Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          X/7vnao9WraBZr16bvWkotud4LiCYav4b7QQhBrK4bY=
Subject key identifier:   A8:0F:6F:E5:2B:09:1C:CC:ED:6A:4D:6F:D6:71:2C:F2:67:57:9A:D8
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019352E2C261304ACCEF8BEE4ED013E6093C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0285
Signing time:             Fri 22 Nov 2024 08:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:12 +0000
Files and hashes:         1: ETym3QMMYsA6NHfS5rhEm6mRrmQ.roa (hash: 2Lae7QETOfsKK2be8B8VQ+bXSaJLtFR8xlNUI9hM0rc=)
                          2: TePwxizWnFvpzoVVWY26uqWo5SI.roa (hash: /9wrN4mKxbnuivx9oLx/mSSOj6zFbtfzkl28Zd1W9f0=)
                          3: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: NzEBqgHL4nlXIDft+PmIXI/CshMIlSuvB3QXRm/qyeo=)
                          4: VSlQiuNSOgRVrAhkUNTpKSuCLAw.roa (hash: fN0c57n+Ss1nFLK3SE9ppJ8DVP85HhofcxeXgScdw2I=)
                          5: aYsqE8P7Xjo0tF1VjWoEUqczQ0Y.roa (hash: vz6HVZxrvX+zOIUYvsa1nQRS9Zf5faMlAxesKKujTgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:c2:61:30:4a:cc:ef:8b:ee:4e:d0:13:e6:09:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Nov 22 08:00:12 2024 GMT
            Not After : Nov 23 08:00:12 2024 GMT
        Subject: CN=a80f6fe52b091ccced6a4d6fd6712cf267579ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:fa:24:6d:96:f8:04:58:1f:3d:33:ac:6f:
                    7f:82:c9:d2:7f:e6:bb:8f:a3:1d:e9:da:36:57:22:
                    0e:65:52:6b:6a:03:fa:ca:bc:61:fb:25:a0:61:54:
                    14:b8:36:23:d3:3a:75:42:a7:d4:97:9f:b7:1f:e0:
                    30:3e:fc:7d:4d:0c:fa:d2:e1:f3:1b:07:cd:16:c0:
                    2b:7a:08:a8:2a:08:d1:f4:ee:6a:07:f8:44:1b:c5:
                    a9:5a:0f:88:9d:3b:c5:22:07:75:5f:ed:4e:1e:a7:
                    79:21:52:38:18:07:4a:3d:20:8d:3d:1c:bf:e4:0e:
                    c6:b9:19:c6:c4:07:ee:29:0f:b4:f7:61:a9:d0:3e:
                    60:c5:33:99:06:69:c1:05:d2:fb:76:bd:e1:4a:e6:
                    3c:4a:b0:25:06:36:22:73:9b:ca:b9:61:25:1a:1c:
                    da:5d:bf:42:92:19:59:92:be:15:2b:e1:96:b7:de:
                    cd:4c:c1:1e:72:c3:e8:6f:8a:4f:77:cb:6f:5d:d1:
                    85:12:40:31:01:2f:ba:85:c8:91:27:63:17:dc:e6:
                    4e:4c:7b:6b:f4:e4:94:4b:fb:2a:3c:a4:0d:6f:0f:
                    2b:2c:c9:0d:ae:d9:fd:56:3a:69:c3:7c:20:3b:d0:
                    59:65:19:13:e7:e5:60:ee:95:62:01:b4:b3:19:4a:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0F:6F:E5:2B:09:1C:CC:ED:6A:4D:6F:D6:71:2C:F2:67:57:9A:D8
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:42:cc:09:98:85:bc:83:92:ba:b2:21:53:26:96:ee:59:
         91:a1:2a:31:8c:3d:a0:f9:d8:0c:41:95:0a:ad:39:8a:07:f0:
         9f:e1:90:37:27:86:89:70:5a:0e:54:82:f2:22:36:63:c6:84:
         56:cb:46:f1:23:80:c2:9c:42:46:10:35:18:fd:05:54:80:1a:
         3d:72:9f:6f:5c:c8:55:b0:01:f9:19:55:b8:d0:d2:29:b9:ae:
         a5:ad:ec:d1:1a:42:4c:64:6d:69:51:28:6f:3b:9c:3f:9e:27:
         e5:f8:7a:3a:2c:ad:67:c2:fd:78:18:09:cc:f5:08:31:2d:5f:
         22:50:85:ba:57:c4:a0:56:e7:e4:02:67:2e:1e:a7:be:59:4a:
         88:cc:be:97:d9:ac:31:25:92:6e:3a:e1:cc:01:2f:7b:ad:7a:
         29:5c:66:db:3a:21:3b:ef:a9:04:79:0c:f7:af:ab:58:c4:a2:
         c3:eb:74:c6:5e:40:c9:54:eb:2f:bf:ed:ae:96:94:8f:3e:c8:
         d5:2f:cd:33:07:9c:3e:5a:db:19:1d:bf:ec:fb:22:48:0d:85:
         61:05:0f:2e:8d:5e:14:21:d4:e9:fc:74:e9:47:11:32:78:fb:
         24:a9:33:ed:66:06:40:04:f8:a3:37:76:12:e9:08:da:2c:1d:
         b2:69:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----