Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          zf/G5wWCCXt7pxPnxeZOYxUSrVCnH/c/PXJZf2m+42Q=
Subject key identifier:   12:A2:E9:5F:30:22:9A:B3:1E:61:C3:20:65:2B:54:04:0D:25:90:B6
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       0193568A889F8DA04670A1D53C2BAC8BCCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          0DA2
Signing time:             Sat 23 Nov 2024 01:02:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:19 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:19 +0000
Files and hashes:         1: 5o7FBj9yC-G9HKVW34zwkDPlwSo.roa (hash: AAQ4Fv9mPYmSP1ub/2yep3nOS8rnK4PAo4f1nIe4kqE=)
                          2: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: uBmcqNvs7/bC9Xv1FSiXyMp1BgQ21VWAmg9syxTRys0=)
                          3: h12BJbMxNpueZAGv5Qe2Ly9ubb8.roa (hash: ifFPnksttQakAgY9dYOp4J+Wqzsui7+GS/4XbMNk5PA=)
                          4: pdS3dsTfvJroC3bJydOxa6e3Nlo.roa (hash: ISqwIuqh0vZj5CyzGV1KGtDMfH4xXhfw2WOT1Q1ra/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:88:9f:8d:a0:46:70:a1:d5:3c:2b:ac:8b:cc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Nov 23 01:02:19 2024 GMT
            Not After : Nov 24 01:02:19 2024 GMT
        Subject: CN=12a2e95f30229ab31e61c320652b54040d2590b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:81:23:81:27:e7:c8:66:74:ba:57:82:04:
                    5b:93:fc:37:fd:cf:01:d9:6a:a3:da:d9:5d:ad:70:
                    01:e6:5b:51:0e:9b:62:e5:0e:fe:15:b3:6c:65:f2:
                    58:10:98:ca:17:da:e0:90:b2:ea:40:ac:78:fc:77:
                    5e:38:d4:97:34:ca:82:ee:3f:e4:c2:be:44:7f:62:
                    fd:e6:ce:a3:74:60:15:66:ad:64:68:32:31:bc:0c:
                    d7:8c:32:72:43:ab:66:02:33:92:69:ef:9b:c3:4f:
                    94:f8:43:f3:5f:66:17:68:52:b3:9e:fa:23:ef:00:
                    50:5b:62:9a:f6:6f:6b:76:cb:86:dc:c8:68:00:65:
                    ae:ad:fc:10:0d:24:5d:04:eb:b0:9d:e0:03:36:f1:
                    1b:2b:88:4d:05:6b:eb:f8:2c:0d:97:a7:ac:ae:38:
                    94:18:71:bd:58:b5:3d:bf:97:c6:78:17:5f:15:65:
                    dd:5a:91:a4:59:cf:50:41:83:bf:18:6d:6b:65:20:
                    c6:41:f8:0d:65:a2:ef:dc:79:48:49:76:39:63:ca:
                    88:42:e7:3b:48:1c:15:e9:ee:52:a4:d3:7c:a1:42:
                    d0:d3:7e:a9:7f:21:f7:3a:fc:45:2c:b9:52:4d:57:
                    7f:b8:6e:03:c0:ae:57:42:a9:a9:4c:a4:fb:a5:a5:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A2:E9:5F:30:22:9A:B3:1E:61:C3:20:65:2B:54:04:0D:25:90:B6
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:3e:68:fe:e1:2f:4c:23:7b:fa:74:5f:23:1f:d5:da:e6:
         f8:94:1d:d2:8c:b0:c2:14:3a:14:40:9a:16:f4:cb:e2:71:07:
         0b:9e:e2:10:f6:f3:f4:3a:f7:2b:83:86:25:0d:aa:a8:23:78:
         7c:68:d6:16:13:31:aa:69:9e:a0:7c:e7:8c:49:f5:7a:c6:b8:
         99:ee:c7:de:bd:ae:c8:8a:c5:5c:94:00:5a:f1:80:83:5a:2a:
         61:1e:3f:89:31:1d:9b:15:93:2c:b7:d3:fd:38:1a:a3:83:89:
         e0:0a:3e:a4:d1:2f:17:44:74:30:ed:3e:7e:b0:c9:01:75:76:
         4f:32:e7:0b:59:91:08:cc:4b:d1:b6:97:b2:ef:62:46:09:62:
         31:90:89:27:ee:45:f3:c9:05:c3:ab:0e:6a:75:f2:92:70:b7:
         2b:4e:4b:2f:a4:d7:ae:02:af:94:64:d1:1a:62:e3:7d:9a:73:
         31:76:57:55:49:a9:31:d2:82:6c:18:2c:10:1a:34:f8:44:0c:
         ab:06:b2:69:2d:c5:89:ce:94:b7:19:01:35:41:07:0d:d9:70:
         c5:a6:02:89:a1:7d:e7:f5:ca:1f:f8:d8:35:4f:fe:93:11:92:
         13:d2:bf:f4:dd:f8:52:13:b8:3a:77:0f:ca:8f:e2:c8:b4:f2:
         b9:50:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----