Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          Wv2Jh6CLTlyEt5jPhOqmKK/0MJud4ZmtPWxGJODb1Hc=
Subject key identifier:   F1:A9:F1:76:C3:8E:29:C3:C7:4F:79:A6:80:69:2D:7A:54:6E:62:4C
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       019353514F176B7A7EC0739750B29778C644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          13A3
Signing time:             Fri 22 Nov 2024 10:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:57 +0000
Files and hashes:         1: 1XaidD0W_tH1O7iUsg4VFHAwqvI.roa (hash: ed3yF3q3zQOPjaKAdNrp9+QmkLShSq6J6QobhueTAOs=)
                          2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: R7NCjG92qc0L6TLJ9PL6Alg3bKxLrKqUnnhcDbPHA9M=)
                          3: JXimRoJW6Mhh-02YLbCr6rAsttk.roa (hash: yt5/p5NUFyBFuY0QfCDjrrPYIhObOrW8d+RjuxZIUxs=)
                          4: OzWt-Y7nVeG8SDatgFXNfG3kiFw.roa (hash: Cvm4yITlF6f7NfrclLuwdeYgdZMXhsaDRg4TyF4dApw=)
                          5: c3p4s6DYZLDQz-1E2qXRDMEnT00.roa (hash: vDZ1VLwt5+lxEU03QhLEpMa8VR3Da+q71rhSYrzVIWc=)
                          6: d7-6yllUS8vN4jN78ehhIMzvWYo.roa (hash: 2OZUQl9ww3KH8UYaFYbVtOSfH17OzSeg1ww1a5fTVEk=)
                          7: n0Qi8cUadEH69SvPtrDLo4MiUjI.roa (hash: HpmZS1AxDeu2sVPfe9ZrKEF4SP6lpQfw0nx7P0GzvOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:4f:17:6b:7a:7e:c0:73:97:50:b2:97:78:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Nov 22 10:00:57 2024 GMT
            Not After : Nov 23 10:00:57 2024 GMT
        Subject: CN=f1a9f176c38e29c3c74f79a680692d7a546e624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:f7:ec:15:59:e1:b9:94:38:94:8b:ea:f3:
                    28:69:8b:e9:53:48:3a:9c:84:8e:cc:fa:8b:a4:1c:
                    0e:8d:c5:c6:ef:a1:19:db:28:95:06:ce:12:d6:48:
                    bd:7f:49:b6:97:a1:61:04:a3:17:fe:0d:b4:1e:6e:
                    57:c5:21:c7:28:53:1a:2a:fc:1a:4b:e1:f2:61:29:
                    5d:3f:a0:5b:31:af:0f:c3:ce:a3:e5:2b:6d:9f:24:
                    ad:17:ff:e8:7b:8d:7b:ba:93:a0:f6:7a:b3:05:18:
                    dd:20:42:ad:84:60:e9:0f:a6:c4:f8:a2:ec:c2:0c:
                    d6:bd:4a:a6:4a:b2:2e:02:9c:7b:e3:5d:69:31:e0:
                    ad:cd:46:a4:65:c0:56:6e:a2:c0:7e:65:88:bb:d3:
                    76:f5:10:b6:19:17:4f:a4:56:e7:1a:53:5a:cd:b0:
                    14:90:aa:03:fd:f6:45:f2:6b:49:4e:45:2d:04:c5:
                    fa:37:28:57:fe:ff:74:90:48:aa:9f:f2:eb:97:03:
                    7a:ce:d5:8a:e0:58:7b:4c:cb:df:dc:7f:37:12:8f:
                    98:97:6a:87:bf:99:24:0d:1c:1d:54:46:3a:68:06:
                    c8:3d:ad:3e:0d:45:cf:69:e9:f9:d9:76:d4:23:5c:
                    ec:1d:37:e0:21:24:34:69:68:77:64:af:43:7b:bb:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:F1:76:C3:8E:29:C3:C7:4F:79:A6:80:69:2D:7A:54:6E:62:4C
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:9e:f7:f7:79:c7:67:45:df:e2:15:79:86:9f:a8:f1:93:
         29:7b:6f:a0:7a:9d:28:1c:93:1c:20:a1:69:9a:1b:06:75:6e:
         94:38:7f:e3:c0:73:84:67:ed:6b:64:fe:c5:1a:66:e0:2b:97:
         53:dd:c9:34:7c:a1:92:39:84:a6:2b:43:f4:ba:93:70:98:df:
         68:81:42:6f:5e:75:a8:33:c6:f1:4c:92:cc:d5:c1:9c:c5:69:
         8f:3f:35:fc:7b:86:66:83:22:b9:73:0b:51:6d:a9:48:8c:0d:
         c3:91:39:05:72:4c:57:dd:ac:85:5b:3f:2b:0e:e3:37:cf:f8:
         63:16:86:a6:7b:ca:1d:1b:46:29:93:3b:d9:fd:8b:6d:a4:5a:
         29:3b:65:b2:2a:9f:38:22:3b:76:05:9d:2b:a6:af:46:f0:63:
         e1:57:b5:bd:ac:54:75:ea:bc:8f:7e:8e:8c:45:f0:b0:74:1d:
         0c:2c:f0:95:14:f0:85:71:ad:ce:aa:1c:8e:ad:6c:cb:c3:00:
         d4:ec:e7:0f:1f:c3:48:67:87:4f:c3:87:1b:6e:33:e6:03:73:
         8d:4e:05:3c:74:06:bf:ca:fe:17:24:40:c0:2e:33:d7:de:3e:
         f8:0f:6c:7f:23:ef:59:a4:4a:08:8b:d0:01:28:57:15:4c:78:
         57:70:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----