Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          J31MPlTIQqYqfa/AXtcHmq/NcdougQwpd309B9vUleo=
Subject key identifier:   41:99:B8:92:DB:97:8E:48:F0:FC:35:33:EF:75:53:05:8C:88:CE:B4
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       019356F7232297321BECCFD7E4A704E4B6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          02E6
Signing time:             Sat 23 Nov 2024 03:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:56 +0000
Files and hashes:         1: HfKomrAsU_cIiUyu7EEs5PahOW0.roa (hash: FU3cz28leSRlecQcdOQu1RNRxWJY2uEEIUbFY8hQ+IA=)
                          2: VkvgihfWCMWJuaBJy7bDmm0jiy0.roa (hash: SPEIoK470tqNLzjso558g2o4v4WUZNQx2vO5FJsOwKQ=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: wYcT2/9d1YpN/Bm2NYY9AyF4Wg95VTo7UgdPIkA0iB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:23:22:97:32:1b:ec:cf:d7:e4:a7:04:e4:b6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Nov 23 03:00:56 2024 GMT
            Not After : Nov 24 03:00:56 2024 GMT
        Subject: CN=4199b892db978e48f0fc3533ef7553058c88ceb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:da:2c:54:9f:ed:11:27:f5:c4:b5:53:9a:
                    ed:b4:e2:33:af:55:6a:78:1a:49:e1:5b:fc:0b:98:
                    03:35:cc:13:82:9f:44:fb:e0:12:07:cf:d1:12:3b:
                    17:22:36:09:1c:03:00:ea:36:92:d2:8c:55:99:a2:
                    c0:66:1b:26:0d:d7:b9:13:51:ed:61:bf:3d:de:9e:
                    91:07:eb:2f:99:e3:d9:24:a1:ed:5a:0a:79:c3:c0:
                    e0:b5:d3:c1:e7:31:31:5c:14:db:ee:6c:36:1d:c5:
                    a7:b9:44:f6:e5:31:c0:93:b5:2c:6e:45:a9:7f:13:
                    14:96:f2:4a:49:42:f1:f6:df:89:3a:02:c1:cb:2b:
                    2e:c6:b4:de:d4:c4:9b:d7:42:66:76:c9:e8:23:b6:
                    b9:59:67:dc:6b:26:07:89:d1:3b:5b:2b:ab:ad:7d:
                    d4:b0:01:ae:bb:46:5b:ae:14:f1:74:26:6b:48:5d:
                    6c:fc:31:5c:c5:75:8b:b1:82:85:4b:75:32:56:98:
                    1d:57:90:d3:db:dd:b3:bf:0d:f8:6d:2b:71:8c:f7:
                    39:8c:43:0c:ea:a0:62:eb:1a:63:78:2a:27:1f:9b:
                    57:bb:f4:a9:dc:05:6f:ff:f2:d4:50:a0:70:0d:be:
                    8f:d7:a4:e4:d1:1c:37:fa:19:cb:9d:d7:11:e6:74:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:B8:92:DB:97:8E:48:F0:FC:35:33:EF:75:53:05:8C:88:CE:B4
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:f8:d8:d2:44:89:e5:ad:9a:9c:e5:d5:ce:ae:fc:a8:9c:
         25:1d:63:73:eb:3a:4b:7f:1d:88:00:9f:6f:0e:7e:2e:de:27:
         2f:d0:fb:9c:aa:d8:62:8a:9c:31:ea:d7:81:eb:5d:73:fb:ca:
         9d:fd:9b:88:95:39:a9:82:19:15:b1:8c:f0:32:04:68:ff:b9:
         8e:92:04:ac:b7:0d:c3:ea:f1:b8:26:37:6d:40:0b:ff:8d:8f:
         7c:8e:21:37:75:68:5a:ed:62:62:b9:40:87:fc:bd:ec:bf:e4:
         69:52:8c:f8:bd:54:6c:66:c6:68:5f:b2:03:f3:29:33:84:f3:
         1d:23:92:30:61:93:4c:3a:99:45:eb:c5:88:fe:01:9c:9d:0e:
         e3:2e:95:2d:4d:06:cf:25:a3:11:c2:be:ec:74:72:58:a7:e9:
         9e:56:03:98:f7:90:bf:16:4a:18:9c:6f:cb:be:9b:d7:70:c5:
         10:43:ad:c9:c3:62:cb:f2:de:6a:42:b9:d8:07:90:58:89:ed:
         de:f7:fd:00:d4:d3:27:f0:97:1e:10:c4:2e:89:95:a2:4c:26:
         3c:2b:98:5a:0a:58:3c:b3:a0:ce:c6:ee:a5:7e:c4:18:3f:fe:
         e0:b0:10:01:d9:c5:45:65:c8:95:cb:43:e0:8e:77:2c:15:7c:
         e0:5f:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----