Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          dHvZoRcodKZQ+mmOFZCeIKPJ04JEvEiFCfD61e/QDgo=
Subject key identifier:   F4:22:6C:B3:72:72:60:6C:2A:10:4E:EC:70:94:18:52:0E:8B:1E:F4
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       019369DA59696514632B0B893FED5C100AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:17 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:17 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:17 +0000
Files and hashes:         1: 04OeBf2v6ZRwSkqJDpuMSk3RoCw.roa (hash: Tck+IzU8n478ARlidVv80ukZoiCT93zXoZ/BFO9fUmU=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: kJxMZ6GusvH9n96DXXu28cZjfWSxX3Mk3RNO2w4z/g8=)
                          3: scYSHs2fDwfJ_LjsAazAk0EvsO0.roa (hash: LSP2T62K/dEqpQFRh+HkIeJYY21Rcc5bRlhJov3ch/g=)
                          4: vD4sO_9ehaddiRvZX3Q1lLbnoBo.roa (hash: nfiMT1DTRqLOkI27r6wcxN66iQyX6XOXprm75NBFFJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:59:69:65:14:63:2b:0b:89:3f:ed:5c:10:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Nov 26 19:02:17 2024 GMT
            Not After : Nov 27 19:02:17 2024 GMT
        Subject: CN=f4226cb37272606c2a104eec709418520e8b1ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:f7:d2:4f:2e:e9:b9:4e:8d:ad:2b:86:8b:
                    eb:c1:68:a7:b0:03:66:d2:8a:c7:9b:81:0a:a1:64:
                    e2:5d:cc:9a:01:61:36:77:62:d0:5f:ec:bf:0a:a0:
                    6e:aa:6d:41:65:90:3e:18:e3:d6:06:4b:41:4a:54:
                    cc:9f:35:e1:a7:70:0a:2f:7d:ae:87:66:82:2e:bf:
                    ee:d1:3d:84:69:43:3d:af:de:d1:d7:36:41:7b:e1:
                    0d:88:31:07:b5:7f:d6:4d:50:a7:f5:18:b9:9b:a6:
                    b3:bb:0f:64:93:0d:c9:67:7e:a3:ce:75:ba:03:f5:
                    95:ad:f9:56:96:a2:59:e8:af:66:c4:5b:02:9c:95:
                    da:1d:e5:dc:d1:0a:68:7e:23:59:b4:ff:08:91:c6:
                    e8:c6:e5:6f:67:1c:95:eb:d4:16:b4:8a:a5:72:6a:
                    06:fd:a5:9f:9a:86:70:73:3c:21:75:33:bb:92:02:
                    9e:55:d6:0f:c7:ff:3e:d2:d4:8d:9c:81:b1:11:87:
                    22:64:94:55:f1:2b:be:a6:ef:5a:69:ce:4e:5c:b3:
                    65:a1:53:73:74:08:f8:0a:78:2e:99:67:3f:ef:6f:
                    28:94:24:af:24:42:00:51:d4:cf:53:0a:a1:71:18:
                    4a:89:06:5e:74:c0:1d:75:a7:86:c5:9c:27:4d:f9:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:22:6C:B3:72:72:60:6C:2A:10:4E:EC:70:94:18:52:0E:8B:1E:F4
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:e8:77:7f:c9:f4:13:16:ea:7e:54:a5:e4:8a:fd:a2:46:
         6f:85:fa:08:4f:62:93:46:1f:a4:73:bc:81:d4:99:1b:f5:b6:
         ec:3f:c5:2a:c4:6c:c2:0f:c2:23:5b:79:86:b5:fd:74:f2:a5:
         0e:5a:b7:9f:ae:09:1d:c6:2c:f4:44:bc:e3:d8:eb:eb:76:8a:
         84:d8:ee:a9:63:9a:87:b9:b8:27:39:8f:5c:5c:63:7e:ab:da:
         74:7f:ff:b3:55:ca:a9:da:c8:20:c3:88:b9:59:16:c8:6e:a4:
         b1:1a:32:38:31:2b:53:ce:ed:af:cf:86:1b:3f:50:f3:b4:6b:
         33:54:33:27:5a:8c:b5:36:60:16:6f:42:16:e5:69:20:a7:df:
         6f:a2:73:2b:b9:0d:67:5a:9c:50:a5:ea:64:74:88:ca:96:68:
         ce:16:2b:c9:bc:1f:92:93:1a:f8:94:58:fd:47:25:8a:fc:a5:
         3c:10:bf:f0:35:36:ab:f3:bc:16:6a:a9:51:94:1c:39:57:c9:
         6e:a9:60:c7:17:27:b5:67:5a:30:55:2c:93:26:69:47:a3:a0:
         7a:f0:7c:65:a1:d3:d1:bf:f2:71:08:00:8f:ee:a4:3d:a4:2f:
         c4:7f:04:45:2f:d3:1e:be:9f:77:b6:fa:43:e0:ad:6a:71:c4:
         e1:36:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----