Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File:                     iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier:          ddMyvPT0QtSGreW7dsuQaBl+pxXVnio2JTnzVpM7/0M=
Subject key identifier:   86:80:53:60:03:C3:DB:FA:77:EC:BF:EE:D1:03:F1:C2:41:D3:85:C7
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer:       /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial:       01936A7D533D180B86ABF80D83A508AFE109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number:          011B
Signing time:             Tue 26 Nov 2024 22:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:18 +0000
Files and hashes:         1: 99PhkiITKMk94ycPhi98pxL1IgQ.roa (hash: ZrmGkBzEAgoOnXzwgbh3L3R4ALEOSD4j6mAfHSrYZqg=)
                          2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: hh8VDC85QP9OVMTbca743PZp91v3QsDGwi5qnnuHr10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:53:3d:18:0b:86:ab:f8:0d:83:a5:08:af:e1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
        Validity
            Not Before: Nov 26 22:00:18 2024 GMT
            Not After : Nov 27 22:00:18 2024 GMT
        Subject: CN=8680536003c3dbfa77ecbfeed103f1c241d385c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:f7:02:a0:9e:ed:e8:1f:02:d6:d2:b8:46:
                    2b:81:10:e9:f8:28:7b:33:e9:4e:ac:dd:12:dc:e1:
                    7f:d9:4f:35:5e:44:c1:b9:a5:3f:f4:66:41:ad:54:
                    2d:b4:da:d5:65:5d:e3:5c:0a:2c:11:04:d3:d5:fc:
                    df:49:2e:71:2d:ec:4b:d4:e3:0c:0f:dc:08:a1:7a:
                    78:41:38:c2:f9:17:3b:83:84:58:b5:97:87:02:e2:
                    b7:52:cd:df:ae:e1:f5:29:e6:36:fb:79:a8:b2:db:
                    d0:4f:3e:b0:a9:c5:64:bb:f1:54:3f:5f:b4:99:da:
                    25:fe:e0:8c:34:9d:b1:ff:5f:9b:1a:ca:09:12:ae:
                    0a:66:3d:01:68:1f:0e:eb:29:6f:31:a6:53:6c:e3:
                    3b:77:19:8e:7c:cf:03:3f:74:27:3d:4a:d2:40:d9:
                    0c:e1:ac:70:f8:32:e2:fd:49:cb:0d:79:55:a6:55:
                    7e:67:e8:73:00:4b:67:ee:48:69:3f:3f:36:dd:57:
                    bc:28:11:06:27:c8:59:89:40:2d:92:3c:12:94:c0:
                    c2:e8:b5:9c:b6:82:8f:a7:29:5d:e6:4b:0b:76:4b:
                    80:db:cd:43:33:62:96:88:57:84:a0:4a:11:2c:77:
                    c7:ed:c0:04:fe:33:bb:69:76:e7:cb:b2:20:07:83:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:53:60:03:C3:DB:FA:77:EC:BF:EE:D1:03:F1:C2:41:D3:85:C7
            X509v3 Authority Key Identifier:
                keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:99:db:fd:1a:08:69:59:4f:b0:d8:bf:62:b4:c8:89:4e:
         07:34:af:c4:3d:e2:fc:b2:91:4c:0b:bb:39:6e:d2:a6:d6:d4:
         c5:99:54:9f:32:51:bb:25:ce:56:43:d6:d6:98:6f:22:13:d3:
         d8:56:59:c4:52:1c:71:3a:44:b8:8c:51:bc:d6:d9:9b:8f:49:
         77:00:56:1a:38:a6:4a:ff:78:59:a9:c9:80:b1:f4:bc:ef:5f:
         d8:67:db:01:d0:c0:d3:4d:86:44:9f:cf:32:ac:b0:d8:a8:88:
         7c:7f:5a:c3:86:d3:55:be:35:a5:e3:02:e3:75:c6:4b:02:d0:
         7b:3b:c0:61:41:86:97:6c:f2:4a:3a:de:c9:02:ba:f7:99:ad:
         a8:a3:58:f7:c5:86:dd:3d:a7:c4:0c:1c:42:64:6b:fc:98:74:
         04:09:d0:7d:63:74:01:88:d9:44:29:76:f5:67:70:84:b0:be:
         a0:65:a8:28:ba:3c:f9:a2:68:f7:ed:19:75:e2:10:67:7f:92:
         09:27:11:85:21:1a:d7:1b:13:3a:97:8b:d9:c5:cd:e2:19:ec:
         ee:f0:21:d8:6a:da:3e:bb:97:50:cb:f5:ac:91:b4:37:3d:e7:
         ec:c6:04:9a:7d:84:f5:91:94:ef:17:fa:f0:87:33:39:78:e8:
         a2:15:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----