Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
File:                     1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json)
Hash identifier:          wtdvyI/e2jPMB3grTE3v8k3OTdhlzBTBITI4/7E8418=
Subject key identifier:   AB:98:3C:F2:39:B3:03:D8:75:75:E7:75:17:9A:35:3F:F6:11:C2:33
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Certificate issuer:       /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial:       0193572DD2E30594C6E2EBF194F62A3BB165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
Manifest number:          0CEE
Signing time:             Sat 23 Nov 2024 04:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:41 +0000
Files and hashes:         1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: DmxDbm3QR0cuys5BI7S3j/4N4opqeBrxItT59MM6AWo=)
                          2: q-zrB20XVZ0S0j-Juyfd9Bs3qmQ.roa (hash: oRIS25xw70TLC3cJGoywsRGxwW17ytuU58lfaNvcpwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d2:e3:05:94:c6:e2:eb:f1:94:f6:2a:3b:b1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
        Validity
            Not Before: Nov 23 04:00:41 2024 GMT
            Not After : Nov 24 04:00:41 2024 GMT
        Subject: CN=ab983cf239b303d87575e775179a353ff611c233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:9f:c0:75:51:6c:36:7e:32:3d:9b:93:7b:
                    64:8e:11:96:37:36:e7:45:7b:c5:30:88:f3:ed:73:
                    c8:29:50:73:aa:d0:8d:85:b5:2c:0b:2b:ab:fe:bb:
                    8d:07:a5:13:4b:b5:a1:3f:6b:c6:27:0f:1c:e7:56:
                    43:60:cc:d8:74:ae:31:cb:22:2e:92:ac:19:c9:cf:
                    79:af:04:62:56:9a:7c:ee:9a:7f:55:f6:c0:fe:96:
                    8f:6f:e8:37:98:0d:95:17:a1:88:f4:9d:66:ef:64:
                    c8:18:d6:9c:ea:d4:26:60:8a:c2:b9:b0:50:69:63:
                    7d:1e:fc:52:49:c6:53:2a:4f:35:de:dd:a7:5f:c9:
                    66:4e:c5:e7:d5:d1:90:3f:5b:8f:df:da:75:77:9b:
                    b4:97:b4:12:1d:b1:d6:bd:19:07:14:1a:97:2c:da:
                    40:c9:1a:02:a3:15:d2:52:58:6a:b4:b2:6e:50:e1:
                    a3:dc:96:a6:df:96:ba:c1:ff:ba:7e:e9:59:c5:9c:
                    9b:4f:d6:5a:7b:99:e6:2c:10:7a:dc:f4:f4:6d:fb:
                    52:45:c2:27:1b:ca:ce:79:41:d7:7a:ee:3d:b5:ee:
                    51:15:76:5c:83:d8:dc:e9:f8:f2:0c:ff:e6:4f:33:
                    4f:bd:4d:42:8d:99:43:cc:88:f0:28:40:c8:26:0f:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:98:3C:F2:39:B3:03:D8:75:75:E7:75:17:9A:35:3F:F6:11:C2:33
            X509v3 Authority Key Identifier:
                keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:c3:51:66:da:c0:9c:10:fc:5c:3f:09:dd:61:f9:1f:f7:
         ce:ec:3b:5f:69:6f:52:5c:8c:07:70:c7:bb:9d:0d:a8:0a:2f:
         d6:58:a7:da:7f:36:13:a4:3d:ec:c4:42:ac:a5:23:5b:03:e1:
         d0:4b:5c:83:59:f1:e9:6d:65:70:93:26:02:1e:de:43:ee:17:
         92:18:a6:15:50:ce:13:30:24:28:47:65:28:56:28:79:5e:c2:
         86:76:fa:f5:81:85:39:36:0f:f4:d7:7b:1c:9c:8b:0a:b1:10:
         d8:d1:32:66:cb:77:70:da:47:e5:bf:ea:49:d0:9d:29:3d:cd:
         09:14:25:5a:54:97:70:cf:8d:2d:c3:f9:96:43:82:6b:c3:ad:
         d6:2b:2c:c9:bc:92:41:00:03:02:67:d0:c1:c1:21:2d:63:7d:
         44:94:38:39:dc:43:38:cf:da:f5:88:35:01:a3:90:0b:87:11:
         9c:a5:40:a7:1f:67:62:5e:d3:4d:b6:2a:34:1d:84:b4:97:00:
         35:5f:6d:27:a6:ae:1d:61:a6:a2:85:e9:ae:73:2d:fd:fa:7c:
         cb:f2:49:b5:db:d9:0c:4c:84:4c:f4:d9:6e:6d:e8:b2:34:4c:
         24:cf:ad:68:b8:52:cd:c4:fe:69:10:a6:eb:aa:e1:b8:43:21:
         d0:31:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----