Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          l4YKtOUsDCQ2OwtLltGQ6v9t977lwCe7++3JuHgB8vo=
Subject key identifier:   1A:B6:06:41:0E:45:92:E8:4A:8F:EF:0A:55:B0:94:FE:F7:9E:4D:AB
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       01935162D89FED7BAF7A43DBB2A22906ABE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          10A4
Signing time:             Fri 22 Nov 2024 01:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:52 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: ExdgHeuHfhXmHf5Pe6O6jW3BcD5l1+7qaPpSfvAc580=)
                          2: KGGT4Q5LP4GHgLj19xF_a7ML2Nc.roa (hash: 8cO4Ue7QuvPhp1QuXETvB/LofLVNnVzFP/P61drOWac=)
                          3: kcug3U98d9aNnApP3fVfo37Zrts.roa (hash: 56dvQrFdjTn9v7kmKs6MLG+E0XHYanxjVXjmg6gQjZ8=)
                          4: uuUCF0Q7fyLxnw5gq29V6auG-mk.roa (hash: 32g82S4HBlnGOb944vPx/gRbkXDfdcBWgjVyuYLeFFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:d8:9f:ed:7b:af:7a:43:db:b2:a2:29:06:ab:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Nov 22 01:00:52 2024 GMT
            Not After : Nov 23 01:00:52 2024 GMT
        Subject: CN=1ab606410e4592e84a8fef0a55b094fef79e4dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:d1:fe:98:f0:60:33:f4:50:37:39:c2:58:
                    6d:4e:ed:02:d9:9b:01:f3:a6:01:25:42:47:d7:c0:
                    22:17:95:07:04:d6:7e:03:b3:94:97:8e:d2:79:92:
                    09:20:5d:ce:cf:c9:1f:51:05:dc:e3:8a:a3:cb:45:
                    50:0c:e7:e5:66:fa:4d:f0:74:c0:c7:8b:ec:a7:c4:
                    e5:48:b4:ad:18:b2:79:6a:7f:ff:78:01:6f:45:f5:
                    c4:46:47:3d:e0:27:99:be:a6:a4:40:83:33:87:e5:
                    d9:9f:40:4a:f7:0b:79:32:d8:45:6c:ca:c4:70:3e:
                    48:5d:9f:5b:1b:8d:21:f3:40:fa:96:f3:ae:93:36:
                    46:01:bd:bb:0b:a1:35:5b:26:32:3c:1e:81:af:40:
                    94:5b:87:83:66:3a:2f:ff:52:4d:c9:b6:ff:5b:f5:
                    9f:0a:83:b6:8c:cd:5b:b7:77:ce:93:be:1b:03:fd:
                    32:eb:cc:3b:3e:04:ae:b8:35:49:4f:4a:c3:50:5e:
                    fc:ec:9a:b1:1a:85:c7:27:28:b4:2b:a1:ea:a0:59:
                    b8:41:c5:e6:13:0b:d6:07:e5:5a:c8:73:9d:f5:eb:
                    19:a7:98:ee:f5:0b:2c:d6:e5:67:e1:6f:a3:25:6a:
                    94:29:3f:8c:6e:58:ac:f4:f5:4e:ae:e1:83:52:43:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:06:41:0E:45:92:E8:4A:8F:EF:0A:55:B0:94:FE:F7:9E:4D:AB
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:af:1d:52:af:5e:ad:a8:eb:c4:0f:8f:09:fb:47:a8:ad:
         be:a5:54:39:2a:d7:ac:f7:94:23:45:b7:24:ee:20:c2:24:c8:
         39:95:07:38:4f:23:80:53:66:1c:60:1a:33:4f:4a:88:d5:61:
         45:c0:2b:25:f3:25:49:d0:c1:aa:8c:1b:de:f1:58:15:65:11:
         eb:ee:3f:7d:84:2b:5e:73:6c:c3:e4:b9:28:51:52:d3:73:56:
         f3:4b:64:a5:c9:ef:7d:85:30:a3:01:73:8d:3f:b8:63:ce:3f:
         97:91:ff:18:0f:be:5a:c9:d5:0a:8a:08:0f:e3:81:26:4a:05:
         35:28:c8:34:09:e8:6a:53:3a:70:05:e6:c2:08:58:13:83:81:
         d1:d3:e4:4a:d3:05:b8:d7:d3:29:50:c6:df:65:19:0b:97:55:
         ac:60:10:6b:65:c4:87:dd:f4:5a:b6:7f:90:94:27:a2:d2:a6:
         ca:09:22:7f:27:ad:a2:09:ee:2b:8a:20:76:16:09:b8:46:da:
         8e:9e:3b:69:ba:fc:04:1a:0a:d4:d5:fb:7e:dd:8c:45:16:08:
         c8:72:78:b0:a5:65:68:c9:74:4c:5a:c8:8d:ae:30:95:4d:88:
         c4:09:24:1f:e9:b1:2c:e7:d7:0e:02:20:d9:6a:86:0c:b1:75:
         46:dc:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----