Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File:                     EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier:          rkxixqbiDIQgmZORhsrUY2UK6c8Gsv9q12yRCfbmABw=
Subject key identifier:   26:80:D0:83:B0:8D:AB:5B:D3:3C:B5:92:2A:04:65:6B:A5:18:18:0C
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer:       /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial:       019360D611B00D74A807C3AB30C028DB935D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number:          0A5F
Signing time:             Mon 25 Nov 2024 01:01:02 +0000
Manifest this update:     Mon 25 Nov 2024 01:01:02 +0000
Manifest next update:     Tue 26 Nov 2024 01:01:02 +0000
Files and hashes:         1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: OFr6is9NMH8XrboZ7J7OOtslQ3Tv7KYSlJUQ0vRvqSE=)
                          2: iJO7dm9bQ_JxPAusxalsAi5t7u8.roa (hash: eTbvGjNmJ2siDzJMaXzRtql2bxPWtBGi85burvPHAho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d6:11:b0:0d:74:a8:07:c3:ab:30:c0:28:db:93:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
        Validity
            Not Before: Nov 25 01:01:02 2024 GMT
            Not After : Nov 26 01:01:02 2024 GMT
        Subject: CN=2680d083b08dab5bd33cb5922a04656ba518180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:e1:31:aa:b2:08:d2:7d:b6:d9:f6:e9:35:
                    a8:3b:51:24:53:36:80:27:7e:28:79:fc:96:c3:92:
                    2b:7e:ad:79:a5:6b:2f:17:4b:c3:6b:a7:ba:ba:83:
                    e2:c0:4e:88:9f:77:a3:16:f7:f7:64:f5:8a:5d:e6:
                    6c:09:09:7e:d4:ea:28:fd:c9:1e:86:0e:73:00:7b:
                    c9:1e:f6:c0:60:5d:ba:08:dc:41:1c:ab:53:d9:7a:
                    31:93:2a:21:1e:6b:09:16:f5:12:60:da:d1:26:37:
                    b3:55:cf:b8:a8:a3:f7:88:91:a9:67:13:32:42:6b:
                    1f:ee:6f:79:b0:07:20:3c:11:b7:0a:1a:ff:5f:cf:
                    fd:bd:b3:57:20:5d:00:b2:04:dd:0c:ce:78:fa:7c:
                    b5:05:a0:ae:c7:4d:18:40:8c:bf:a0:87:86:bd:2f:
                    85:da:bd:33:11:c7:73:23:0b:d1:49:b8:45:47:d8:
                    38:57:08:11:c9:37:2b:fe:14:8c:7f:de:85:cb:be:
                    bb:ba:b5:1d:50:8c:a0:ed:a0:83:b6:0c:f5:8b:81:
                    d6:eb:66:a9:9d:38:97:d9:fa:2d:85:4e:3d:ab:2a:
                    19:d0:3f:ab:12:f2:94:60:b0:18:95:09:00:12:75:
                    74:ba:26:3f:bf:59:11:40:b9:39:1b:e7:b6:fd:39:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:D0:83:B0:8D:AB:5B:D3:3C:B5:92:2A:04:65:6B:A5:18:18:0C
            X509v3 Authority Key Identifier:
                keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:cf:20:72:1e:6c:01:69:dd:fd:83:17:4a:4d:21:2a:49:
         9a:e0:1c:69:c5:a2:8c:bd:53:41:08:ff:d1:da:36:f4:16:66:
         ce:ca:af:fb:76:8c:7b:0b:04:1c:b6:9f:ab:3a:78:96:62:32:
         43:35:5c:ca:59:c2:a0:e0:6e:51:0c:52:c7:29:e2:ab:f1:33:
         d6:80:76:e3:2e:cd:21:b5:0f:3f:7e:a4:b4:e6:14:63:87:48:
         86:96:d2:c9:48:ee:da:23:05:87:a6:c3:0f:6c:83:3a:0b:8e:
         33:00:e9:d0:9b:be:9e:66:3b:54:20:d5:77:cf:1f:a6:98:4d:
         cb:e3:49:d5:8d:9b:9e:a4:25:12:0a:5f:29:0d:1e:15:39:5b:
         4e:f6:59:ee:6a:05:9e:d6:45:bc:81:b2:82:10:e9:af:69:bc:
         3b:d3:23:65:c0:29:af:09:05:71:ce:2d:ce:ea:97:aa:9b:54:
         ad:f9:fd:71:f0:a0:e7:1a:07:77:90:37:61:c0:a6:4b:29:80:
         36:cc:45:3e:41:27:12:01:44:d1:29:5c:a5:37:fa:6f:80:01:
         84:bb:1b:f6:d7:d3:58:03:72:35:f7:4c:9e:37:00:01:74:06:
         24:4e:62:f0:de:d6:9c:6f:21:de:5e:16:e9:54:94:31:d9:6b:
         56:b9:ff:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----