Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File:                     hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier:          k4oj1sG6qFzBfjNRC5mKisBVtM7zfo3VNowkuBucyX0=
Subject key identifier:   B5:FB:3C:63:67:1C:A2:82:47:CC:D7:84:B9:7D:79:B8:76:86:6B:AD
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer:       /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial:       01936934270A46CD11D7F817CA504401B9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 16:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:45 +0000
Files and hashes:         1: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: HEuH8z3oshKmFa14ddYjeCVvQ8pzSWwf5i+EY/4dOPw=)
                          2: vbflL1BiUAPuty2fCg0m-DP2nro.roa (hash: nOMHU4FFFkndDqSnUdWTHqomXIOJRdemr2UJqqwmdnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:27:0a:46:cd:11:d7:f8:17:ca:50:44:01:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
        Validity
            Not Before: Nov 26 16:00:45 2024 GMT
            Not After : Nov 27 16:00:45 2024 GMT
        Subject: CN=b5fb3c63671ca28247ccd784b97d79b876866bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:db:6a:41:15:67:96:7b:d9:42:9d:21:8c:
                    35:92:22:f4:68:71:b3:70:60:70:22:4e:2f:e7:d2:
                    57:3b:92:02:24:fc:7b:a6:08:96:fb:78:bc:e2:d9:
                    e5:47:dc:62:92:7a:20:e2:2f:8a:94:27:d5:62:ec:
                    1c:9b:f0:1b:a5:02:3a:8f:9f:10:6c:94:56:8d:e9:
                    27:8d:27:f9:56:c5:9a:ca:80:64:2d:ca:96:15:24:
                    53:97:0b:85:66:b0:2c:01:83:73:a6:f8:c9:17:ed:
                    10:ea:1c:01:2d:b4:85:4b:9c:06:5d:96:a1:15:7a:
                    ba:21:c6:88:59:b5:0b:0a:e2:5b:b4:ab:fc:49:83:
                    c8:fb:d4:31:9f:b2:93:bb:b4:eb:fd:ce:0a:9d:f7:
                    21:97:bd:d1:d7:b0:df:cd:ce:b3:3b:a2:8e:52:dc:
                    5e:c2:d7:a8:22:63:8c:87:1c:98:fe:98:de:4f:8b:
                    2b:65:53:a7:57:bd:63:03:a1:28:b1:bb:be:e5:f5:
                    76:1c:23:b9:46:0f:8b:42:48:15:52:0e:68:8b:8e:
                    79:c9:20:4a:60:16:5b:eb:c7:9a:d5:d9:92:10:bf:
                    69:76:5f:0c:22:bb:49:39:0a:fc:20:5e:89:73:e6:
                    29:53:02:ca:34:b3:55:6a:61:ac:b2:de:13:b4:90:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FB:3C:63:67:1C:A2:82:47:CC:D7:84:B9:7D:79:B8:76:86:6B:AD
            X509v3 Authority Key Identifier:
                keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d6:9e:80:b3:31:ae:72:61:6e:6c:f8:59:c6:74:71:ee:75:
         c8:91:b2:f5:93:5e:80:d8:11:16:41:e7:d8:b0:45:3d:b5:b4:
         c2:bb:22:20:62:8d:e0:5f:48:74:c9:08:91:52:5c:9f:5c:7d:
         f0:bd:63:ca:37:67:36:ea:dd:a7:c5:5e:1f:4e:d2:43:44:5f:
         87:7f:52:a6:6c:84:d7:6d:70:86:b8:77:59:f9:40:e8:be:d4:
         e5:c5:84:5e:9b:05:e4:b0:b9:ed:e0:37:bb:30:9c:72:1b:1c:
         36:2f:4c:16:8a:bd:12:0e:0d:28:69:88:5a:61:92:89:84:c0:
         f0:df:33:34:43:80:a0:f2:c8:91:b3:d5:7a:ae:f6:d5:75:5d:
         3a:0a:c3:c2:20:4a:7d:3a:e2:ab:34:c0:ef:70:14:ff:73:8e:
         ed:4a:49:38:fa:ae:80:22:ac:4e:a4:ab:16:18:1c:e0:ae:00:
         ad:11:47:c1:ff:e4:9d:ca:e2:a3:43:15:40:77:4c:fb:42:3e:
         b8:3c:1b:36:14:34:ad:88:00:f1:dd:ce:db:02:f0:78:a3:da:
         10:62:97:56:93:6a:db:06:d6:db:7a:c6:cf:18:ce:99:a3:8b:
         00:65:6f:77:07:e8:85:04:84:85:e2:9d:0d:48:f2:65:2c:40:
         4b:5d:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----