Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File:                     PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier:          W41OIXxTMrB6DnqMsLwL9MmGsB+GA2+04yIrK8lCpUI=
Subject key identifier:   CC:4F:1D:36:67:42:96:D5:89:D9:05:9F:35:82:48:7D:C7:2D:33:6E
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer:       /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial:       0193549A9498ACAB20D5C373E65968A96E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:36 +0000
Files and hashes:         1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: 6isyXwXv1FxDHxuYwH3gUwQieK4EuHpFWzACKBW6wTM=)
                          2: SY6jVp5Kv4BauFptaGgaKDy75qU.roa (hash: 0CZ6XNHKr/XmnTa6sYo+p/5Tb8GEXsoMDjIJ99ZeJnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:94:98:ac:ab:20:d5:c3:73:e6:59:68:a9:6e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Validity
            Not Before: Nov 22 16:00:36 2024 GMT
            Not After : Nov 23 16:00:36 2024 GMT
        Subject: CN=cc4f1d36674296d589d9059f3582487dc72d336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:65:37:8d:e0:67:e2:c5:13:54:a2:38:d6:
                    2a:93:48:07:87:d6:c3:10:1e:db:d3:c8:a9:f0:04:
                    8b:dc:01:b3:ee:a8:6a:fd:2b:bd:4e:e3:3a:4b:12:
                    6f:ba:49:04:c5:2c:61:f1:34:cb:55:b5:d7:e1:c9:
                    19:da:90:78:49:cc:ee:12:bb:7e:1c:fd:7e:7d:f1:
                    11:fd:20:34:7c:ec:b8:12:1b:8e:4a:08:eb:12:2f:
                    0d:de:99:eb:f0:b1:02:9e:f2:36:5b:62:0c:46:2a:
                    e0:a0:ee:54:ee:6f:fe:c9:5c:46:a3:47:1d:7e:24:
                    bf:98:22:ac:30:0e:06:b6:65:77:91:c8:56:e1:f9:
                    b0:8c:ac:b2:b5:11:64:8d:3b:5a:d6:aa:ab:cb:33:
                    81:ee:6a:58:38:d0:37:2b:72:e9:ee:ab:5f:88:f9:
                    ad:6f:6f:b6:64:89:d6:f6:37:b7:f3:b1:8a:83:32:
                    55:38:7f:fc:18:9c:8f:af:e7:4d:e3:4e:0e:6f:86:
                    59:43:e3:92:f6:a3:f3:bc:67:07:c2:ff:85:76:7a:
                    d1:9b:f3:27:81:8c:2c:13:e2:21:59:b1:39:de:22:
                    2d:6d:a9:ad:73:cd:85:36:ac:7e:9d:fc:95:a2:76:
                    90:96:c6:29:6b:44:cd:73:f5:26:db:98:99:2d:41:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:1D:36:67:42:96:D5:89:D9:05:9F:35:82:48:7D:C7:2D:33:6E
            X509v3 Authority Key Identifier:
                keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:58:f3:f1:09:df:41:14:35:11:8f:50:c5:70:38:7e:b5:b1:
         88:a3:49:e9:4f:9b:52:79:83:67:d0:c8:7f:22:6b:71:0b:c7:
         6f:c0:e3:1b:98:d9:2a:14:4e:20:31:4f:16:21:d0:b9:63:1e:
         7a:a0:14:db:c2:5e:96:46:71:ea:09:6a:76:06:f7:64:7a:d3:
         15:2f:a5:6d:95:c2:35:24:52:df:c9:2a:3c:94:0f:eb:88:b3:
         ab:d0:d4:72:a2:ad:2e:80:5c:a9:4d:13:09:6a:87:17:40:94:
         45:aa:98:f8:d2:3e:49:78:30:72:bd:ff:55:12:4f:15:2c:32:
         b9:32:82:5d:a3:24:06:45:75:21:00:05:af:22:8e:32:3c:ac:
         5a:a5:81:a0:93:49:2f:d0:95:ff:16:22:2a:fc:a1:da:2c:d3:
         43:87:1b:d0:13:f7:a3:5a:03:f2:3f:a1:1a:3d:78:bc:e0:5a:
         c4:57:cf:81:7d:f9:d6:59:26:61:a0:7b:81:35:98:6d:8b:a6:
         64:fa:f0:21:33:f3:c6:bc:0b:e3:32:64:6d:a0:d5:16:1f:dd:
         e3:ec:5b:10:14:0e:ca:2f:a8:b1:34:1b:f7:6d:14:2a:f2:f7:
         d7:27:f4:8b:9e:ab:8d:1b:f5:4c:c2:c3:92:dc:bc:c8:6d:c1:
         ae:7a:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----