Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          o6l7oknfHlnEoD8D6RFRdbbYGtbl6Lf6u1pUc5fq5PI=
Subject key identifier:   DA:A6:73:CE:0E:D5:E0:81:06:7B:04:91:A6:84:A5:B9:9A:D0:09:93
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       0193553F3874A9DBAB5E329AABC21DF763BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          0D1B
Signing time:             Fri 22 Nov 2024 19:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:26 +0000
Files and hashes:         1: 5vnUrz2qBBJhvCj14bDHP9RmEig.roa (hash: /pGb/F/eRxwZGMVOuw2gPgL5Sm9MXBAT1VvWzzhtVu4=)
                          2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: hlQX4xPzXU4rbHFOb32GFflJo/Em4Jyvd9hbsuk3SWY=)
                          3: os10ToMY-tkuCsNsapf4HB7ayj8.roa (hash: 0PufgzlHJQeeuhACYpz+SMfWQsu2ZP1UcE5MAVN0/1E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:38:74:a9:db:ab:5e:32:9a:ab:c2:1d:f7:63:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Nov 22 19:00:26 2024 GMT
            Not After : Nov 23 19:00:26 2024 GMT
        Subject: CN=daa673ce0ed5e081067b0491a684a5b99ad00993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:77:f0:a9:93:56:3b:3d:59:71:d9:7d:94:
                    68:d1:51:c4:8a:1d:2d:dd:58:fd:85:11:62:bc:cf:
                    31:1e:8e:13:e1:2d:87:9a:ba:69:fb:e2:ef:18:bb:
                    d9:c6:84:18:8e:eb:9f:fd:ff:3f:d0:90:48:47:62:
                    59:58:d1:de:41:fd:e9:02:cb:71:f3:74:bd:a5:72:
                    68:45:f8:5a:01:45:5d:10:d2:20:37:a0:26:fc:05:
                    6c:d3:25:43:6a:53:ce:2d:ad:3c:b7:82:93:34:09:
                    fb:1a:dc:05:e7:15:f1:2c:94:11:c5:95:eb:d5:e3:
                    ba:dc:76:bb:02:fa:61:af:f9:ea:75:e4:d7:c9:53:
                    4c:fc:53:e4:3e:9b:2c:4d:cd:3e:20:a7:80:c9:52:
                    bd:2e:02:00:bc:e8:e5:4e:d3:77:47:46:88:c5:44:
                    86:79:5b:20:99:6f:4e:50:46:55:60:7c:dd:b4:21:
                    2d:a8:f0:51:f8:72:40:51:20:a3:b8:66:c9:3a:76:
                    59:21:c4:ff:2f:d2:45:6f:a3:ee:13:c0:41:9c:fc:
                    a6:f9:72:b7:ed:37:5c:4a:aa:0d:cc:0e:fb:00:60:
                    18:8c:a6:3f:8b:4d:61:64:f5:ad:e3:c6:25:e4:f2:
                    dc:de:89:32:46:25:20:0c:fa:5c:52:61:4b:7d:b0:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A6:73:CE:0E:D5:E0:81:06:7B:04:91:A6:84:A5:B9:9A:D0:09:93
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:aa:c5:aa:58:86:12:aa:d4:a8:d8:04:77:12:52:54:88:
         e9:dc:54:df:ed:73:ad:43:45:9b:c6:3a:ee:2d:75:c5:74:19:
         d6:06:24:a5:06:02:ef:0a:00:ed:01:1e:28:b3:52:62:0d:d9:
         5f:b1:af:c8:96:63:04:15:f1:c4:df:f5:dd:64:8a:a0:ca:cf:
         3e:08:fb:b3:d4:e8:6a:b6:48:f2:1b:99:d6:59:e8:3b:16:1b:
         f1:3a:b1:40:29:29:3b:c3:02:b0:a2:4c:cd:79:ab:95:96:d3:
         37:0b:81:f8:2d:4b:ea:03:cd:f9:b6:76:fa:86:1a:64:62:f4:
         d6:5f:79:e2:e8:66:22:e2:e9:1e:a0:dd:00:d1:bf:4a:35:fd:
         64:7d:e7:ba:1a:d6:ed:2b:9f:82:19:03:a9:4c:3a:61:36:ec:
         0c:bb:17:f5:e6:0b:b1:03:ee:9b:5f:aa:10:f2:00:b2:c8:e1:
         0d:05:56:e3:42:bf:47:c8:51:2c:55:d4:ac:af:57:eb:30:dc:
         d7:e0:ff:0e:10:d4:e0:21:42:00:58:a7:84:3a:a6:e0:93:93:
         a1:0c:18:66:cb:d1:a0:e6:a7:1b:1b:a9:98:f6:68:31:37:34:
         60:7e:0a:0b:a1:b8:d6:15:7a:84:77:6e:b2:10:cb:24:bb:7a:
         ee:3c:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----