Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.mft
File:                     rzsT_JpgQAFyVhsKUg3xbLJRz5U.mft (raw, json)
Hash identifier:          KstCjVx9/38sFV/grYLLSY7U8ynR3NuU3f5IEYyOk1I=
Subject key identifier:   12:E7:CC:49:62:84:00:81:E1:B3:94:8C:73:B4:E3:5D:70:76:82:7B
Authority key identifier: AF:3B:13:FC:9A:60:40:01:72:56:1B:0A:52:0D:F1:6C:B2:51:CF:95
Certificate issuer:       /CN=af3b13fc9a60400172561b0a520df16cb251cf95
Certificate serial:       0193549A83AE80D84E30439F93BCEAE912B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rzsT_JpgQAFyVhsKUg3xbLJRz5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.mft
Manifest number:          0C55
Signing time:             Fri 22 Nov 2024 16:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:32 +0000
Files and hashes:         1: kSP85nRmf_pMQ7aw_quvRnwE0VQ.roa (hash: ffd1NJ95Tp5K58icyyrfdHA8LmxOETc5J58UDsZSkRI=)
                          2: rzsT_JpgQAFyVhsKUg3xbLJRz5U.crl (hash: H8/OuC2C6emiNQrRRwtOs5S89O+zP5N+Sq9Y2zxhcr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rzsT_JpgQAFyVhsKUg3xbLJRz5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:83:ae:80:d8:4e:30:43:9f:93:bc:ea:e9:12:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af3b13fc9a60400172561b0a520df16cb251cf95
        Validity
            Not Before: Nov 22 16:00:32 2024 GMT
            Not After : Nov 23 16:00:32 2024 GMT
        Subject: CN=12e7cc4962840081e1b3948c73b4e35d7076827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:5a:f2:be:43:8f:27:cc:44:8c:06:27:b2:
                    34:44:f7:af:6d:14:0a:61:c9:3d:c9:1d:d2:31:69:
                    a1:5a:4a:e7:e6:77:48:07:8b:1f:38:18:75:43:a7:
                    4b:b5:2e:e6:e3:64:8a:16:3e:8c:40:91:11:06:29:
                    ea:a9:53:c1:fa:66:14:8a:c3:29:16:68:98:45:25:
                    12:f7:cf:22:19:50:6a:3e:7e:c7:e4:1f:90:f0:e5:
                    2a:00:08:9a:aa:f6:c6:33:1a:cd:28:c4:f9:9b:b2:
                    a0:c8:86:56:f3:d9:39:87:11:46:78:d8:9d:a7:6f:
                    aa:ad:a3:61:55:5a:9e:3c:d3:74:41:1e:ee:08:02:
                    38:be:c6:01:b8:33:75:1a:e4:b6:16:44:0d:8b:21:
                    4f:c2:13:42:a9:ff:27:54:0b:54:44:9e:1b:ac:ff:
                    ea:7f:b2:8a:61:21:54:a3:fe:d1:4b:3f:7c:15:b2:
                    98:26:87:17:30:cf:a9:01:bd:b9:68:7d:c8:71:db:
                    4c:a5:8e:58:3b:76:74:e3:0e:22:4f:c2:ae:ad:d1:
                    ee:53:52:d3:12:61:0a:8d:47:4b:33:c3:69:8e:d4:
                    c4:5e:29:c4:c4:7f:b7:bc:38:e0:b5:61:80:a2:e7:
                    aa:ff:88:0a:a5:fe:30:9b:5e:0b:fe:e9:0a:51:42:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:CC:49:62:84:00:81:E1:B3:94:8C:73:B4:E3:5D:70:76:82:7B
            X509v3 Authority Key Identifier:
                keyid:AF:3B:13:FC:9A:60:40:01:72:56:1B:0A:52:0D:F1:6C:B2:51:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzsT_JpgQAFyVhsKUg3xbLJRz5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/653e8b-1f78-4c37-b254-73676526053b/1/rzsT_JpgQAFyVhsKUg3xbLJRz5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2f:16:84:4e:84:af:9d:11:08:72:3b:23:12:d8:3c:ae:32:
         3f:ec:a5:82:a4:e8:82:f2:61:9e:51:54:37:5a:54:19:08:ef:
         4b:2a:11:a3:c3:3e:93:bc:f7:4b:d1:5a:0c:bf:4a:da:25:17:
         e9:89:0e:9e:ee:8a:0b:06:26:28:4a:31:0c:d0:8e:d7:46:43:
         8b:58:3a:d9:86:38:e8:e6:2a:7d:c7:0c:2a:e2:72:a2:54:95:
         a7:a2:ec:25:63:42:68:40:1e:87:4b:94:4e:ae:1a:8a:07:5a:
         dd:0b:f9:d5:4e:5b:74:62:7b:12:04:f1:78:06:17:4d:f2:4a:
         cd:f6:7c:cf:6e:4b:f6:a5:c9:cd:f7:cf:b4:c3:4f:a3:7a:49:
         c1:74:30:12:e1:0e:6f:37:3c:3f:69:3c:51:ce:ff:5d:d7:e1:
         ed:f8:fd:37:d9:a3:f5:e5:09:2f:6e:3c:bd:80:80:e0:2f:27:
         ae:51:bb:bb:ab:cf:b5:2d:4e:6f:57:79:a3:45:01:10:7d:5a:
         2e:01:24:f8:c8:12:e5:2c:4c:a1:db:18:a9:0a:66:1a:19:a8:
         41:9a:3d:f8:7e:91:19:c0:c1:88:3d:5a:4a:c9:9f:e9:79:5f:
         57:33:9e:b8:3a:59:6c:6f:3d:66:e9:35:19:19:5f:a9:47:17:
         e5:a0:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----