Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft
File:                     RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft (raw, json)
Hash identifier:          ds5SoD+U+Pnjn4lWYuzHyuaWji2Vk7RvS2IS07RF5Ck=
Subject key identifier:   DC:52:BA:AA:2F:E1:2E:27:8D:3F:E9:8C:6F:5C:B2:5C:A4:47:CA:8F
Authority key identifier: 45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E
Certificate issuer:       /CN=4568316500ba6538420a9d55c65d9c88dd32a99e
Certificate serial:       0193568B1E4FAD318F3AE51CDC55EC3893DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft
Manifest number:          0250
Signing time:             Sat 23 Nov 2024 01:02:58 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:58 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:58 +0000
Files and hashes:         1: RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl (hash: frNwtbnBSDf4GTfESJ+AizPKCqp7uqmRtDlpVVUuMk8=)
                          2: avJbMkRskX4F9XD7k3EqzlAfb6Y.roa (hash: OzhNq76WW1OpyRFwGSNAnNIq4tRvrBl2I9SY8p/OvoU=)
                          3: iPiwsmlf1rH2EPsk6fLPEKI8zgk.roa (hash: HEK+snEMm6LUTQyQQSBxHaP2/pNnax46exjNdpcjZeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:1e:4f:ad:31:8f:3a:e5:1c:dc:55:ec:38:93:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568316500ba6538420a9d55c65d9c88dd32a99e
        Validity
            Not Before: Nov 23 01:02:58 2024 GMT
            Not After : Nov 24 01:02:58 2024 GMT
        Subject: CN=dc52baaa2fe12e278d3fe98c6f5cb25ca447ca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:fa:cd:38:60:65:ca:be:ff:f3:b3:02:f4:
                    0d:5a:57:d2:92:0d:d9:79:f1:54:23:e8:f5:4e:de:
                    9f:f8:dd:86:9f:55:e3:dd:fb:aa:68:b9:35:f2:7a:
                    c1:f0:12:9e:59:1d:b1:33:dc:e5:a2:3c:38:73:2b:
                    49:31:d2:bd:75:fe:05:da:5a:08:4b:91:97:4a:7f:
                    e1:5c:4d:c8:b8:cd:5f:b6:75:38:8e:47:26:6a:3e:
                    ae:09:14:bd:c3:f9:2b:e0:57:06:ac:33:14:c8:7c:
                    0b:13:1b:c5:f8:15:a9:27:52:f6:d5:9f:79:bb:d4:
                    50:62:a8:dd:51:ec:ab:4f:cc:cc:7c:4b:48:71:8e:
                    e0:a8:68:49:84:2a:46:cc:bb:cb:88:e4:c1:f3:4e:
                    a0:89:66:b4:35:ab:e0:63:fc:84:a7:21:4f:63:3e:
                    3d:97:d9:4a:ac:35:ee:10:2b:fc:77:ba:c1:31:e9:
                    ad:64:59:fe:28:e9:f4:4d:9d:25:55:ff:76:59:88:
                    9c:f2:eb:0e:5d:fe:89:4f:52:24:68:94:74:84:97:
                    52:79:32:d0:f7:40:97:38:24:7d:81:4a:4c:e2:cf:
                    8a:3f:01:9b:ef:0c:4e:eb:c5:be:68:6d:e7:46:2c:
                    78:91:87:d7:7b:91:01:b4:46:55:46:5d:21:ee:dd:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:BA:AA:2F:E1:2E:27:8D:3F:E9:8C:6F:5C:B2:5C:A4:47:CA:8F
            X509v3 Authority Key Identifier:
                keyid:45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:90:1d:54:9f:98:89:cc:57:75:1c:10:a4:b6:21:17:69:
         13:0d:c9:cf:d0:7e:01:46:8c:0d:f5:d1:15:35:d5:06:68:00:
         f7:e6:ec:78:4d:03:9a:57:7f:b8:c4:47:da:6e:a0:60:f5:56:
         16:a7:89:da:36:02:6f:a1:f9:e0:88:1e:e8:52:ab:09:c9:80:
         24:66:c4:01:2d:05:be:cc:b3:6f:0b:86:01:28:e0:5b:00:ed:
         0e:73:ed:68:6a:c2:53:6a:12:75:76:23:1a:63:37:99:bf:ff:
         85:84:f0:aa:76:a3:4a:78:af:b1:d0:ef:05:32:a9:93:f2:e0:
         39:87:53:77:7d:9d:9b:7b:e5:d3:2c:72:92:85:9f:87:54:1f:
         f6:2a:33:a8:fe:51:a6:ee:24:68:a8:88:d5:59:a9:8d:d9:95:
         c3:8a:fc:61:d2:54:53:03:fd:89:17:ba:9f:92:09:7b:7a:6f:
         e5:7e:10:b5:12:55:d3:f8:0c:98:21:7d:d6:e2:90:e2:f1:dc:
         d2:37:6b:70:17:84:fd:fc:ed:69:a2:b5:37:1c:e6:ff:c8:70:
         65:c7:52:b4:eb:80:dc:86:a1:60:8c:42:e0:a7:76:19:ad:72:
         2e:f4:06:80:6a:f4:88:37:d4:57:a3:f2:65:1c:10:5a:20:83:
         fc:20:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----