Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          pXqJ3vw49pQTuQsohVd3XlwrPMkEHW0LQB9Wan+ec1s=
Subject key identifier:   DD:ED:07:60:87:B6:74:82:CE:85:31:EE:CA:E6:54:81:3F:A5:36:5A
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       01936A468B5241F432C2B066121F7C203562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:28 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: HDj7hrJXOuK8M9IOYR/4tH3A6GK5bApDQOF6Q59Lg+M=)
                          2: tRXog1vi9wXlUkyoOSBMs2iHWmc.roa (hash: l8KYXlw3zQxh4OGF3/VoRk0CmnafB5DDH1c+W942D5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:8b:52:41:f4:32:c2:b0:66:12:1f:7c:20:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Nov 26 21:00:28 2024 GMT
            Not After : Nov 27 21:00:28 2024 GMT
        Subject: CN=dded076087b67482ce8531eecae654813fa5365a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:a6:c2:c2:3b:81:03:68:6f:e3:0d:01:dd:
                    b6:c5:d5:9f:7d:db:c9:ef:98:1b:73:3e:db:f7:08:
                    24:28:eb:93:7c:37:63:16:2b:8e:8d:a8:b1:98:f4:
                    7f:d3:1b:fb:dd:5d:73:a1:8a:bf:16:dd:b3:9f:9b:
                    2f:bb:20:5d:90:57:a7:e3:fc:15:89:a2:b8:49:ed:
                    dd:73:ab:c8:3d:bc:7f:80:33:6b:c0:17:87:aa:85:
                    9e:bd:f0:62:fe:5a:f4:ec:73:5b:14:e4:a3:d6:68:
                    2b:d5:41:2f:2f:fa:48:49:fb:96:8a:de:54:49:d0:
                    dd:71:3b:2b:8b:4c:62:74:52:b8:ca:55:a9:2e:2d:
                    39:77:69:08:23:46:61:fb:30:b5:a2:63:11:3d:a6:
                    c4:a0:6c:7e:4a:5c:76:69:1f:3f:1c:06:20:3c:12:
                    eb:c6:ad:7f:ff:83:d6:0b:8d:44:e4:b4:8e:37:81:
                    db:59:ef:d5:4f:2c:a0:1b:88:1f:58:d5:de:7e:f4:
                    a0:36:a3:c7:07:3c:7b:60:68:49:ec:a1:71:b4:26:
                    6f:f7:0d:b6:d6:e0:81:c0:7a:9f:82:46:77:85:6c:
                    1e:63:34:a5:7b:94:82:a1:22:b4:2b:86:8b:5d:65:
                    8f:fb:6f:87:be:de:6b:2e:13:44:9f:dd:f9:08:d1:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:07:60:87:B6:74:82:CE:85:31:EE:CA:E6:54:81:3F:A5:36:5A
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7d:e6:f7:40:26:b8:b8:df:e8:2b:07:14:92:aa:b6:8b:9a:
         b9:61:30:51:b3:b9:d7:11:dd:0c:37:dd:e9:61:54:36:de:19:
         02:6f:1f:2b:44:07:6c:1d:bb:0d:1e:0e:37:93:06:5c:62:dd:
         02:29:94:7c:e2:fe:dc:65:5c:5d:c1:78:e7:de:93:c0:cb:91:
         da:a7:7f:3e:37:57:d1:16:68:c8:c4:c3:7a:12:b7:26:36:79:
         de:05:ae:5f:03:b0:d9:db:db:77:db:9c:72:c6:bb:af:30:bc:
         c7:46:6b:81:65:92:b1:d0:be:ae:52:d1:87:15:9c:68:6a:a0:
         f2:80:26:8a:69:41:17:ea:8a:8d:e1:6a:9e:83:ed:d3:10:ee:
         58:20:b1:05:12:f9:4d:4d:3b:bc:f0:5d:fe:48:eb:98:ff:31:
         0a:96:e6:57:27:7f:57:0b:be:6b:0c:13:3e:8f:f0:f5:da:93:
         6b:43:25:da:f9:e9:88:01:d0:27:f3:2f:29:ef:72:18:9b:a3:
         ea:17:d4:f7:fa:c2:99:03:5f:3f:28:50:62:47:c9:1d:c4:7e:
         6e:af:58:bc:d4:7c:5c:be:47:6a:56:b7:3d:8a:bb:4f:61:d4:
         57:ef:ec:45:5b:b3:0b:ed:63:d7:e8:c8:45:9b:6c:d3:d8:c5:
         fb:8c:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----