Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          AjTqfr1/puhsTXxWO5uly2n+dEWuBv4EbHPyPyJOxZc=
Subject key identifier:   39:C9:18:AD:C5:D5:B2:7C:69:76:83:AA:62:8D:93:B6:47:32:E9:94
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019369D90EC28D89643EFC183529FC36C4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0A61
Signing time:             Tue 26 Nov 2024 19:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:52 +0000
Files and hashes:         1: PDnz1KEtZONuh0qWxtZT4vHX7R4.roa (hash: U4RhzzIZJM+qmOwbpoxz7FyczozGiw1DSDtt8doKcb8=)
                          2: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: 29jhu/AXeftzz4GnkIc+F1ccNqpaD1IP5Qtj+Q6TP0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:0e:c2:8d:89:64:3e:fc:18:35:29:fc:36:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Nov 26 19:00:52 2024 GMT
            Not After : Nov 27 19:00:52 2024 GMT
        Subject: CN=39c918adc5d5b27c697683aa628d93b64732e994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:3b:e4:72:37:f1:69:e9:f3:a6:a1:ea:56:
                    c8:fb:7b:5c:37:8a:5f:f5:24:1b:89:e4:88:cb:8c:
                    04:52:30:2a:b9:0a:3f:7a:26:a2:3e:83:cb:19:3d:
                    5c:b1:fd:8d:d1:d3:5c:59:6f:fb:32:bf:86:ee:77:
                    93:41:77:28:86:6c:70:23:b0:9f:a4:37:da:4c:6b:
                    c2:3a:ee:89:ae:15:41:8e:91:0f:d1:e5:6c:62:39:
                    a5:51:95:c6:8e:49:87:e1:9c:7d:5d:5d:92:5c:cd:
                    c8:80:df:eb:7f:ed:a0:a1:cc:89:db:ca:ed:6b:67:
                    b1:60:f3:83:91:aa:a5:9a:83:a1:47:64:d3:2d:85:
                    4d:84:15:cc:15:fc:03:54:ee:f4:a9:b2:a5:3f:35:
                    20:17:b9:11:ea:1f:e9:57:1a:61:7c:6a:ec:ab:ec:
                    f7:87:d7:8a:2d:85:2b:77:82:c8:1e:39:a4:70:7a:
                    07:ad:20:a4:9b:c7:85:73:21:70:3a:56:e6:8d:a0:
                    1d:43:d8:73:7e:f0:bb:76:61:b2:c3:3f:c1:73:52:
                    42:97:9c:64:f3:f6:0d:02:7d:68:3b:76:ca:78:9b:
                    cc:0e:20:05:40:ab:68:30:9d:d3:5e:92:60:21:71:
                    2b:b2:b1:ed:ea:e1:71:93:1d:d2:6b:04:dd:26:86:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C9:18:AD:C5:D5:B2:7C:69:76:83:AA:62:8D:93:B6:47:32:E9:94
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6a:55:04:85:9a:14:ae:fb:51:79:27:0d:1a:02:9d:2f:b1:
         b5:d3:e1:d0:4a:a9:f6:b9:8c:61:3b:33:4e:40:a7:fe:5e:62:
         2e:7e:e3:14:df:98:1e:6f:f6:d0:92:e7:13:c1:78:e6:f4:9f:
         3d:ea:33:2e:4f:8f:df:32:7e:62:84:c2:56:2a:44:ec:6c:e4:
         c4:bf:45:36:4d:8d:5b:72:80:d9:49:b5:ed:1b:9c:01:96:bf:
         49:35:fe:ec:28:54:21:b9:4c:07:e9:dc:62:72:b1:41:34:10:
         ab:36:96:2a:c9:21:b8:c8:a4:92:29:a9:9f:17:d3:c9:ad:2c:
         bb:34:75:c2:c2:d8:cd:e8:04:3b:16:78:59:ac:3c:bf:72:f5:
         4d:22:46:b6:cd:06:af:32:7f:29:a8:71:03:8a:08:22:d1:fa:
         1f:60:3b:0c:bf:af:65:68:6f:08:22:c7:ce:5c:a1:43:dd:51:
         0e:79:e3:87:68:d2:5b:72:8c:c6:dd:54:e6:9c:bf:43:74:e5:
         94:ac:50:52:ba:7f:79:2a:b6:ab:78:4b:7d:85:38:07:d5:87:
         eb:19:df:29:72:30:9a:a2:cc:04:b8:39:c5:24:c3:23:7b:2b:
         52:79:33:fb:c4:a8:15:6e:31:f3:de:4b:ed:7a:74:8d:09:93:
         e6:71:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----