Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          ANPO90wph3JjkUu2f6kDdqXWZdQXMTBhGdJvzZ+qdtg=
Subject key identifier:   5F:E8:94:25:7E:57:88:CC:92:2C:60:3F:D4:D2:2F:6A:6C:B4:DD:1A
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       019353F57D8874A32052DF042A5B7FDB3CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          0A00
Signing time:             Fri 22 Nov 2024 13:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:17 +0000
Files and hashes:         1: 88hqBD6YLyRKT_0Xd25ipvWCuyc.roa (hash: 6k4oZXCffuUGy8Qvvtblh2V2GPgy1/ReNxsB0YmmJ3U=)
                          2: 8GTzP2K734ORtagvy-Fnz2Fc9co.roa (hash: WPSzSrhuU7yox2/YcNiJpMioeljolxmAMbRoBUAlJoA=)
                          3: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: p6dOvf5m0oDczGBHfvW1DNiw/lGQSYDF/Q1vyAR1+7c=)
                          4: M-N59dC2LyrQtfsH4MAezEx0DYs.roa (hash: 00TfN23v90LE3eSjKQcZlXJGAQsbswrFg80to41Cock=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:7d:88:74:a3:20:52:df:04:2a:5b:7f:db:3c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: Nov 22 13:00:17 2024 GMT
            Not After : Nov 23 13:00:17 2024 GMT
        Subject: CN=5fe894257e5788cc922c603fd4d22f6a6cb4dd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:85:7a:53:3e:88:0c:c3:36:65:02:48:df:
                    13:71:0d:cf:0f:3f:bc:71:23:a1:d1:cd:8c:1b:eb:
                    6a:5b:91:e4:89:cc:0f:bd:22:cf:63:35:cb:dd:ea:
                    98:15:01:b6:5f:2d:3d:c2:5f:2d:0d:1f:11:82:b1:
                    89:1f:99:de:08:6b:e7:b9:55:15:9c:90:60:d5:3c:
                    e1:01:bd:5f:48:78:45:b8:5d:89:1c:4b:94:39:eb:
                    70:85:69:ba:78:a8:45:44:d9:6e:59:dd:70:a5:a5:
                    6b:a9:c7:f1:2f:40:42:70:cb:36:02:03:b7:29:a0:
                    db:e3:68:11:07:6b:5c:43:d3:14:96:ca:7e:10:06:
                    07:eb:05:f1:b2:86:d1:2c:e4:77:d7:ba:08:23:fc:
                    3d:04:49:09:eb:e1:f9:bc:50:cf:57:ff:cf:6c:21:
                    26:13:b6:ca:1a:ed:4d:15:ee:74:99:10:bd:ad:2f:
                    3b:9f:63:b2:6b:25:9d:f6:99:47:38:49:a4:95:a4:
                    0e:40:53:34:e6:1d:fc:10:b8:25:d1:43:0b:56:ad:
                    b0:93:a4:51:8b:f6:d5:8d:18:af:d9:d9:4d:28:41:
                    2b:af:94:84:e3:e4:54:58:f6:b0:8d:8b:fa:a2:b6:
                    3f:f2:fb:34:ed:fd:f0:36:87:e8:4e:6c:5e:fa:53:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:94:25:7E:57:88:CC:92:2C:60:3F:D4:D2:2F:6A:6C:B4:DD:1A
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:c3:15:7a:f5:80:50:6c:52:0c:55:53:2e:a4:62:79:80:
         cf:be:1c:57:4d:a4:14:13:81:ec:be:f2:a7:d6:e8:5b:33:a3:
         f7:3f:f9:e0:5b:64:94:4d:92:58:b9:9b:6a:fa:5e:4a:2e:d8:
         13:2e:25:e3:01:dd:ed:e0:2c:73:3d:13:94:20:68:f0:bf:cc:
         b6:c0:20:c9:93:d2:ea:24:bf:e1:fa:c9:ae:50:71:0b:01:cd:
         16:ae:a7:bd:b0:40:c9:3e:ed:fa:92:f0:c7:bd:6c:7c:ed:99:
         a9:34:9f:d0:a7:51:0e:7a:f3:e1:d4:38:93:1c:5f:90:47:46:
         56:b5:6f:4d:68:47:2d:07:36:14:5c:76:c8:a7:e6:f7:69:83:
         b3:77:15:71:de:41:58:16:b8:3d:f1:1e:52:34:1a:68:a8:0d:
         ef:75:aa:57:87:08:2a:db:5e:23:a4:ba:7f:4f:a9:9f:90:f4:
         a9:ba:b5:ea:8e:14:04:ee:8d:75:91:70:df:85:e5:f8:0b:e9:
         b8:cb:b5:8a:13:3f:da:f8:82:99:fd:97:60:f5:dc:b4:35:ce:
         8d:59:fb:ec:b3:50:01:72:05:83:88:ab:ee:4d:e5:ba:c6:23:
         0d:f7:76:58:68:05:1b:7e:4a:1a:e6:a2:e5:18:72:a2:97:13:
         13:35:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----