Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File:                     7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier:          tsLo9pL9TvquIQ+cMXvJsndUD6sH6OVvUU3d+Ri8FSw=
Subject key identifier:   38:DC:BA:50:57:0C:6E:29:32:68:D7:B3:12:3B:13:17:5B:66:6D:91
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       01936AB469628228020737160F2DA873688C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number:          0FBB
Signing time:             Tue 26 Nov 2024 23:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:28 +0000
Files and hashes:         1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: khHgoKevEpX6AkncGU0rd/4QVYpaOptaawYqR6c7mrc=)
                          2: 7f_wj6utXgFR2_PLNwzeZe2vXc4.roa (hash: sHSYriCdZg1kv3jGe0Xswscr+j52tBqIPLYHl9OSbko=)
                          3: JQfXKlN1iojXl4gF2UJe66NSBZ8.roa (hash: hzxCCytmvsVTmCRt4pODHbBSIplALKuJPFcIdx6fQRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:69:62:82:28:02:07:37:16:0f:2d:a8:73:68:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Nov 26 23:00:28 2024 GMT
            Not After : Nov 27 23:00:28 2024 GMT
        Subject: CN=38dcba50570c6e293268d7b3123b13175b666d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:65:10:5b:1b:eb:d5:0d:b0:65:cf:10:41:
                    20:f9:12:e0:e4:2a:fd:c1:d7:6a:93:6d:1b:d7:3b:
                    8e:af:8c:2c:61:d6:a0:58:e6:0d:8e:92:19:62:31:
                    c9:b3:e5:21:4c:14:ca:df:76:bd:09:8f:18:bf:af:
                    23:02:9a:78:c0:8c:91:15:2b:8d:40:78:c6:9c:ae:
                    9a:10:91:48:f6:63:e0:b8:b2:17:69:94:28:02:e9:
                    6f:08:35:46:b1:80:b8:ed:4b:5a:31:93:90:ee:d0:
                    d7:38:96:cd:0d:bc:49:5e:f5:c2:1f:ea:ed:a8:b0:
                    40:89:cb:c0:61:1f:c6:c0:98:69:4b:63:90:96:91:
                    db:4f:f6:49:bf:98:a7:b2:cd:1f:8b:1f:3e:c1:f0:
                    7b:d6:d4:e1:b2:e5:3b:78:c9:c5:33:22:dd:4c:1c:
                    24:2f:6b:55:2e:85:7f:ee:77:ed:08:85:e0:4f:85:
                    bc:ab:b1:a0:df:28:0e:87:91:b6:47:ec:0a:74:d0:
                    26:64:3b:f2:94:d0:eb:7a:d4:e5:c2:41:23:c8:df:
                    97:33:63:56:4f:4c:40:ce:57:9e:ce:f0:d1:2d:6f:
                    31:69:d4:82:4d:78:37:3e:6b:1d:0a:1a:ec:3c:f4:
                    67:08:c1:9c:0c:43:50:ce:4f:0e:6b:6f:3f:0e:d7:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:BA:50:57:0C:6E:29:32:68:D7:B3:12:3B:13:17:5B:66:6D:91
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:17:57:ff:01:55:7f:70:4c:54:4d:ed:00:71:c5:1b:10:
         8c:c8:59:b2:97:1f:61:7a:6b:26:9d:6f:5f:30:77:61:ca:eb:
         5b:7f:62:bb:76:b8:98:d6:aa:ad:20:bc:c5:1f:eb:08:44:d1:
         70:44:35:9b:02:0f:f2:69:26:86:40:e9:a4:1b:91:85:2a:62:
         8f:9c:35:5c:6c:ce:56:e5:1c:ce:10:c7:4e:c3:da:47:75:c3:
         b5:0f:56:99:78:3b:74:dc:40:19:0a:09:30:c0:9e:bb:4f:39:
         3a:11:fa:96:c5:8e:0d:87:27:0f:af:bd:c4:05:55:d9:32:41:
         37:15:57:a7:2a:53:7d:4f:2e:55:5c:68:8d:ba:23:1d:dc:62:
         cf:c7:31:be:2b:85:38:03:7d:c9:bf:e3:11:fe:8f:af:a8:f2:
         95:3d:03:a4:45:66:22:cc:63:61:8c:66:41:fc:df:e2:bf:29:
         46:a5:f2:f1:d8:a3:35:0a:e2:d0:8d:3c:a0:87:40:a4:60:69:
         0f:30:d6:60:c0:74:64:81:89:bc:3e:fa:9f:a7:41:21:a5:f9:
         7c:2c:95:d6:90:f7:5e:e5:4b:f3:59:d6:7d:d5:f4:ab:99:b6:
         82:e9:1d:ee:43:ad:8e:04:54:cc:c7:55:0c:6b:3e:15:32:d9:
         e7:68:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----