Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          xctBFsfBMzN0k4b5IhKVahv9GtjIMweq8Sq1XSocC7E=
Subject key identifier:   C6:29:6A:11:AD:76:0C:24:1F:78:7D:34:83:B8:B5:5F:ED:CA:00:07
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       0193549B02F6F232C32FABC8FEF4F8EE4B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          0135
Signing time:             Fri 22 Nov 2024 16:01:05 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:05 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:05 +0000
Files and hashes:         1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: 7U/d/xcyviG2GP370KpHQzQG/hCGjUc2+mJycnlSPh4=)
                          2: aC3rJ_KdScGIe1FcnRp8qonzSgQ.roa (hash: I81OwpYFzvwaOCSgbr5qLqNuuV/NgAan9LK5aVYNaZ4=)
                          3: iQohj92UY_EuaoFsPOzjLjkH_4U.roa (hash: Mm+UKRDOXB41PPM2jE9V03l1NPjQ4e85+3pVXP4iZ1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:02:f6:f2:32:c3:2f:ab:c8:fe:f4:f8:ee:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Nov 22 16:01:05 2024 GMT
            Not After : Nov 23 16:01:05 2024 GMT
        Subject: CN=c6296a11ad760c241f787d3483b8b55fedca0007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:23:33:79:9b:f4:60:b4:22:d6:ba:0e:35:
                    55:53:df:31:58:91:1b:38:df:58:45:34:52:da:29:
                    a3:cd:ee:26:44:d1:e7:94:60:b1:bc:ba:73:23:d9:
                    55:c4:42:ed:ad:41:92:aa:e5:d3:68:06:a9:1d:e4:
                    1b:3b:d5:34:b1:fd:36:84:cc:52:88:ae:f9:1e:3f:
                    5a:d1:c2:6b:ce:65:9d:c6:3e:9d:72:78:0b:01:51:
                    0e:fc:f9:b8:42:d7:44:88:a6:ef:9b:c2:1b:3c:cb:
                    89:c8:1c:64:e6:98:3b:b7:86:c2:e7:bc:61:91:e6:
                    92:b3:34:68:0b:0c:e1:6e:14:47:cb:ba:5e:5d:ce:
                    32:35:9b:cf:50:dc:41:96:3a:d6:7e:ec:fe:87:b5:
                    51:22:bd:57:ad:a4:b1:4b:40:3e:87:2d:c7:c2:b1:
                    87:ca:48:fc:85:e9:f8:25:02:68:8a:5d:86:d2:28:
                    2c:76:3a:9e:a7:48:1e:5f:c8:d0:99:d6:a3:39:8d:
                    cd:f5:ce:71:24:2a:80:98:23:a3:8e:95:be:c5:dc:
                    89:c4:e1:d1:2b:fb:6f:55:69:19:f6:20:4d:70:aa:
                    58:81:42:47:37:08:4c:c8:40:56:69:1a:93:b3:55:
                    83:59:3e:e3:c6:b1:93:bf:65:b2:b8:c7:5e:64:4d:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:6A:11:AD:76:0C:24:1F:78:7D:34:83:B8:B5:5F:ED:CA:00:07
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:3d:81:39:ae:9c:e9:e1:0d:eb:92:3e:4c:ed:5f:e0:4e:
         c7:23:1b:39:f3:52:6a:52:7e:de:32:2c:61:b8:54:a6:ff:60:
         07:00:81:32:e9:c9:dc:69:39:05:e9:a6:e9:b7:b1:b9:ff:d4:
         bb:f7:11:f9:ac:1b:fb:5a:73:83:fe:13:e0:0d:00:bc:e1:1b:
         9c:b4:83:50:46:c9:3c:3b:a3:e1:ef:6f:10:42:8c:20:b7:97:
         79:71:05:2d:a6:68:bd:e4:8d:e3:48:28:7a:33:00:9a:d8:eb:
         28:e6:74:2d:ad:bd:e8:aa:b2:7e:ab:ad:d5:ef:2b:08:6d:38:
         31:58:fc:2c:f7:12:07:c6:a8:bc:78:28:f5:67:68:e6:ea:ce:
         79:b6:82:c4:5c:3c:5e:c2:be:2f:cd:18:33:07:c9:65:09:42:
         da:df:cb:5f:e5:3d:59:9e:d2:6f:00:7b:aa:88:1c:cd:75:03:
         87:7a:f8:1c:ec:31:74:7e:6b:ba:86:16:57:6f:ad:b4:a6:21:
         9f:9a:de:48:8b:55:67:ac:fb:21:5c:10:b6:e1:43:e4:56:a3:
         c8:6f:52:26:cb:2d:28:14:9f:41:88:f9:2b:ec:36:a6:7e:b9:
         d1:ca:19:aa:9e:ba:70:78:c5:d1:dd:32:cc:ee:b8:94:aa:6c:
         d6:e8:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----