Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          yFGkZdWqZwkxUHG7FlnUNYKlGrqIYzMzV9fUYLf62a0=
Subject key identifier:   27:84:DD:A1:F1:F0:99:EF:71:F5:F9:69:98:42:1A:34:BE:A3:E5:52
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       0193549A455E78DF7948329CF1A210EE4610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 16:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:16 +0000
Files and hashes:         1: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 3VhHnQs4nxAdrtgXVzZvYNNzKsIrbv43pFKpAlBSO/Q=)
                          2: LnPFoc4cGs4GWw-mRQ0VGV9iebU.roa (hash: ZFmBo/66RmkoLk16gsrD6+aEEV9Bm5QIhLbS00/4VhI=)
                          3: W6MCXEMmSlcHQgYP-PdKDmfvjx4.roa (hash: 1rMNai6M6pWZ/4Pg1TTvQQKn4YtFxyeHWjdCmZYR3Zs=)
                          4: giCpem3HHy-zB_gxyIZ9jhScZJI.roa (hash: ZfJELw4HW+zPF8lnH+S33q6PC/IAYgqyCSlQx6KJ/4Q=)
                          5: rKEZo0oYU9tLhv3tcHwG77gu4GE.roa (hash: PQuI7+Zv4i1eDMENDcHwBeDCNYlTNlIybpqB8eRLebQ=)
                          6: upMcYTvIa-OEIpITb_FmhVimkK8.roa (hash: L2esYz5HX0SuEgdHE4j2hyRvBxUtwxJjYbGncMeH3p0=)
                          7: yuxNU6MO_mM_31zidZRELq1ok-4.roa (hash: TXTlevC06UgNXbAKGIlXR1AKPL8nnt1j9nA5F96g8r4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:45:5e:78:df:79:48:32:9c:f1:a2:10:ee:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Nov 22 16:00:16 2024 GMT
            Not After : Nov 23 16:00:16 2024 GMT
        Subject: CN=2784dda1f1f099ef71f5f96998421a34bea3e552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:00:7d:7f:1a:94:e6:0c:8d:4a:62:35:b3:
                    05:21:d0:99:53:cb:18:d3:4c:42:c3:fb:5f:fa:06:
                    d5:a6:6b:6e:30:cd:e2:19:5c:87:5c:ff:1f:58:d4:
                    dd:a7:eb:48:26:0d:23:73:10:3f:03:ba:92:42:0c:
                    65:2f:69:d3:9f:c7:cb:9e:aa:21:5b:02:9e:2d:bd:
                    1e:98:c3:76:3d:d1:b9:c7:11:2d:f0:d1:5d:73:6b:
                    95:80:f3:42:5a:a7:02:ec:30:79:6e:4d:92:7e:cd:
                    05:89:fe:fb:b9:3e:52:e5:3f:16:03:53:c6:94:2d:
                    46:39:e9:73:c5:a1:86:65:c4:05:06:ab:73:61:3c:
                    11:81:26:1f:4f:20:27:00:62:5c:06:81:1f:53:52:
                    15:bd:b4:ed:ca:81:8b:eb:97:7d:f5:68:e2:09:e8:
                    10:0d:8c:7f:8a:59:12:89:37:71:33:85:18:ac:f5:
                    87:a6:33:7d:03:0d:f0:ac:83:cf:77:ac:82:48:2c:
                    be:97:a2:1c:d9:4c:90:5d:f2:cd:07:10:3e:7f:a2:
                    07:c0:f3:17:f7:00:25:97:52:6c:59:6a:3e:08:9e:
                    92:d8:0c:7a:4d:8b:90:1e:80:90:b4:d5:8b:aa:ff:
                    1a:58:97:a1:4d:1a:97:dd:13:2a:40:0d:22:74:51:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:84:DD:A1:F1:F0:99:EF:71:F5:F9:69:98:42:1A:34:BE:A3:E5:52
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:49:17:f4:bb:f0:ec:fc:28:d7:fc:07:29:f8:a6:9b:7d:1f:
         f3:03:3b:74:0e:98:c8:e7:15:a3:34:e4:2f:d3:13:2b:08:58:
         8d:55:aa:1f:15:1e:fa:8e:b2:27:70:0b:a1:c3:56:96:6e:ea:
         dd:7c:7a:3a:c2:d3:a2:8c:00:b6:af:74:de:6c:74:f9:89:c8:
         47:79:02:ce:61:cb:d0:6b:09:55:d6:03:6b:3c:17:9e:58:e3:
         07:a4:9d:52:58:3a:08:22:80:b6:60:e6:76:54:cd:31:23:51:
         4f:0f:b4:14:c2:1e:57:bb:cf:fd:46:ed:21:25:77:4b:3a:72:
         bc:e1:f9:33:7d:0d:53:7b:31:f7:98:c4:4f:d9:68:5b:15:ab:
         14:23:42:74:f4:95:dc:3c:6d:1e:4f:d5:41:77:c5:e0:e1:eb:
         5e:a8:23:3e:7f:0d:f8:d0:e9:f8:6c:c7:9b:99:dd:22:2b:83:
         0d:3f:22:bc:93:d2:7b:0b:9a:67:99:7a:23:d4:b6:16:86:ca:
         3c:38:09:79:d0:e5:4d:02:13:0b:a1:0e:ea:20:52:64:32:3d:
         ee:7a:b4:c4:35:22:d0:83:27:f2:ed:29:61:d7:3b:de:cf:25:
         1c:7b:55:87:55:74:f9:1c:21:d5:83:a2:b2:db:e8:7d:a1:55:
         6b:14:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----