Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File:                     CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier:          1MHth8DeJgcX/8vOLkqPcHxY77gcvAwEG73YL++wx+4=
Subject key identifier:   22:8B:BB:0C:57:36:72:A2:FF:67:7D:EC:A4:FA:7A:F9:B8:6A:7D:34
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer:       /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial:       019355E472D8C85DF96088ECEF01351EB4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 22:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:55 +0000
Files and hashes:         1: 7llY_dOaKkiG2SCPk3KgX-Vy4js.roa (hash: 5XrALu4/ZOHhP7bKw0CcLI0ipABagws5xNeks1e/93Y=)
                          2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: 7A9kl0x+vxj/GHxqX1SCeun0DGFKGGcXm5PiGsRxV4Q=)
                          3: GUmaJzfZzAdW94729BVx3bxnvvI.roa (hash: p1XaNJjmkMbqwOYcM+rF+yV2UbppQupd9kE5HujGvss=)
                          4: ytZFJp27jGFYcX22sjWEfOc-rNk.roa (hash: rrfhczHYqW8Z5rAN9Dam9ieX700vIKeW9o1NL88feBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:72:d8:c8:5d:f9:60:88:ec:ef:01:35:1e:b4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
        Validity
            Not Before: Nov 22 22:00:55 2024 GMT
            Not After : Nov 23 22:00:55 2024 GMT
        Subject: CN=228bbb0c573672a2ff677deca4fa7af9b86a7d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:d4:2e:a5:bc:00:ff:84:21:2d:41:2c:77:
                    df:e2:6a:3a:2b:ee:f1:68:d8:61:18:ad:50:c4:95:
                    63:a8:d5:0e:88:75:f7:8e:fe:7c:9c:e2:8e:81:71:
                    2b:2a:c9:24:c2:87:24:32:d3:70:cc:c6:94:7e:3d:
                    6b:ba:b4:d2:a4:9d:5b:2c:4e:db:a6:86:f6:62:8c:
                    f4:cc:4c:a5:1d:e1:af:ee:77:d3:bd:3d:09:62:86:
                    e0:0c:68:a4:50:57:75:4a:e2:f4:2a:65:98:c7:c4:
                    56:75:0a:e1:70:9d:c2:7f:83:06:4e:58:d1:c5:b2:
                    f8:da:e7:46:de:19:96:f5:8d:f5:27:4d:b7:9e:c5:
                    4f:bc:4a:98:58:95:46:02:30:b6:cc:ed:2e:0b:98:
                    02:4d:62:72:77:f6:78:6b:c6:7b:f1:c2:09:e6:e7:
                    85:8d:3d:86:e4:dc:cc:be:8f:8a:8c:96:58:16:8a:
                    65:e1:74:d5:6a:c7:84:a5:a3:3e:41:67:3a:36:40:
                    23:88:4d:63:76:2a:ea:ef:d8:73:6a:b9:c4:b8:73:
                    b8:28:5a:d5:da:53:e4:5e:c4:01:3f:2b:40:4b:3b:
                    77:69:8b:a4:46:16:ad:ec:ab:ca:57:ec:67:1d:fb:
                    ff:21:ad:10:01:ac:ad:1c:5f:5e:29:22:a8:cf:2e:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:BB:0C:57:36:72:A2:FF:67:7D:EC:A4:FA:7A:F9:B8:6A:7D:34
            X509v3 Authority Key Identifier:
                keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:14:a7:af:76:ff:90:4b:24:5f:36:64:c4:e4:71:14:22:
         e7:4a:df:9c:9f:10:b1:b3:cf:3b:56:6b:39:be:3e:2f:c3:07:
         3c:6b:e1:ba:f6:d9:d9:86:d4:7d:d8:a0:27:97:24:78:a2:53:
         03:2b:8c:83:c7:de:1d:91:73:1d:49:39:f0:b8:1a:a1:21:53:
         3f:11:56:75:10:45:5d:f0:fa:2f:79:dc:e2:79:9f:e5:9f:52:
         23:fd:d5:f7:19:40:13:60:08:9a:fe:5c:90:eb:0a:03:b2:d0:
         da:f2:96:73:69:dd:23:78:61:07:14:ea:d2:5b:5b:86:7f:64:
         5d:c2:32:84:1a:94:a2:c7:65:50:f8:e5:2c:60:f7:fc:6e:07:
         d8:d9:92:75:85:a6:d1:5a:08:5e:62:c8:57:ff:a2:70:78:f7:
         eb:a3:a4:a4:11:66:a3:8d:db:b4:a3:e2:0d:7c:8b:48:f8:eb:
         d9:1d:37:ec:19:93:e7:37:07:4c:b4:0f:7f:b2:1c:6c:14:07:
         e2:cf:ce:fa:94:54:a6:2c:c9:7c:54:8b:16:a7:db:24:4b:25:
         fe:62:e1:8b:12:14:e4:bc:62:33:17:d5:4c:70:39:82:20:64:
         60:f4:94:a0:32:d7:48:60:75:22:bb:7d:49:b4:34:5a:17:cd:
         70:3a:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----