Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File:                     GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier:          tBm6ntxHHqMkDgPnlz++5lP0i8dS1UpxMMCZZE9gRLI=
Subject key identifier:   4E:BC:EB:90:15:59:B5:4C:4C:42:61:9C:8D:A2:34:9E:11:6C:88:1B
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer:       /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial:       0193696A8E458C14243299A4DA3041F81F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number:          0CD8
Signing time:             Tue 26 Nov 2024 17:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:11 +0000
Files and hashes:         1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: Qa/4jovIh2jKuHwJuXqyOe4rtn6P1aU4MqWLquuaJOs=)
                          2: pgxwWsU9dHlbRGQSNMfu8UkOv-c.roa (hash: 6YwIPG1IpfFoE48vLDgp65uu0kaUkLRm3eSnpVfCiCE=)
                          3: zo9xhovZbPbnDOugld4ff1FizPQ.roa (hash: rQwSRajRcjXBRtOfwBDNk502NifqaCZMDvTb0p1JVPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:8e:45:8c:14:24:32:99:a4:da:30:41:f8:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
        Validity
            Not Before: Nov 26 17:00:11 2024 GMT
            Not After : Nov 27 17:00:11 2024 GMT
        Subject: CN=4ebceb901559b54c4c42619c8da2349e116c881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:48:68:f4:08:5a:db:48:0e:e8:45:3a:5f:
                    bb:26:26:f8:cf:4a:17:e0:1f:cc:a7:39:1b:3a:b3:
                    cd:da:f2:1d:b7:47:6e:da:52:d2:5d:7c:1f:9a:3b:
                    38:de:91:90:d3:51:07:d1:bc:48:54:71:c2:4d:4a:
                    3d:af:b5:ed:6e:04:ab:db:24:fd:cb:fe:26:08:57:
                    bf:61:dd:4e:48:0b:6d:c7:90:b6:da:9b:cb:8d:cf:
                    27:06:9d:01:d7:b3:2a:78:d2:65:16:d0:b9:a8:6f:
                    3f:44:5f:7e:1d:7f:bd:01:77:bb:5c:f6:68:d2:2f:
                    c4:e4:45:b8:9d:39:a3:78:31:f6:af:d1:48:f1:be:
                    3f:f7:77:14:9f:f7:49:53:ec:c9:51:19:de:a3:00:
                    b5:2f:dc:23:45:02:57:c2:18:64:8b:d0:fd:02:e6:
                    78:37:1d:2d:2a:37:27:91:82:db:e8:16:2d:d7:33:
                    70:c4:2f:a8:66:be:9f:74:59:d0:0d:69:de:f5:51:
                    41:cc:7d:46:02:23:b0:fc:6a:e3:09:46:cd:2b:c3:
                    7a:bf:bf:04:8d:5c:e1:7f:4a:fc:a8:82:7a:8a:e9:
                    37:07:2b:e4:d7:6e:33:79:d7:7b:e1:72:a3:d6:bf:
                    b4:0e:34:ba:fe:a1:99:35:f7:3f:f4:6d:2e:52:a1:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BC:EB:90:15:59:B5:4C:4C:42:61:9C:8D:A2:34:9E:11:6C:88:1B
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:ee:a2:fe:d7:bf:17:9e:13:40:e5:be:c3:4a:e0:50:f5:
         91:67:a9:b2:ad:ed:be:db:50:b2:2c:e7:2f:d2:c5:db:c2:6d:
         89:75:e0:a4:47:58:2b:7a:cb:17:98:09:5f:28:39:00:05:d8:
         e3:a3:11:e1:f9:df:c2:79:69:a5:41:ec:f7:85:ac:a5:01:dd:
         94:a1:5b:f4:37:77:5e:36:2c:37:c4:8b:29:a2:3b:96:e5:30:
         ca:47:c4:7d:87:25:f7:93:da:f8:b3:f7:d8:fc:ba:ec:bb:e2:
         2d:e8:e1:a6:f9:d6:c0:a4:92:b2:ef:46:bf:d7:c1:22:05:ea:
         18:fb:e4:46:86:68:f5:ca:5e:23:fe:1b:65:c8:d2:31:51:4a:
         7b:f1:40:3a:4f:28:26:86:5c:c4:93:28:c6:3d:e4:2d:c1:fa:
         1f:ab:9f:98:69:dc:74:85:f3:0a:e4:5a:f6:e3:00:34:e9:04:
         e1:e6:ef:9c:da:16:68:33:32:ca:9c:9b:43:f9:c6:ec:c8:24:
         3f:fb:74:20:84:f2:dd:0d:24:e1:7f:74:da:dc:f7:41:65:68:
         83:a5:54:a3:4b:25:46:cc:9a:3a:16:93:6f:40:de:df:ee:bf:
         53:a6:be:f5:12:4c:9a:92:8e:48:fc:83:e9:24:e2:c7:ad:63:
         11:d3:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----