Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          e5xGnwh/3kfPO1T7eD2GK3WXJlECZ59Ui1A2LsHbz+s=
Subject key identifier:   18:67:BF:9E:E0:02:19:85:08:10:CB:46:A2:2B:F6:CD:26:1F:1C:84
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       01936A46AC28E5B67D61DE09BC8163655700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          08BE
Signing time:             Tue 26 Nov 2024 21:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:36 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: 2Skpy7J400qhh7Z2xgOilae+D4D1ITbt5cK18uV29XA=)
                          2: cCjvNuaeeoVC4j7NlrfzN66YbhU.roa (hash: UOYViClJtU67wZgaGcjn1nocoPrIiCScHoHl0HPnWds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:ac:28:e5:b6:7d:61:de:09:bc:81:63:65:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: Nov 26 21:00:36 2024 GMT
            Not After : Nov 27 21:00:36 2024 GMT
        Subject: CN=1867bf9ee00219850810cb46a22bf6cd261f1c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:de:51:87:bf:0f:6d:d1:cc:59:86:f1:ec:
                    5e:2a:9e:e7:20:30:00:11:0d:45:c8:46:3b:8e:1d:
                    0c:f6:77:06:50:78:c8:9b:8d:bf:26:62:42:36:5d:
                    5e:b4:f4:fe:18:51:cc:b6:44:c9:b1:9f:69:63:03:
                    d9:21:91:0c:5d:60:02:5f:1c:b2:d7:3a:e3:11:5d:
                    c5:0e:a7:20:f8:2e:6b:5e:75:23:32:0d:07:2e:b3:
                    ae:39:0f:9a:06:5e:da:27:aa:ec:0f:e9:3d:6c:1f:
                    3a:41:8a:26:0a:4f:bb:cf:46:9d:9a:d4:82:3f:15:
                    b6:ce:25:e4:2f:d2:08:b0:74:73:35:59:11:7b:6a:
                    53:de:36:f8:70:e3:99:f8:75:a8:00:5e:78:8c:b9:
                    7b:4d:0c:a3:f4:86:94:6f:a4:d6:aa:13:70:06:5a:
                    11:33:d8:f0:00:16:a9:7a:7a:16:ac:ae:85:2c:dc:
                    41:9a:59:b9:fe:87:63:b1:8b:d0:07:c9:a7:0c:8a:
                    f3:69:8d:2b:aa:37:b8:c2:91:45:cc:06:4c:e6:11:
                    05:35:b9:16:f3:f7:62:72:50:f7:80:65:64:7d:1e:
                    0c:d4:d7:d6:cb:a5:c6:32:4b:a7:f5:ff:57:55:3c:
                    86:89:b3:ad:b5:6f:5e:f3:38:96:33:7b:89:fc:89:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:BF:9E:E0:02:19:85:08:10:CB:46:A2:2B:F6:CD:26:1F:1C:84
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:60:77:cf:34:b0:1b:f1:78:aa:20:df:5c:ef:34:1a:67:
         11:f8:a5:b2:f7:84:9c:28:51:fb:cb:ad:e5:cc:b9:44:ef:2c:
         9e:fa:7b:6b:8e:bf:fc:bc:4e:cf:23:32:fe:61:4a:32:0a:f4:
         90:9d:d7:99:98:88:1b:ce:df:6f:7e:a2:4c:7c:08:62:83:b1:
         d6:71:eb:d4:78:45:06:6f:82:50:9e:28:84:6b:c8:26:c4:97:
         04:88:ff:af:ca:72:54:69:8c:19:32:be:57:9b:0f:34:9c:c2:
         59:74:87:0f:3a:73:fa:3f:c5:a8:31:25:d8:08:23:a8:5e:9a:
         6b:ab:fc:e1:2b:a7:37:54:70:1a:bc:27:33:5f:2f:88:9d:95:
         99:55:7a:75:5f:7f:bf:fa:83:ab:69:d8:a4:c3:ba:1f:e9:14:
         e7:d8:3a:c4:14:4e:74:9b:84:62:b5:aa:70:d8:21:a3:f9:45:
         0a:93:ae:0b:2d:7d:8e:73:52:76:18:35:90:b1:7e:3f:a4:67:
         76:27:69:45:41:fa:7c:ca:70:8e:0a:3f:fe:7c:1e:61:d5:68:
         df:87:67:6f:0a:b4:c3:4f:f7:35:19:a3:dd:4d:f2:44:3a:0b:
         fe:3d:03:5c:8b:d2:ad:73:26:1c:ee:ae:dd:b0:2f:2b:94:29:
         bf:3f:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----