Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          N4IFGT7NXpQHF5yVPeayZXnVeosUMMxq2GeZTYc/yOg=
Subject key identifier:   AC:21:B0:4C:15:5B:32:C7:3E:88:C1:2C:82:15:4C:BA:E8:4F:C0:01
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019355AD028092B239A557CD2FC057B24CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          0D2E
Signing time:             Fri 22 Nov 2024 21:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:21 +0000
Files and hashes:         1: 0RbSWoPeWSsGyectPN8WxuLj1XM.roa (hash: fFlRDZy4Tka5arVjFQBvC2UoFrVqKMt4cMKrcI6ZuXE=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: rKfgA2aK9jyErDIqDl1g7m/dZvrkaEWLUY6Nn+gZOwI=)
                          3: HJ52sTbPMsW84gRQlOwai7-TA8I.roa (hash: P1yJpiI8fzQn7NFLhsIeBAXMFeguT9AAWT2tUOf2FkY=)
                          4: RiCrEdYXHcvBK9LMdmlzspPTjbg.roa (hash: TrMZBQQ4NLBsDhigUVDxKfIcEv8PPCsRC368z5j3uZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:02:80:92:b2:39:a5:57:cd:2f:c0:57:b2:4c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Nov 22 21:00:21 2024 GMT
            Not After : Nov 23 21:00:21 2024 GMT
        Subject: CN=ac21b04c155b32c73e88c12c82154cbae84fc001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:8e:29:34:7d:04:5c:f8:73:7d:1a:b4:72:
                    22:c8:35:ac:d0:2d:9a:ad:a5:7a:d6:cc:68:d8:13:
                    99:0c:c0:10:94:3e:d1:11:77:21:97:57:72:5d:64:
                    b6:8f:69:78:f1:8f:fc:c0:e8:58:e9:a0:1b:b8:7b:
                    ff:54:2f:e2:be:79:85:3e:6a:b7:d1:dc:cb:03:69:
                    82:ee:1c:ca:a8:86:77:f6:31:c0:b1:82:7d:aa:89:
                    b7:31:8c:0a:86:23:1e:a3:d0:aa:40:f6:2a:e6:a0:
                    e7:01:3c:6b:dd:fa:8a:2f:a2:c8:e0:cb:e5:40:f6:
                    89:df:99:f4:78:99:5b:8d:83:a1:08:37:6e:0a:17:
                    ed:88:f9:c1:d8:c5:f1:a1:87:3b:20:f9:5a:3e:e6:
                    19:a6:f1:bc:ee:16:c9:89:66:0f:4c:36:30:c7:1e:
                    5e:7f:31:26:4c:10:bc:89:08:15:fa:88:b9:ca:b6:
                    40:f4:d8:73:34:f8:2b:9d:9d:8d:c3:12:84:4d:ca:
                    7d:b8:0f:b2:e8:5b:4c:4f:d6:97:d0:ee:4c:7c:63:
                    c5:af:a2:f2:79:76:95:07:04:fa:20:e0:0d:f3:d2:
                    4a:f1:ff:c6:b5:54:0b:08:2a:3f:4e:9d:e6:f0:29:
                    e4:74:98:05:8b:12:d0:44:28:7d:17:1f:58:cd:f7:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:B0:4C:15:5B:32:C7:3E:88:C1:2C:82:15:4C:BA:E8:4F:C0:01
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:39:7b:76:c3:40:f0:38:84:15:c8:49:81:2c:26:62:0d:
         1d:5c:d0:01:70:11:c5:87:6a:42:3c:ee:28:28:6c:ea:c9:01:
         87:9e:08:df:3c:e3:50:17:5b:3a:b7:8d:82:56:01:92:6e:6a:
         46:b2:1d:11:8f:10:e1:bc:f9:2a:2e:d6:96:58:86:0e:8f:f7:
         aa:56:07:e3:e1:1f:f8:13:6b:a9:6c:ba:84:6f:19:fe:47:7f:
         2c:e7:a4:38:15:f2:96:2f:bc:71:3d:31:fc:d4:73:a2:5b:dc:
         65:6e:fb:7b:ea:75:c6:dd:a3:de:7e:fc:d8:e2:51:da:0d:a3:
         4c:81:a9:45:f7:ae:be:6f:8c:28:ac:3c:bb:c6:1d:30:cb:2a:
         af:c0:7e:77:9f:62:60:71:84:a5:b2:5f:6d:b4:50:66:1b:ab:
         4a:bd:ee:a7:cf:51:26:7b:89:0b:ca:e8:99:64:ef:53:68:ab:
         24:7c:1b:08:8b:cf:3d:6c:f4:57:f8:2f:9f:d6:80:7a:ff:88:
         4e:f2:43:5a:02:25:0d:fa:7f:40:3c:c3:35:72:ec:55:92:7c:
         d0:ef:f3:00:72:1c:46:43:9a:3e:ec:c3:bf:cf:56:10:35:0c:
         6e:a9:83:83:4a:6f:f3:49:4f:a8:9d:e1:d8:8d:bc:e7:ca:56:
         2d:a6:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----