Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File:                     Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier:          A8iQoZgsSj1GN4L06ahze40fpb040bIlrdPzQhEFw+0=
Subject key identifier:   E3:5C:EB:19:38:A2:1A:7A:D6:A8:B6:5E:0C:90:6B:8C:97:E6:D8:42
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer:       /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial:       0193561ACDEB8A0DCDD21F62C7744F60F30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number:          C0
Signing time:             Fri 22 Nov 2024 23:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:17 +0000
Files and hashes:         1: 5lwZzcUpow_laJ446NXQbcabnw4.roa (hash: ITFqUnka82jQ07gHaGXv04s8u2X2f5A3L6oJYw48zaI=)
                          2: Pmjef5rzM8Vgo7R4cFh5qb-8bTQ.roa (hash: tpSzgeTtR2aVlXyE5tmImGNHdVWT3rW895W00XAy15k=)
                          3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: AlN8PosugbKgnhOPVg9QaQ60cJhvVbU5LNRcuA9bK3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:cd:eb:8a:0d:cd:d2:1f:62:c7:74:4f:60:f3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
        Validity
            Not Before: Nov 22 23:00:17 2024 GMT
            Not After : Nov 23 23:00:17 2024 GMT
        Subject: CN=e35ceb1938a21a7ad6a8b65e0c906b8c97e6d842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3e:a9:8e:16:22:ef:49:e4:04:af:7b:90:c0:
                    e0:8d:3b:64:18:93:99:c8:58:63:88:c0:78:fe:32:
                    95:b0:76:e8:b9:b6:39:a2:58:6e:ec:d1:1f:a0:8f:
                    64:14:38:42:0b:f8:8c:50:91:1f:78:34:cc:fb:bf:
                    18:32:fc:b0:06:ef:7a:a9:77:a3:a4:53:d7:da:bd:
                    9f:e5:bd:c6:e0:90:10:6f:7d:77:28:90:8e:bb:03:
                    8e:83:1e:cd:e1:61:96:fb:21:67:53:6e:11:80:1f:
                    07:07:ec:6f:73:76:d2:b3:a9:0c:01:29:93:e8:b0:
                    94:6c:0d:e4:d2:70:1e:d2:09:cc:3f:f8:bc:9d:49:
                    19:9f:ac:9a:a4:bd:37:3b:03:c5:27:f5:54:78:eb:
                    27:91:fa:31:c5:08:7a:02:d1:10:69:05:f6:45:74:
                    bc:2a:f5:08:84:cd:d6:9a:02:a5:6e:b1:4b:e4:ad:
                    95:21:60:82:32:f4:6d:f6:e6:53:63:ae:fd:55:10:
                    59:1e:28:0c:64:e4:b0:b9:20:b9:1b:31:9a:7f:30:
                    bb:5a:0a:e8:ac:cd:5a:73:89:3c:ea:e4:e1:cf:08:
                    4d:d3:21:42:19:49:d1:3a:a2:07:8b:26:26:9e:1f:
                    60:8a:6f:b0:b6:fd:f2:d3:76:3a:03:bd:b9:08:d0:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:EB:19:38:A2:1A:7A:D6:A8:B6:5E:0C:90:6B:8C:97:E6:D8:42
            X509v3 Authority Key Identifier:
                keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:a8:60:d5:d6:ee:46:22:01:bc:bf:23:91:2d:7f:a2:f0:
         10:7c:0b:3d:74:bf:a8:48:6e:77:5d:de:1c:22:a2:ad:73:be:
         18:a9:1c:c4:fb:9d:45:db:88:62:7b:10:44:b5:d1:37:2e:ce:
         1d:42:55:f8:7d:5e:39:71:1a:57:70:88:b3:aa:6f:cc:64:93:
         5d:5c:d6:a4:d4:6c:be:fd:3a:78:47:b9:c0:af:0b:1a:28:b9:
         70:35:f7:62:aa:90:50:0e:60:cb:1c:75:3f:19:f2:4d:2f:7b:
         92:7d:ad:e5:17:98:59:b7:2b:e5:b4:fe:c9:df:dc:33:07:70:
         b4:b0:b1:8f:3e:f1:28:04:c5:cb:23:12:b9:ce:e0:c0:fd:1b:
         88:0d:b4:09:ea:56:59:08:9e:9b:d5:9f:48:8c:ad:b5:8a:12:
         e2:6d:f1:8c:aa:b5:c0:4e:1b:85:1d:15:95:f4:91:ed:e8:62:
         fb:86:fe:e9:91:b9:e3:4f:29:70:89:94:2c:8d:e6:ec:98:8c:
         e2:3c:6a:ee:c6:72:9c:d0:36:c3:39:8c:fa:7d:ef:44:92:44:
         a2:1c:1c:bd:68:67:f7:3b:81:ba:e2:a1:04:88:4c:23:7b:cf:
         e7:66:70:98:5c:ea:c6:45:3e:56:8b:8c:45:24:88:c2:34:36:
         15:64:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----