Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File:                     ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier:          4yUXyn+TpcaA6CmGIHWdwaB4Yz9LRTKqdzrlKXVaILU=
Subject key identifier:   DB:D5:52:8F:46:3E:0D:85:42:70:F8:6D:EE:9B:4F:4B:47:5B:56:81
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer:       /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial:       019355AD01F9AE806E49784B027F17E9CECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 21:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:21 +0000
Files and hashes:         1: 0vR66II5NnXeOcGT8OSjnpBOIDs.roa (hash: dPATQiQ+YDGuo+futK2uBr67hUvyn/bVwzwPpZOjcjU=)
                          2: 1hVmOvWIQ_wYr8AsxLcTymIO1C4.roa (hash: 462FalhaQLLmzsdecaU9Ph7+A1K2olY8Ro/Cw+dPnZw=)
                          3: 7cJEoaG2jFNHp3YKScMXz4ulbHM.roa (hash: e1RZqA1JgLnHQih10dXd3xHe5FgWGFHXj/WFYlhw21k=)
                          4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: vvMIxM/kKxzVjtFjnonzYML6mBPZdec+dkKdMoooOtM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:01:f9:ae:80:6e:49:78:4b:02:7f:17:e9:ce:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
        Validity
            Not Before: Nov 22 21:00:21 2024 GMT
            Not After : Nov 23 21:00:21 2024 GMT
        Subject: CN=dbd5528f463e0d854270f86dee9b4f4b475b5681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:12:7e:ac:ee:8e:b4:92:38:d9:13:0e:57:
                    5b:d0:8e:91:49:83:ed:e2:d7:02:d7:dd:c6:6b:4f:
                    14:45:47:29:b9:19:06:d2:bc:fc:37:0d:c4:c4:a5:
                    f6:54:43:ed:c8:d7:e9:14:ff:5a:f1:b8:38:c3:55:
                    b3:04:00:28:b3:00:0e:f9:db:d1:e3:e0:3b:ae:d0:
                    45:e4:19:92:4c:2d:b4:58:85:92:c9:1e:66:ab:b4:
                    fb:f2:4d:fd:16:e6:98:71:f1:b5:96:8b:77:1d:1e:
                    28:4f:71:d4:d2:b8:23:cc:91:7f:d2:cd:bb:86:cb:
                    1a:d2:be:eb:59:97:86:56:77:91:95:8b:50:6f:f4:
                    d8:f1:6e:12:40:f7:74:82:cc:33:39:35:79:b1:c3:
                    bb:1f:1f:f5:33:0f:eb:81:19:78:44:20:f7:10:5a:
                    85:32:32:df:c0:fc:59:68:d4:8a:d8:52:1b:7c:ee:
                    66:a5:04:e4:1e:ca:ed:fb:95:30:aa:0e:b9:8f:fd:
                    58:45:70:aa:a2:48:16:78:35:59:29:a6:38:ae:92:
                    56:74:00:23:95:27:35:1d:60:a6:12:ff:9e:8f:1e:
                    8a:d0:d2:08:4f:f8:8b:72:21:01:45:05:c0:a0:9d:
                    f0:3a:2b:ec:4a:9b:51:f4:4d:5d:9c:06:16:1f:52:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:52:8F:46:3E:0D:85:42:70:F8:6D:EE:9B:4F:4B:47:5B:56:81
            X509v3 Authority Key Identifier:
                keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:8b:45:19:ea:db:34:f5:c4:04:48:65:8c:12:09:21:93:1b:
         0b:44:d3:08:2a:5e:99:f4:39:93:90:0b:8b:c3:e9:2c:c9:b4:
         6d:3f:1e:58:69:38:4b:5b:49:b5:40:d9:0f:2d:03:65:c9:87:
         67:4b:33:b2:6a:bd:ec:5a:d6:6e:59:29:1e:54:09:63:d7:3b:
         cd:aa:8b:82:b6:cf:1e:0e:79:1d:d0:92:24:67:6a:d5:6a:55:
         4e:51:17:f1:9b:c8:e4:33:bb:d9:5e:e4:3b:d4:62:b7:8e:46:
         9b:c6:68:23:06:32:f1:b9:0b:39:67:47:bf:35:c0:b7:ea:a1:
         95:9c:02:2f:79:61:22:03:05:89:d5:fa:71:11:40:62:8d:a8:
         1b:79:05:12:9e:cc:96:f5:44:44:36:d2:90:21:64:7c:a2:a3:
         f0:fc:51:9d:aa:f5:a2:a3:11:ce:b9:9f:de:e0:04:45:1e:2f:
         5c:04:36:e0:1a:e8:e8:89:ba:83:46:97:5e:b5:d5:27:5e:04:
         e2:95:ff:b1:5f:4a:4f:6d:4b:2f:74:fc:80:fc:25:9a:b2:e4:
         8f:d6:06:88:85:67:b0:2b:94:a1:9a:49:a1:8b:15:8d:b2:7c:
         43:d8:fc:9c:1a:a0:fc:86:bc:fa:bb:e7:e0:b5:61:7d:67:bf:
         99:89:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----