Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          W6dBJZjcoZz2aBa4jsDVFIJuPL3Aawdj/1qZ1iNSZQI=
Subject key identifier:   29:86:9B:50:57:CF:67:C3:97:7B:9D:84:34:CA:62:7D:6A:EB:D0:91
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       01935809162925A5F5E7240471CE6EC97291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 08:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:10 +0000
Files and hashes:         1: DiORFY4CEGoRtiKQl2Y1yFQm1Ks.roa (hash: mW0TlhU+KjDBSizFF7bKGQz/6VzX6HD0y9rd1WyhrZI=)
                          2: ipB0oEpWyGOsLNmJDcIw_eIzwLg.roa (hash: 1Xxsced/zy2cm3qg8amH5THAAG6R+z4lkP6NM2K/320=)
                          3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: tpckp938/yE8EusRHTKvAoWiQ0af54qSatMJNaGsA5A=)
                          4: rr593Ob00FYjAFlH0QZvzN-_Ayw.roa (hash: 5QNthqdRmtyYGix93PqWH6fjW8tm0D4fbxRPFM4Lli0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:16:29:25:a5:f5:e7:24:04:71:ce:6e:c9:72:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Nov 23 08:00:10 2024 GMT
            Not After : Nov 24 08:00:10 2024 GMT
        Subject: CN=29869b5057cf67c3977b9d8434ca627d6aebd091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:84:29:8c:ff:b7:07:dd:cb:7d:34:a9:40:
                    3f:5d:2d:b8:2f:8d:f4:e3:28:4f:b3:08:19:ba:9d:
                    21:ae:8c:f3:fa:c0:a5:c8:2d:dd:13:ce:2a:80:ae:
                    c9:95:41:d7:e2:cc:5b:6e:93:54:c6:cd:62:f7:42:
                    cd:a0:6b:c4:b8:8e:55:d7:97:1e:b0:0a:82:6c:ad:
                    29:8a:8f:73:74:d2:e7:c0:48:51:1a:76:f0:2e:1c:
                    86:e4:b3:80:df:61:25:83:0f:61:02:61:1e:a3:c0:
                    80:5b:ba:7f:d9:f2:32:5f:31:55:73:84:8d:64:0d:
                    9a:08:98:c5:fb:08:e8:7b:45:5e:bb:96:c9:b4:89:
                    c4:60:ec:9d:82:a9:ef:bb:5e:2d:ef:99:cb:26:da:
                    b9:49:0d:f2:c0:95:66:ef:47:d9:08:0c:7f:07:ce:
                    b2:f4:19:96:a5:d6:be:2e:28:a8:be:ab:93:bd:b8:
                    3d:ee:73:63:23:e3:26:b3:0b:ab:21:fc:da:ad:7b:
                    06:ea:8f:d1:17:f6:30:c6:ea:a0:c8:9d:dd:3a:e7:
                    a0:cb:8b:3a:68:b5:fd:ef:4d:bb:a0:02:e5:d4:ee:
                    a1:86:cf:7f:4c:9c:65:c6:a5:ad:73:98:51:78:23:
                    55:2c:07:4f:83:b0:ef:d4:5d:83:08:f6:71:0f:eb:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:86:9B:50:57:CF:67:C3:97:7B:9D:84:34:CA:62:7D:6A:EB:D0:91
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:65:91:c2:b8:e9:5d:e1:71:4e:17:0f:7b:64:13:34:37:
         32:af:64:25:9a:4e:5d:5a:55:05:a8:97:6f:aa:3e:3e:56:58:
         a4:29:93:6b:87:bb:08:96:f1:93:08:f5:da:9e:54:53:f3:d9:
         9b:fa:2b:a8:84:63:88:c4:9c:d6:4d:bd:52:b1:f9:d4:c3:2d:
         aa:b8:ce:96:2a:cf:4c:e8:49:3b:82:e0:be:45:9f:7c:bc:7c:
         bf:ab:16:fb:84:db:6e:f0:ac:1a:2b:14:2c:12:d8:e0:d6:ba:
         f7:22:f5:e3:74:17:9d:dc:c9:b6:15:32:8f:51:4a:12:08:6b:
         58:a6:da:73:bf:77:93:40:84:8c:c3:35:79:6e:34:df:78:f6:
         9b:da:9d:9a:22:2b:5b:32:10:1c:7d:a6:34:e8:34:d9:18:57:
         a7:cc:27:08:43:6f:6c:ce:8f:78:d3:88:bd:b9:72:98:f8:d7:
         4c:af:68:08:cc:81:fe:1a:5e:49:e5:a2:6b:0c:19:4e:50:ad:
         b1:e8:aa:27:e7:49:b8:b7:21:48:72:18:78:5d:ea:aa:c6:30:
         87:75:30:2a:16:7c:26:ab:e7:6d:0c:80:d8:b6:28:6d:d2:4e:
         74:bc:cf:17:b0:fb:e1:47:d1:75:7d:11:60:f7:b3:b3:9c:d6:
         49:bd:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----