Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File:                     E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier:          MZa5aKmyjoYKZ1AVrq8S8Zi3XbdDHCrdfua8SWhBAas=
Subject key identifier:   15:CD:0A:42:A8:0C:1D:D4:4E:00:9C:A8:13:7F:63:C0:B3:25:68:C7
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       01935952BA09E1FF6953E109085DAA2E4C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number:          0F50
Signing time:             Sat 23 Nov 2024 14:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:13 +0000
Files and hashes:         1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: WhIiEfoWzGiWAWoX9bWI/U4RSHc3sh+cX3qRQc/aQ7g=)
                          2: Vm6xVnGu5Af01Ox696kESJbpre8.roa (hash: l8pWFwTDpUI74w7nuYter9AFo7CKzg+Vp6nXkWlBx3E=)
                          3: h4Ouyy1iSkAjLLqkWDUO2clKMmE.roa (hash: IzHdDgfI0M/CNSQom4AXq2GCX4sZdY1eEA5lo1KYRZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:ba:09:e1:ff:69:53:e1:09:08:5d:aa:2e:4c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Nov 23 14:00:13 2024 GMT
            Not After : Nov 24 14:00:13 2024 GMT
        Subject: CN=15cd0a42a80c1dd44e009ca8137f63c0b32568c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:17:9f:83:21:79:5a:69:43:83:17:e9:b9:
                    ed:6a:73:4c:f5:31:06:21:8a:ab:64:e9:3f:cd:40:
                    c7:e0:98:dc:4b:bc:32:79:51:b6:d3:b1:2d:70:6c:
                    b7:3b:eb:d6:ab:8e:dc:fd:f8:2c:09:c8:cb:67:de:
                    2f:28:02:7b:6f:30:fb:d0:85:89:dc:08:8e:6b:c6:
                    dc:71:b6:bf:46:bd:47:42:6c:b0:46:1d:bd:66:ed:
                    cb:63:53:3b:b8:ed:1a:0f:6a:5e:ee:05:d0:ae:f8:
                    db:68:30:e0:e7:2f:12:70:c4:0e:de:a3:33:08:95:
                    35:fb:af:e2:d9:90:17:30:06:ca:b0:45:94:6a:10:
                    9e:51:33:2f:0f:d1:8b:b9:a7:09:ff:f9:5a:0a:95:
                    d7:24:8d:90:8d:b6:c4:f1:69:b2:cb:5f:44:80:c1:
                    02:1f:87:d3:54:11:63:b3:59:8d:55:be:33:ba:9b:
                    90:86:23:15:d3:16:d0:26:1a:ae:74:51:f1:76:31:
                    fe:06:ae:8f:13:be:83:a4:0a:0e:3a:fc:a3:8d:fd:
                    0c:a8:bb:de:ec:7a:3b:70:72:68:f3:0e:cc:7d:cb:
                    ca:cc:62:40:1e:d4:ef:5e:fb:0c:f6:bc:b7:63:e2:
                    c5:4e:37:da:52:fa:14:52:31:d1:15:2c:8d:90:07:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:0A:42:A8:0C:1D:D4:4E:00:9C:A8:13:7F:63:C0:B3:25:68:C7
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:03:77:0c:79:14:dd:6a:8b:a3:b3:58:72:89:8c:c0:d3:c6:
         56:8d:e0:82:e3:9b:4c:27:6e:c4:4b:aa:02:5b:e5:49:6e:39:
         cb:f6:f8:b6:94:fe:a7:a6:db:24:07:0d:aa:67:fa:87:43:35:
         64:7d:05:64:e0:33:a5:c1:76:8d:38:08:50:c6:ed:b5:a3:19:
         db:61:63:fb:0a:19:c9:cb:5e:d1:a2:b4:55:62:02:13:73:2b:
         43:0d:3d:5a:13:f5:da:90:45:0a:b9:1e:6e:e2:ec:65:7d:e8:
         3d:b5:a1:d0:96:29:2d:0e:d9:0a:68:91:cf:a3:ab:15:77:c9:
         46:55:38:ba:fe:bc:08:c3:0b:f2:05:d9:86:9d:41:c8:cb:2c:
         54:77:ff:f8:f4:1b:2f:39:d1:ae:51:c3:1e:33:3c:13:8a:10:
         71:f1:6e:39:15:97:e5:ed:0a:45:5a:e6:3d:6d:14:66:54:09:
         97:f6:8d:ec:e9:82:8b:98:39:eb:b4:8d:bc:36:33:c1:36:12:
         9f:4b:c7:77:20:f2:88:fd:3f:9a:6f:f4:e1:33:84:3d:16:78:
         c5:e7:14:cf:49:09:c1:b3:2f:90:34:4a:f8:6e:f0:06:9d:7c:
         34:4f:d4:f4:e8:b7:f1:bd:07:57:80:75:50:a4:12:88:03:11:
         3f:17:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----