Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File:                     o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier:          sEcnQNV+I8PVaO9YX3H4RWFFtocL3GIuaWF098nZ27s=
Subject key identifier:   C1:31:AF:25:AF:18:7E:4D:8E:C0:1B:A5:EB:FD:BE:E9:EF:DF:7C:9D
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer:       /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial:       019355E43F6A70E0EF52FE9044815C0F6F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 22:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:41 +0000
Files and hashes:         1: ODjZE2aOpEvQUEE513VN5L9LcD8.roa (hash: xZ/s0DcLjROpS+rHwe/i5V++6uNGNHEbzdIqQqLpzmo=)
                          2: Z33SUWHpTw0nXqDskLcx3PZ6oSY.roa (hash: nvlFpc8EM+8Jqjlh4UB1spz2JHAQ1/DGHp9GtlVdgEU=)
                          3: e3IMh0o0RaYzrIqzE_YjHHYRaCg.roa (hash: A8KwH8nbfEmN6m/82peu1KyVxYiu8v+S3RDtlkmxaIA=)
                          4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: 1+dMVWWbmsmWfcqkXZhslii/zzIFSojNdnkoU08FrYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:3f:6a:70:e0:ef:52:fe:90:44:81:5c:0f:6f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
        Validity
            Not Before: Nov 22 22:00:41 2024 GMT
            Not After : Nov 23 22:00:41 2024 GMT
        Subject: CN=c131af25af187e4d8ec01ba5ebfdbee9efdf7c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:28:54:df:c2:57:c9:9e:7e:3a:3b:ee:c9:
                    29:95:17:16:29:9c:75:90:3b:53:0c:34:cc:f4:96:
                    a0:83:dd:84:f1:da:2b:04:29:64:07:a0:06:87:3c:
                    68:39:17:c4:17:b6:d4:e3:c4:0e:7f:d3:90:f3:16:
                    b3:c6:e8:2f:1f:6a:96:9c:a7:71:c5:f8:b8:7b:79:
                    41:45:10:16:ee:e9:c4:f0:cc:b9:6e:06:a6:44:1b:
                    8b:e8:82:30:15:36:24:8b:18:36:0d:1e:77:71:e3:
                    f9:8a:f6:56:fd:c7:cc:e6:aa:a8:c4:81:00:4c:80:
                    2e:95:1a:55:a6:37:07:a4:2c:b3:36:38:ad:7b:80:
                    dc:84:48:67:47:f7:37:21:ef:a9:3b:06:bb:9e:46:
                    12:53:89:90:b2:da:bb:d6:9f:38:36:2c:6e:7e:95:
                    21:e6:77:fd:3d:c6:b6:27:2f:ec:c1:bc:16:75:39:
                    4b:2b:de:d1:f3:33:cb:77:3c:ca:f0:d4:8b:21:74:
                    05:3c:68:52:b5:1b:55:0f:ee:21:80:32:d5:bd:b7:
                    6c:1e:3e:69:fc:78:7b:7b:4a:21:f9:dd:d8:3d:0e:
                    e2:76:ab:50:4f:2b:eb:09:91:cc:23:50:af:3f:a6:
                    24:8d:41:21:cc:8c:89:b7:4a:5a:82:53:9a:bb:f5:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:AF:25:AF:18:7E:4D:8E:C0:1B:A5:EB:FD:BE:E9:EF:DF:7C:9D
            X509v3 Authority Key Identifier:
                keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:ba:0e:bb:97:fc:a8:80:a6:14:33:98:21:9e:36:bf:e6:
         35:0e:41:4b:48:a2:78:80:02:ab:9a:85:84:1f:f6:56:5d:d0:
         cb:fc:82:cb:c2:ae:d0:75:e7:b8:d5:75:37:c5:dc:cc:98:96:
         67:f5:1c:8a:74:54:83:8b:25:eb:ed:04:c6:bc:68:a0:c1:67:
         8a:14:7e:6c:ce:25:80:70:11:41:0f:06:41:e5:58:f0:72:f9:
         04:3e:31:37:73:61:8a:db:20:11:f5:5a:6e:48:4c:72:1e:ae:
         b9:2e:67:5d:03:12:a6:a1:32:d2:e4:1e:4c:34:8d:a8:4f:e6:
         80:32:cf:7d:d3:f3:50:2d:9b:5f:50:63:6f:05:8d:9b:1f:76:
         23:bc:de:c7:9b:1a:17:79:db:95:4d:c5:0b:5e:7a:f7:dd:d9:
         bf:e7:33:6e:2b:93:58:c1:96:ee:ed:9a:90:f3:38:8f:b5:71:
         52:2f:d8:4f:a2:e8:6c:84:65:df:d9:c1:3c:fb:1d:84:0b:39:
         12:49:bd:ab:c4:e7:6a:1f:4d:1c:b1:15:52:2e:28:9d:d6:55:
         7d:c7:fb:03:3c:e5:10:2b:3b:22:52:0e:3f:96:51:09:cb:93:
         0d:e6:93:4f:fe:d1:1e:ca:51:eb:cd:99:50:6c:34:4e:e0:6e:
         94:6b:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----