:96:e3:bc:35:12:29:36:eb:96:8c:88:a7:
         eb:45:e1:2c:68:6d:df:0d:29:f2:58:60:84:00:56:1a:ed:15:
         a7:9c:d4:67:bf:0c:3d:cc:64:ef:ea:cd:f3:4c:19:35:0e:3d:
         46:93:0a:c3:94:7a:c0:5b:2f:5f:b3:47:dd:0e:53:43:3d:14:
         c6:c0:ae:92:3b:79:ea:19:d5:4d:b6:66:90:cd:2c:c7:2a:c0:
         b3:6d:87:d4:13:ac:14:5f:e8:98:fc:a7:b3:e2:6c:75:ca:2a:
         3a:1a:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----