Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File:                     1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier:          7Bg4mBe7t0P6Mw5y5F4VWMSU2GBm3x02EIOZSwQhwEY=
Subject key identifier:   E6:FF:AE:9E:36:CE:86:46:4F:42:62:52:BD:0D:C9:49:57:FA:DD:A2
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer:       /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial:       019355E485D48CC3915CECE8C12FFB91EDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number:          0303
Signing time:             Fri 22 Nov 2024 22:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:00 +0000
Files and hashes:         1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: aEDFgwxEcK10bkgUcgHc0VIabpjEFBC94SZ2DkzkQBk=)
                          2: BchWUQYlasianl7it3pUaDsDp5s.roa (hash: ojh1KBPpVGiiPefZ+3s7ecODRItv/NQ962XYYRgKrLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:85:d4:8c:c3:91:5c:ec:e8:c1:2f:fb:91:ed:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
        Validity
            Not Before: Nov 22 22:01:00 2024 GMT
            Not After : Nov 23 22:01:00 2024 GMT
        Subject: CN=e6ffae9e36ce86464f426252bd0dc94957fadda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:10:15:5e:d3:40:78:ae:22:de:de:77:6c:
                    76:0d:4a:8a:5d:13:8b:b0:73:9b:35:32:88:0b:1e:
                    8b:0b:2e:5e:9e:fe:eb:f0:19:45:8b:a1:aa:c7:db:
                    f8:8f:76:eb:75:39:2a:3c:d5:6b:eb:44:70:2f:2b:
                    8b:05:04:ea:0c:af:43:97:b8:47:31:65:30:4a:ed:
                    45:b3:0c:f7:be:37:9a:c9:64:17:73:e7:d0:7d:99:
                    8a:1a:1d:d3:39:c6:52:46:24:f0:81:4f:e6:c3:66:
                    0e:3d:f7:91:12:65:6c:6f:54:55:2a:39:32:50:b9:
                    a4:83:0c:33:62:26:0f:17:cd:4b:5f:08:52:8a:d6:
                    ac:61:7a:b9:2d:30:b3:f9:e3:3c:5b:d4:0e:32:43:
                    96:d9:a5:27:ad:87:7a:fc:67:d4:eb:69:f1:3f:08:
                    46:fb:dd:3c:c1:50:dd:03:30:be:70:ff:73:89:19:
                    0a:62:61:9e:d3:0f:af:eb:90:88:e1:ee:02:69:c3:
                    a0:c8:6b:d4:81:13:55:42:1b:f4:b3:f9:3b:18:25:
                    a3:ac:37:f1:96:e9:05:1f:71:e8:b3:ed:ac:00:70:
                    f4:79:f1:38:12:ca:96:42:5a:b0:9f:8c:8b:b1:05:
                    10:8d:33:1b:5b:ee:54:c5:6b:32:9e:ad:ca:b1:e2:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:AE:9E:36:CE:86:46:4F:42:62:52:BD:0D:C9:49:57:FA:DD:A2
            X509v3 Authority Key Identifier:
                keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:79:a3:ee:d8:4b:80:32:e1:db:34:7e:95:76:40:5b:28:a0:
         76:26:56:69:e6:6b:5f:69:d0:4f:47:5c:8f:40:04:09:ad:2a:
         b7:a8:b2:68:7e:ec:ab:5d:db:34:9c:0c:0e:bc:10:2d:21:49:
         0b:7b:98:fe:03:7f:a5:e2:d9:51:59:a6:65:9f:e0:4b:9b:0b:
         13:d2:b5:72:78:5d:81:bf:e3:7e:88:0b:27:3a:96:8c:76:56:
         59:4e:f0:ac:be:81:d3:b0:60:17:66:cb:6b:98:35:ce:74:9f:
         81:da:b6:d0:5b:8f:72:d3:bb:50:41:50:12:73:a2:c0:1e:00:
         20:ef:c3:76:9f:a6:c2:73:70:b3:5b:6d:4b:a5:a5:82:cd:7b:
         0d:64:f5:a9:b2:f2:78:61:63:5c:51:72:ca:82:38:c3:66:dc:
         de:6b:d3:08:ff:1b:d3:19:9c:58:a4:27:79:e3:fb:e2:65:79:
         f6:6b:9b:35:14:df:ff:f8:37:13:d2:e9:c9:af:23:5d:f9:0a:
         0e:36:1d:7c:a5:68:bb:54:f5:9a:1d:ab:19:96:20:8f:17:26:
         6d:03:3a:ca:68:f9:30:c8:02:a2:6c:62:61:32:28:21:57:fb:
         b4:f7:b7:dc:9b:6b:b0:ee:06:03:f3:5d:c5:c2:30:61:61:3d:
         cf:0d:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----