Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File:                     ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier:          JBOUn50TlUvW3mjfNFOFWJsy/vYHczQ4tEZmS2x8UR8=
Subject key identifier:   C9:D6:5E:48:4B:B1:74:82:68:C9:80:71:13:07:3A:A2:03:B2:AF:76
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer:       /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial:       0193549AC1C6F6EC07FD06026A0A7FE33D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number:          03C5
Signing time:             Fri 22 Nov 2024 16:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:48 +0000
Files and hashes:         1: jQ7i8xOPOygwLdhB_Cs-EVJK7-U.roa (hash: 7X7HxxrXSlyFcrRy2hHx5Fkzm5/DzxHteeqg3/apAyQ=)
                          2: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: cMPsp13tXDYK1+AupS5OOn3Z8XNR/W//ujp7aMW6eZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:c1:c6:f6:ec:07:fd:06:02:6a:0a:7f:e3:3d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
        Validity
            Not Before: Nov 22 16:00:48 2024 GMT
            Not After : Nov 23 16:00:48 2024 GMT
        Subject: CN=c9d65e484bb1748268c9807113073aa203b2af76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:89:63:6b:78:cb:5d:a0:e5:ea:9d:c1:db:
                    d6:7d:c6:b2:60:3a:bb:d8:c2:b3:2f:fb:68:f1:2f:
                    ee:c9:54:61:4c:a8:78:aa:c2:9b:e3:d7:18:8d:04:
                    c3:4e:1b:8a:3c:1e:83:fc:c6:b1:b2:2e:ea:33:19:
                    65:1f:44:6d:c3:f6:df:ef:1a:12:7b:dd:a6:bf:98:
                    d5:35:6f:ae:33:1f:9d:ce:dc:59:b6:a2:9b:4b:f9:
                    af:fa:75:ee:62:15:ab:07:10:f0:37:03:17:92:b5:
                    0b:c3:f6:33:0c:c5:a0:79:38:fe:ec:0e:2e:67:c9:
                    87:8a:8e:84:ad:90:a8:60:fa:e3:af:1b:cc:2b:49:
                    b0:5f:bc:74:af:43:01:7f:f3:aa:32:15:c9:ec:ae:
                    2a:cd:21:45:e0:20:a0:d5:45:e9:2d:a7:f3:82:10:
                    e5:8d:36:13:6f:3d:7c:df:19:35:77:de:2f:79:35:
                    8d:85:5b:78:3c:38:4a:b6:a6:cf:25:64:40:c5:96:
                    97:07:0c:68:fd:a3:b1:0c:21:64:dd:73:af:0d:e3:
                    fc:78:e4:24:5c:4b:ef:f4:20:ca:d8:af:36:a1:83:
                    62:88:d3:ea:25:e9:cb:de:de:e7:e6:7f:5f:e2:75:
                    d4:14:a6:c4:c1:98:15:46:33:fa:48:e2:fc:3d:26:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:5E:48:4B:B1:74:82:68:C9:80:71:13:07:3A:A2:03:B2:AF:76
            X509v3 Authority Key Identifier:
                keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:12:dc:8c:6f:ff:98:1d:71:ab:2b:09:f8:82:95:d8:48:93:
         16:f9:ec:59:1b:a8:6e:9a:2f:2f:8e:1f:09:a3:72:ea:c2:43:
         b2:61:95:1a:45:0f:6a:84:8c:c6:3f:66:f2:59:e3:c6:b3:72:
         a2:6f:83:21:70:51:de:6e:d0:ff:b6:6a:1b:b4:52:09:64:c5:
         9a:02:99:ab:3f:d8:27:13:f3:b5:02:d7:fd:76:7e:eb:0f:62:
         ba:89:5a:94:03:39:35:b1:7f:44:f2:f4:44:1c:04:9e:2a:6f:
         c6:03:11:fd:2a:ae:99:3e:3c:c8:dd:95:04:c6:59:80:b6:cf:
         5f:90:f3:dd:a2:d4:71:f6:9e:09:40:9b:0b:39:8a:24:b5:9f:
         8a:ea:e4:2b:fc:06:5b:ef:69:fe:13:c5:80:22:ba:c9:60:5b:
         2b:58:3d:e2:19:eb:ff:91:ce:a6:da:e5:4e:6a:11:d5:04:af:
         79:e7:6e:ff:67:1a:08:53:4a:18:52:37:84:16:f2:bb:b6:34:
         07:d3:8c:60:22:49:fe:50:dc:75:91:da:ab:bf:d9:c0:2b:24:
         74:e6:ba:1a:09:c9:fd:31:70:06:6d:76:d4:17:23:7e:a6:63:
         b3:65:a3:7b:84:8d:93:2d:f1:b6:af:6d:11:db:a2:9e:94:07:
         95:3d:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----