Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          attgQsMq8IDGrPivmf7SxiuBYZ6gakHOMevdvVT8TUE=
Subject key identifier:   AA:84:0C:6D:9C:BD:21:43:C0:A4:0F:C9:5E:E2:E1:F3:72:F8:BF:E4
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019052108EB0436A0C8472AACE680F9A6264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0C29
Signing time:             Wed 26 Jun 2024 01:02:15 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:15 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:15 +0000
Files and hashes:         1: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: FmspRZA3C/lCp3Mnl6ovJJfvyGoq/5hyZ6/F7behGK4=)
                          2: rVNS5ZLJ0DneG9cmkLjv3g05yH4.roa (hash: wch70Ap5xhYxbnT/Ll8b0Jhpuqvb5dshXYH/a2RUZq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:8e:b0:43:6a:0c:84:72:aa:ce:68:0f:9a:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jun 26 01:02:15 2024 GMT
            Not After : Jun 27 01:02:15 2024 GMT
        Subject: CN=aa840c6d9cbd2143c0a40fc95ee2e1f372f8bfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:eb:68:f7:d3:55:2e:8b:23:89:4c:cb:24:
                    d8:59:60:7e:32:77:9f:c9:42:88:c1:17:34:4a:aa:
                    9f:e2:f9:2c:c3:27:22:bb:09:b2:95:44:4e:44:68:
                    12:c8:e3:85:15:73:78:ab:33:4f:ec:89:7f:9b:3b:
                    97:4e:73:8d:c1:3b:7f:62:cd:c7:fa:40:aa:cf:4b:
                    4f:48:2b:f7:99:bd:a1:33:59:1d:02:8a:97:47:f5:
                    91:ce:1c:27:0b:84:a4:ac:7a:a1:7c:68:49:61:fa:
                    a7:5b:47:c7:44:b6:7e:cf:ed:ef:19:ac:7a:71:bc:
                    79:b3:0d:e6:ce:c7:f7:62:5d:b5:95:e1:ee:57:56:
                    bc:e7:73:68:a9:ce:5e:56:da:fa:a7:c8:fe:9b:46:
                    c4:07:f2:0a:61:8c:4d:4a:cf:5f:a7:09:25:8c:13:
                    96:b9:aa:fe:29:82:ae:32:8b:d5:91:7e:39:91:f7:
                    44:f5:44:de:29:63:41:87:dd:65:71:0b:2c:b1:2e:
                    69:e5:31:91:6e:4c:7c:ef:4c:f7:2b:ec:96:7e:e8:
                    54:d6:e4:d1:bb:40:86:ec:d7:ed:75:18:bd:53:a3:
                    0c:14:37:4c:91:3f:f6:33:5f:f4:4f:47:41:f3:e3:
                    3a:bb:a2:f7:1c:64:d0:1d:9b:f3:8b:8c:a6:07:90:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:0C:6D:9C:BD:21:43:C0:A4:0F:C9:5E:E2:E1:F3:72:F8:BF:E4
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:ae:2d:e6:ae:5a:ce:21:fc:82:e4:70:58:5b:e3:e7:9b:
         82:55:fd:35:cd:e8:a9:f1:a3:45:ff:7a:a7:94:e3:7e:e0:d9:
         76:1c:16:4a:43:ab:ae:6a:0a:5b:65:37:66:55:fa:23:8e:f8:
         6c:42:19:6b:34:11:e6:df:b8:6e:db:eb:73:1f:11:c0:4c:1d:
         9a:bd:10:b7:57:67:36:09:c6:1e:c6:a7:42:f7:42:95:bd:d3:
         8d:08:2a:c5:ef:e8:67:40:12:37:91:39:ed:6d:4d:64:61:e3:
         2e:9c:68:da:51:f7:48:a3:e9:43:5e:ac:93:5b:b3:5b:a4:57:
         87:3b:86:77:1c:e1:ea:dc:fb:b0:6f:37:be:59:bc:76:a2:a4:
         48:fc:5a:fa:ef:30:29:4a:1d:d8:5e:ba:53:29:ba:86:63:44:
         40:b2:13:11:44:bf:fd:3a:76:8b:c0:cd:15:4e:fd:1c:e5:06:
         cd:5d:c1:f2:95:98:4e:9d:7c:b1:3c:21:a7:e0:67:5e:83:2c:
         89:33:c2:23:ca:a8:15:00:c1:e2:83:3a:31:8b:37:fd:42:40:
         c7:56:40:bf:05:a4:0f:95:60:7e:1b:6c:15:b2:d4:dc:64:bc:
         92:c0:41:91:a0:e8:50:47:ce:02:70:e5:f6:68:30:68:32:71:
         f7:5b:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----