Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File:                     GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier:          cE4rVcBBPi7auHxz0Rs7nf8s1XiV6zPdEtvBSBOQIyc=
Subject key identifier:   F1:EC:A0:41:28:42:BF:DE:B2:43:69:94:0C:03:9D:4E:72:90:9C:C8
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer:       /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial:       01935764AA02206C26EC9DCCF37C136D826A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number:          112F
Signing time:             Sat 23 Nov 2024 05:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:35 +0000
Files and hashes:         1: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: CMiEQ6MGk99dod17P0g7ZchUjX0iL9LtCGidpffbk/o=)
                          2: NjhlFr0RVXaaYiNQ-r70AgmROVU.roa (hash: guslHmUaHHQwTBqHZpD1VcYAoZwr/KKF/hZWN/3RPHE=)
                          3: Ym8s3j80kVWot2HbzyVgjwwn2zY.roa (hash: flkATb7DCUTmJaFqFYs4GC3wtBicQnOSsAHOavTD40w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:aa:02:20:6c:26:ec:9d:cc:f3:7c:13:6d:82:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
        Validity
            Not Before: Nov 23 05:00:35 2024 GMT
            Not After : Nov 24 05:00:35 2024 GMT
        Subject: CN=f1eca0412842bfdeb24369940c039d4e72909cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:2a:60:c7:08:43:d5:0b:fa:1d:86:88:e2:
                    1d:b3:e0:32:99:b0:ea:ae:29:d3:ce:e6:34:a8:fd:
                    1b:6b:2b:4e:91:c0:98:88:d5:6a:d5:f1:db:07:90:
                    3b:3f:ab:85:68:6f:b9:ce:10:2d:f1:fe:4f:64:b7:
                    6e:a6:6e:8c:c3:49:b5:9a:48:4b:70:a3:34:77:9b:
                    7e:b8:ea:f4:ed:25:8e:6c:11:69:c1:8a:80:3f:fa:
                    38:42:3e:a5:5a:a8:42:29:f7:e2:dc:a4:77:12:cf:
                    ac:22:05:2a:44:9d:58:0a:ec:6a:7c:04:f1:2f:01:
                    f8:2e:6c:f9:59:ce:13:ba:6c:53:e7:e7:26:0f:c0:
                    5d:10:6f:17:00:4c:ff:48:dd:dd:93:67:63:b9:c3:
                    78:11:7c:0a:e1:fb:9b:43:e8:83:c9:d0:17:86:62:
                    76:8b:c5:64:fe:1c:69:d7:82:71:43:11:59:39:6d:
                    68:93:ef:c9:a0:2e:a7:c2:00:b7:f9:ae:e3:9a:04:
                    13:e2:3a:16:66:03:13:52:7e:ea:ff:c4:aa:3c:cd:
                    b7:42:cf:8b:3c:99:db:f8:bd:f4:5d:18:0e:e3:fd:
                    82:6e:b0:60:af:7f:78:01:fe:87:92:f0:de:fb:62:
                    90:62:80:f0:20:db:04:27:0e:f8:9d:49:e1:5a:08:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EC:A0:41:28:42:BF:DE:B2:43:69:94:0C:03:9D:4E:72:90:9C:C8
            X509v3 Authority Key Identifier:
                keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:84:dc:6b:7c:94:52:1a:3b:a4:39:f4:ba:7a:65:3d:c8:
         84:8f:18:d8:2c:b5:6e:d7:40:46:18:11:ed:2e:cc:80:ce:1d:
         51:30:84:6b:7c:27:7b:76:99:e2:5a:ee:6d:97:16:b6:a6:3c:
         38:72:9d:10:3a:fa:49:76:61:c6:ac:10:02:ae:f5:33:45:a9:
         a1:7f:08:da:b9:59:c0:07:3f:b9:7a:85:5c:95:7f:5b:c5:cd:
         fd:6a:88:66:ac:48:d2:7e:65:76:f4:a5:4b:41:04:79:45:c2:
         62:28:ae:ec:51:19:d9:c8:0b:b8:a8:b0:37:22:39:4a:7c:ab:
         23:b4:6f:ea:64:fb:80:b3:33:c2:c7:b3:dc:10:1c:bb:e2:c2:
         6f:90:d1:e5:ed:04:a3:c0:9b:d8:43:f6:10:7f:70:c0:a5:bc:
         18:ce:c2:85:a8:a4:14:d1:9f:45:f2:ef:a4:a0:73:ef:4e:c8:
         e8:3d:97:13:82:bc:c8:b0:bb:ee:4d:cc:77:ff:fe:4f:21:96:
         55:9a:5a:3d:56:93:06:b8:1a:fa:d9:1a:15:ca:49:f8:22:13:
         f8:f3:2b:32:87:48:9c:40:b8:90:8f:61:21:9e:70:37:34:fd:
         b4:e4:32:b3:6d:49:b1:70:0d:32:36:d4:08:db:0d:b3:12:c4:
         b4:15:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----