Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          T+RsHuGnBZIviU0S2rqB7ArEihSdHfJht6QdreOCwWk=
Subject key identifier:   6A:3F:89:68:FA:D0:36:66:F5:DF:7D:AD:3D:08:FD:D2:B0:FC:6F:85
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019355769AB5C0EFF50B7660EB1577CD317E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          0BDE
Signing time:             Fri 22 Nov 2024 20:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:56 +0000
Files and hashes:         1: BV_dIcP3PiR-50lmtWY1MpNX43E.roa (hash: aipX5fks9jFF5BdX3LVy3U/nej7nx45YhybwaV4patY=)
                          2: SmhFolwIn3kTRgGOffk_ac06YNk.roa (hash: TAXLQh72sSmLf9IV/AKqeAGXws+KnSPg76pj5FP6m4o=)
                          3: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: OZuzariquybP9tfE5zfasvirwF+dyoskO/X07jpVM2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:9a:b5:c0:ef:f5:0b:76:60:eb:15:77:cd:31:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Nov 22 20:00:56 2024 GMT
            Not After : Nov 23 20:00:56 2024 GMT
        Subject: CN=6a3f8968fad03666f5df7dad3d08fdd2b0fc6f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:0d:51:ab:97:db:c1:01:2a:01:13:69:eb:
                    8c:0b:64:89:d4:d7:21:6f:b9:0b:b4:16:2d:af:c7:
                    a3:52:33:1f:81:3f:c9:48:f8:1e:c8:a0:84:dc:ef:
                    be:04:68:02:b0:be:f2:18:0c:b3:87:53:a7:75:18:
                    39:06:96:5f:a8:87:c9:92:cb:8a:31:68:48:91:b2:
                    66:85:45:24:62:3c:82:08:8d:be:49:c2:b4:42:6e:
                    27:f0:45:34:e7:a5:ec:20:46:53:26:67:80:53:ce:
                    a0:83:87:7e:27:54:29:5e:c2:5c:82:20:c7:84:00:
                    a5:73:f4:37:f6:bc:fb:ee:08:d1:d1:68:24:86:10:
                    af:89:d1:56:44:26:c9:41:a1:53:54:42:8b:6b:ac:
                    32:c4:e5:a4:00:7d:64:26:dd:9b:26:3d:c0:38:d7:
                    e1:12:7d:59:04:f7:8c:bb:cf:fd:25:b6:c0:19:db:
                    fe:4e:a3:d9:bc:00:ef:f6:cc:0e:46:78:06:cb:52:
                    4a:7e:fe:68:d6:e6:b7:4c:ce:a1:7f:8f:8e:09:ff:
                    29:08:75:ba:1a:f1:cf:7a:e7:fc:3a:6e:37:14:49:
                    a3:0e:e1:46:df:68:7f:3d:f9:0f:31:7d:26:cf:47:
                    9c:9e:45:10:88:f5:b9:83:8e:c1:cc:9b:8b:33:f5:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:89:68:FA:D0:36:66:F5:DF:7D:AD:3D:08:FD:D2:B0:FC:6F:85
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:cd:4c:23:7c:ab:80:4c:34:fe:66:c5:ca:dd:17:35:99:
         83:65:70:a5:a9:e7:ae:53:85:55:fe:97:c6:38:89:a5:fa:05:
         54:5d:a6:71:c6:ca:12:ca:47:23:ce:66:f4:2c:48:82:fe:a7:
         ce:8a:44:13:50:b1:a4:a0:b3:b6:08:2d:dd:5b:7f:2b:5a:ec:
         e0:2c:b3:20:72:b7:ca:f2:a4:46:32:47:37:c8:c4:f2:3f:2b:
         e9:30:76:75:85:4b:71:63:2c:83:17:db:f4:ca:91:d0:1d:58:
         8d:93:d0:2d:e7:41:5a:3f:cb:e3:7d:a3:f7:07:4e:b2:7e:c7:
         73:1f:84:ba:6f:95:d6:96:ae:d9:60:f3:cb:4b:15:66:4e:4f:
         fa:93:ef:71:4e:d2:0b:24:d8:66:ce:12:f5:6f:5c:e3:e9:93:
         b8:05:ae:49:ee:28:2c:32:ff:03:78:59:b1:cf:34:fb:ef:9e:
         df:f9:f1:6a:bc:b1:e2:6b:4c:7e:13:e8:2f:5f:d6:15:21:40:
         c5:af:1e:b5:0e:b5:fb:b5:15:60:b4:0e:12:10:a2:32:8b:9e:
         d2:bf:bf:cc:f1:0a:1a:2b:12:16:4a:b7:aa:9e:21:54:db:7f:
         3a:fe:9c:17:8d:1c:0e:b3:3d:5f:41:50:d1:ae:81:a7:14:ef:
         35:12:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----