Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File:                     4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier:          TOJ6An+16IiYtkf9mkP9BpUD1UvvGZMYI1AqSCIrhp0=
Subject key identifier:   13:61:F8:5D:71:6B:84:E7:60:4E:51:89:12:EE:DB:CE:93:FE:D5:FD
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer:       /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial:       019355AD3C9A1AB38DCD7D5954E8D3DE25E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 21:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:36 +0000
Files and hashes:         1: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: DK1u+Qmt5Vdc8+NnLR2t9BMxmXA5l5kngL+9cYCFgPU=)
                          2: 8ILfYpD01k2SWXPtedrh0QU6ft0.roa (hash: +6CO7uoct66zzIzNhMedHPAWpMyvy0KRAuwNdGM/XaQ=)
                          3: TGK-y5pn75ezz81k2D5A8MYlv9c.roa (hash: k4+Jc05sDycolT25+KcoQBL9JGiTsNi7DkvV1yfgk4Y=)
                          4: c7ERG7I-Bz0xdYG8UT45RtBtjLE.roa (hash: M+WyXw6OA5NvCdxiOGFTPNGqKeUrbfJA41uCfd8/6zs=)
                          5: vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa (hash: TstkM8iWLe9RWMv0agD7BtjBad/RP9E8xb35rXfvPow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:3c:9a:1a:b3:8d:cd:7d:59:54:e8:d3:de:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
        Validity
            Not Before: Nov 22 21:00:36 2024 GMT
            Not After : Nov 23 21:00:36 2024 GMT
        Subject: CN=1361f85d716b84e7604e518912eedbce93fed5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:57:12:10:6e:91:5e:e5:c5:3e:6b:2e:10:
                    df:a2:a2:4f:93:ae:3b:ed:36:d1:0f:e5:d8:04:c6:
                    33:e5:c1:73:1f:d7:d6:2b:06:aa:f8:b3:47:c5:90:
                    00:21:2c:1d:12:13:9f:24:40:37:13:8c:82:46:f6:
                    4c:41:9c:26:7a:bf:06:74:f1:e5:a5:87:2e:74:d1:
                    42:66:d7:33:5a:93:63:b8:c7:b3:75:fe:24:8b:b8:
                    ba:bb:69:c9:e3:3a:39:ed:fd:ac:d1:c4:d9:1a:07:
                    bc:12:10:e0:cb:0b:67:72:13:b0:93:36:a5:f2:27:
                    4f:59:aa:83:e7:90:7e:1a:b9:29:76:35:09:9b:db:
                    7b:e3:18:64:9c:08:ee:43:04:76:76:93:0d:f3:6e:
                    d3:f9:92:5d:36:26:a0:25:92:30:2c:b0:40:3d:53:
                    d4:ef:d3:8f:a6:2e:54:d4:e1:8a:80:85:ed:f2:ef:
                    c0:bd:44:5f:d7:44:0b:9c:cd:74:62:0d:69:41:bf:
                    3a:5f:32:be:ba:51:7d:12:d5:95:e5:f5:1a:20:a0:
                    0e:48:3b:0f:e0:9b:b6:2e:c7:6f:96:15:97:14:99:
                    05:42:1e:c7:49:2c:31:b8:37:03:4b:42:5d:a0:dd:
                    25:1f:bb:94:e6:ad:34:2c:cc:6a:cc:4c:16:e8:a4:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:F8:5D:71:6B:84:E7:60:4E:51:89:12:EE:DB:CE:93:FE:D5:FD
            X509v3 Authority Key Identifier:
                keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:dc:df:1b:4a:a2:b3:35:cb:e5:88:1f:2c:b2:73:89:4b:
         6b:f5:5d:67:aa:1d:2b:c7:77:13:67:4b:12:ac:d9:ec:ac:6a:
         70:95:e9:b1:ca:88:0b:b9:1d:f0:00:38:a8:54:5c:60:b0:85:
         90:39:a1:64:f5:5b:b3:ca:7d:e3:b6:f6:5e:1c:c0:45:e9:15:
         d1:64:89:9c:4f:1f:3e:08:96:e9:1d:4a:8d:15:15:d5:4b:0f:
         e5:d1:cb:f1:a8:62:ed:5c:ea:b2:1d:b8:d9:28:f7:f3:c3:d5:
         67:1e:89:25:37:5c:28:99:37:8e:4e:8e:89:61:f7:d1:b7:77:
         8e:50:96:dd:e9:70:78:c4:bf:6d:8d:bd:9f:d8:09:a7:84:3c:
         4e:09:7e:f1:64:0c:40:1c:ce:00:b0:e3:81:b3:6a:1a:7f:6e:
         72:b4:18:37:b0:69:81:72:27:85:5f:a5:06:8a:a4:10:6e:b6:
         f7:42:08:fe:9b:42:07:c9:01:7c:8c:97:b1:ff:7c:0b:74:8a:
         37:4c:dd:80:8d:b2:be:6a:fd:7b:fb:df:ef:4b:4c:83:b3:99:
         00:f5:0c:14:e9:94:52:37:ed:2e:ea:30:15:0c:53:e1:59:16:
         9d:87:e9:4f:db:65:66:00:0a:40:ad:64:02:85:64:9d:7b:2f:
         40:06:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----