Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File:                     GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier:          Darc3teiguP2qPmWNgst/qSkchjrbVQ28JAE47h3Ieo=
Subject key identifier:   67:1B:A6:3E:38:E4:BB:3A:18:3B:66:DA:35:94:5C:D8:76:7B:B6:42
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       01940646E0B33040EC0521D515FFC76BCD25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number:          0CCE
Signing time:             Fri 27 Dec 2024 04:01:35 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:35 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:35 +0000
Files and hashes:         1: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: KRwIORxhJmEye+bh1sIZRt5DpUrID4GolfgptDSsOgg=)
                          2: Iapo1sYws9xLqN2XQEc3rQAkpIc.roa (hash: S7/ZN5hIHpyL45/AQUxf0+LWc4UGreVTCdNfqS0+UJs=)
                          3: uyErzlODFqsgUb7YdzdD4VHRiQA.roa (hash: Ae+SPZ8rBaXaMuRG+myVDkh3SUTMrZ6XX/cpdkFlQZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:e0:b3:30:40:ec:05:21:d5:15:ff:c7:6b:cd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: Dec 27 04:01:35 2024 GMT
            Not After : Dec 28 04:01:35 2024 GMT
        Subject: CN=671ba63e38e4bb3a183b66da35945cd8767bb642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:48:68:29:08:83:d8:f2:6d:1a:fd:02:1d:
                    06:0f:0a:0d:66:26:bb:54:55:3b:05:e3:21:d1:1e:
                    ed:42:72:1d:b0:f1:e2:04:ee:f9:0a:dc:92:f9:70:
                    b1:3e:d7:05:ba:95:af:69:13:42:e2:e8:9d:10:03:
                    5d:33:81:ce:21:1f:b3:26:79:5d:b7:d7:30:d5:d1:
                    c0:84:e0:43:e2:ba:8a:ed:4e:28:a7:3d:dd:c1:1e:
                    e5:b8:72:98:10:5a:fc:d6:63:d3:28:27:b4:af:39:
                    d2:3f:ea:54:aa:d9:c2:0d:34:6d:e5:98:e4:3a:d0:
                    db:8f:53:02:c0:3c:b7:72:7b:4e:82:25:78:8d:4f:
                    38:06:17:45:5a:6f:fb:5e:8a:c0:2b:df:e4:6f:00:
                    ee:7a:92:91:84:15:79:55:42:74:69:05:bf:68:2f:
                    7f:36:26:ff:b8:1b:ed:17:76:7f:72:74:07:ed:0f:
                    d2:f5:3c:49:6f:a3:8a:a8:7c:e5:e8:29:bf:dd:25:
                    0b:89:29:cc:13:fa:74:b7:75:85:4a:9f:08:38:50:
                    04:e0:63:16:4b:6d:2d:5b:89:c0:3b:7c:8f:e0:d7:
                    d7:c4:98:02:74:dc:da:6a:eb:74:47:6e:69:99:25:
                    17:fb:5e:0d:ae:51:5b:c0:ee:d8:a1:b6:ee:e3:df:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:A6:3E:38:E4:BB:3A:18:3B:66:DA:35:94:5C:D8:76:7B:B6:42
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:b0:97:f8:65:2b:e6:89:46:f6:c4:c4:69:23:e7:12:63:
         f3:8b:29:0a:fa:da:b0:50:69:34:19:56:1a:29:9b:8a:a6:9c:
         03:2e:79:cd:83:d6:3a:15:ec:c3:d0:1f:58:8a:f2:49:24:5d:
         c0:77:a2:c7:f8:d4:47:5b:f5:88:27:a6:ec:25:af:95:c9:d0:
         11:c8:58:4b:f0:c9:74:32:46:20:1a:6d:74:41:8a:a4:fe:5f:
         4e:5b:d7:0e:7f:6c:c6:e1:1e:43:9d:7e:f7:99:65:b6:d3:98:
         47:f4:27:f0:fb:aa:8f:f5:9c:5e:be:a6:1e:20:1c:98:ee:3e:
         9c:ba:75:11:32:a7:50:ac:d8:6c:ca:53:c1:be:62:45:72:6d:
         0a:06:6a:4e:6a:2e:d6:02:89:8f:f9:ba:8a:bd:22:7f:74:cc:
         7f:12:5a:97:80:f4:b3:c8:b9:46:d7:4e:ec:12:5b:1e:0a:0b:
         8f:d0:3e:0c:24:35:d8:c5:9a:e8:70:27:81:07:cc:a5:66:90:
         2a:13:fd:b8:04:83:f0:35:09:5c:09:91:20:37:9c:97:2e:73:
         42:37:e0:80:0b:d5:8f:18:3e:86:56:84:2f:99:f8:da:a8:16:
         68:90:41:ff:62:53:eb:b9:40:e5:d8:b6:9f:b3:51:da:9b:3e:
         83:20:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----