Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          iJI+lhNhBRWm/sO9dJWH0DW6iiivbPdLXa0rUf0LcVw=
Subject key identifier:   82:46:4A:FC:1B:A6:1B:39:4E:B9:F0:A2:A4:E9:BA:39:3D:02:80:59
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       0193553F95685ABF5C8360ACDFD0DEE46A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 19:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:50 +0000
Files and hashes:         1: 1-c6XWhlrrM5OTd8N_CTptiro8cY.roa (hash: rdOYCYMygSoiNTR8fmyW34/WgsfVBvSkx9A2TwKuo84=)
                          2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: dAJS5r2qy+uqb8wrwXK55Ue5R8I/VzZmPgeN/6N+djw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:95:68:5a:bf:5c:83:60:ac:df:d0:de:e4:6a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Nov 22 19:00:50 2024 GMT
            Not After : Nov 23 19:00:50 2024 GMT
        Subject: CN=82464afc1ba61b394eb9f0a2a4e9ba393d028059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:d5:20:e1:e0:02:e5:2f:06:c4:b4:35:0d:
                    d4:bc:ae:20:5f:8c:49:3b:25:7c:9f:95:8e:12:71:
                    c4:04:e4:bd:45:8c:a8:b7:e2:1c:c6:7f:ab:03:94:
                    2e:51:a7:3d:6b:f2:34:39:c3:9b:52:44:f9:f2:5b:
                    5c:88:71:cf:fc:5c:89:58:8a:29:82:da:77:58:09:
                    a6:18:fa:31:b5:d4:b4:dc:fe:b0:5c:00:83:b0:2b:
                    fc:e4:b3:2a:d6:5d:cf:89:92:8c:fb:b1:71:0f:d8:
                    19:e4:96:28:ee:c1:9f:02:1b:6c:6b:6f:f9:44:f0:
                    4c:03:1a:ec:f8:1c:52:01:1d:1e:70:f1:29:ca:0d:
                    f8:23:58:47:90:81:20:2b:30:92:81:e0:47:9f:a3:
                    41:45:35:27:71:b4:8b:90:7b:74:9e:52:3b:d2:e2:
                    8d:f8:c0:6d:85:9f:54:7c:15:ef:92:e4:c9:c1:54:
                    53:77:c4:f3:07:72:32:9b:eb:ca:0e:02:3e:a0:39:
                    c1:17:4d:f8:2f:48:b0:a7:8a:99:5b:76:ef:ad:41:
                    e3:e6:6a:7a:da:6e:a9:8b:a8:78:df:37:aa:90:fe:
                    9c:99:d6:1d:17:51:72:1e:65:9e:6b:5a:48:2d:58:
                    03:56:60:61:d6:8f:a1:1d:0c:10:78:c2:5a:c5:a1:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:4A:FC:1B:A6:1B:39:4E:B9:F0:A2:A4:E9:BA:39:3D:02:80:59
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:27:0a:fc:a8:21:80:70:a9:24:41:1a:00:c6:7e:fb:8a:
         48:f4:e5:9b:03:ab:0e:47:e6:55:09:ef:78:f7:b5:a9:cd:03:
         c6:de:bc:15:96:17:17:ce:41:f2:fa:90:98:8b:5e:a3:45:be:
         0a:4e:c8:e9:43:33:b4:ce:d0:f5:d6:02:65:cf:7e:51:c5:01:
         74:13:42:7e:64:a7:99:31:db:5c:df:55:8f:4f:d2:80:c9:ba:
         b0:e8:2e:c6:40:74:d2:07:1c:06:94:d9:45:58:6e:ea:4f:7b:
         4e:8c:32:6a:a5:cd:97:2c:1a:18:40:e6:6f:ca:d5:9f:5a:d7:
         63:19:bc:2f:7d:c5:0f:92:d4:aa:8a:0b:89:70:cb:03:8e:65:
         6a:79:d1:ef:b7:ae:de:d7:74:54:b9:f9:f8:57:10:9a:4c:88:
         fc:58:45:a7:6e:cc:0a:bd:dc:07:92:2b:72:0d:88:87:d1:6f:
         b1:41:6a:0f:4b:16:6b:40:4a:92:4c:07:a4:d8:33:45:88:57:
         a0:8d:cd:7f:31:0e:3c:bd:10:01:96:bf:61:77:c9:d9:ed:b9:
         3a:7a:04:e7:13:f4:f6:d2:b8:26:09:f7:a5:39:36:79:12:c2:
         63:69:a3:b2:85:4e:66:de:06:72:c4:f6:d0:7f:47:9c:a4:bb:
         21:ca:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----