Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File:                     cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier:          HQS0XHkMPdQe435ZYn1gdmYWH49Jz2kPB6xWHtB1kgM=
Subject key identifier:   51:49:C2:43:CD:7D:01:58:15:00:A6:F5:7F:75:A2:3B:9E:18:3D:34
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer:       /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial:       019364B2745E94286AB6C67436DA28F2F51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 19:00:37 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:37 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:37 +0000
Files and hashes:         1: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: BnlcaodPhOcKDzSLAQoIRsNvZcccIlor31O/HipBzd0=)
                          2: teEfmPQf8tnjfGLTS12FwMTkOmE.roa (hash: SKQQFiihYob1kvToMbtlESJCoSTXYbFLubzmSbbHzZY=)
                          3: tvrYnosVjpv8tcXBtrz_VtpKGrk.roa (hash: tdMySNIH7/ngO+Y0q3jLW3/9HVdgtOBQBy2N0p72LeI=)
                          4: yRwB8wbPujG4WkWOvl5nBounR0c.roa (hash: JMSzojnlM1jfQkDtPB48h9kAoc1/J5HPKn75HRdxG2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:74:5e:94:28:6a:b6:c6:74:36:da:28:f2:f5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
        Validity
            Not Before: Nov 25 19:00:37 2024 GMT
            Not After : Nov 26 19:00:37 2024 GMT
        Subject: CN=5149c243cd7d01581500a6f57f75a23b9e183d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:40:3c:bf:56:ad:34:48:45:a1:6e:c4:f6:
                    7f:a3:7f:51:db:d8:02:5c:a9:61:12:97:1f:27:33:
                    12:40:d9:f5:7c:c7:6c:e6:d2:1c:91:ab:15:c1:66:
                    e6:c2:76:0f:08:72:3a:05:7f:34:c7:cd:b0:03:b1:
                    e4:12:72:66:e1:e8:76:e7:04:fb:f7:e0:41:0a:bb:
                    f6:34:bc:25:4f:19:ab:10:96:b5:d6:25:93:3a:89:
                    31:c7:c7:83:5a:9d:dc:ae:18:98:d5:4f:f1:0c:d9:
                    62:7e:0e:75:de:7a:0c:b6:1f:b7:11:72:ab:db:97:
                    de:39:99:bd:fb:ab:9e:27:af:f2:2f:31:51:fe:ae:
                    3a:ee:58:07:b2:b1:4b:00:cc:61:8a:5e:50:90:9f:
                    58:09:e3:0a:ad:4a:f9:36:bd:67:e7:99:e8:64:c5:
                    31:fd:a8:d8:ea:24:6f:a7:96:f2:1d:0c:26:64:b0:
                    be:93:5d:43:da:97:71:e5:2a:ec:41:cb:2e:ae:f7:
                    41:ff:1d:2d:6a:ca:1a:bf:f3:15:55:e3:66:39:9a:
                    df:ee:8d:7d:04:b8:67:ce:d5:8f:11:c9:1d:1a:41:
                    14:b1:79:ff:7d:84:5d:1b:3c:ce:ca:c7:f2:c9:ee:
                    77:0c:a8:5b:0d:9c:93:d0:fd:39:0c:b5:da:1f:f7:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:49:C2:43:CD:7D:01:58:15:00:A6:F5:7F:75:A2:3B:9E:18:3D:34
            X509v3 Authority Key Identifier:
                keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:aa:6a:7b:7f:fc:d2:84:1f:a4:32:06:69:7f:38:dd:99:
         9b:0d:13:6c:4a:8f:9f:63:5a:6e:14:e5:85:0b:7a:53:a5:ff:
         61:b6:ae:e0:e7:3e:c1:47:97:15:6e:bf:8f:f2:08:1a:65:26:
         04:5e:26:bd:7e:9e:d4:c7:77:23:6f:67:d6:07:ac:1b:89:67:
         f7:5c:28:ee:4b:ad:92:be:7c:63:c0:e7:64:b2:11:35:cd:a5:
         44:01:b3:2e:d2:7d:d1:d8:13:4d:f4:f2:2d:ec:5e:61:f2:c6:
         3b:31:f9:cb:98:a9:45:38:f6:a3:18:94:6f:2d:cc:6b:9a:df:
         4a:24:a0:5b:b2:b2:42:2d:da:52:b7:06:98:43:45:1f:89:1c:
         f5:5b:33:d3:52:90:ec:7f:e9:f6:c4:cd:44:19:26:65:b7:97:
         7d:31:0b:f8:16:d8:a8:fb:51:e9:62:70:e6:3a:df:f5:f1:0b:
         4a:7f:f8:31:d0:3b:93:5e:eb:6b:d8:4c:f2:66:dd:77:fc:dc:
         14:b3:61:07:b5:66:1f:b0:2a:83:60:83:3f:29:38:4b:82:e7:
         9e:f9:80:9c:1e:45:a0:5d:da:53:0f:fe:79:58:29:45:46:31:
         0e:db:b5:30:f6:d4:b1:7d:09:8e:3e:95:c0:8e:fe:66:bc:70:
         ab:19:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----