Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
File:                     F6ECNM-1UiqimzJgp1-Kn3mTPns.mft (raw, json)
Hash identifier:          +l+2N00rK8g6yL5Orv7kcNxZj5JWi3y3gw8HGVb0jVs=
Subject key identifier:   02:EA:6E:EF:0C:08:57:B5:A0:50:FB:7D:7A:61:0B:A0:2E:A7:D7:8E
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Certificate issuer:       /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial:       019356F70EE8210CC4119D8EC2578F4CC76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
Manifest number:          02A6
Signing time:             Sat 23 Nov 2024 03:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:51 +0000
Files and hashes:         1: 1ZWW97jhAU94C7jUQmj8I4vPW5s.roa (hash: GCZdc25l4il73b6WeQtkKWMIVMctm5OlYo4sCGjQ+xw=)
                          2: Da3AJDXzfRh5ibfxBnEXbhKwhro.roa (hash: LPk9vPnWOc8dpmV5+oDSq0fZxkyT3+Bt80puEx1njnE=)
                          3: F6ECNM-1UiqimzJgp1-Kn3mTPns.crl (hash: iHQ4OwFUnsQ6HUz9kR/+kDoqAgxuqI61bASwZ4fEXXM=)
                          4: ZW2qMuaRu08qZ_meHAa28f7DCvY.roa (hash: 3QUj/BQRMd/7tI8Ijbkpm8l4OnNsIkmqrSIedOyQrmc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:0e:e8:21:0c:c4:11:9d:8e:c2:57:8f:4c:c7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
        Validity
            Not Before: Nov 23 03:00:51 2024 GMT
            Not After : Nov 24 03:00:51 2024 GMT
        Subject: CN=02ea6eef0c0857b5a050fb7d7a610ba02ea7d78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:e0:9c:88:4a:c3:6f:c3:8b:cf:1c:ff:ee:
                    5e:ee:8d:df:06:e9:e7:a7:bd:5e:e0:94:66:73:da:
                    2b:b7:48:e0:dd:b7:5d:b9:30:b8:24:65:57:de:7a:
                    0f:d5:cf:19:2d:7a:75:f9:91:50:57:6b:d1:6f:1e:
                    a8:e5:98:a7:6a:15:65:16:ed:b9:06:12:ff:99:bb:
                    8f:28:0c:b7:f7:57:08:50:f1:4b:f3:f5:71:70:04:
                    00:95:e1:8a:88:9a:8e:fc:23:2f:68:bb:8e:f8:4f:
                    62:11:c4:93:f1:e2:e1:3d:11:17:bd:75:79:6e:4f:
                    db:8e:ce:6a:20:85:4c:c7:8d:54:25:fe:a8:51:67:
                    f5:f8:da:9a:3a:fc:54:bb:a6:21:e1:ce:65:d5:8c:
                    e6:b2:83:ae:b5:a5:b4:18:7e:df:7f:87:c9:01:d2:
                    b7:58:68:eb:93:b3:6d:e0:f8:2f:16:82:a0:49:28:
                    3a:13:cc:f7:7f:0a:ed:b2:03:b2:81:ee:16:19:8e:
                    5e:c1:ac:19:dc:08:e4:bf:96:eb:48:8d:02:7d:d1:
                    cf:ca:2d:2c:c2:b7:24:16:ad:43:54:ba:82:75:4a:
                    2f:57:24:30:c8:41:87:3e:92:28:f5:bd:58:d0:e9:
                    ae:9a:ca:b7:9c:7e:41:ed:bf:96:b1:a2:8d:c9:5e:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:6E:EF:0C:08:57:B5:A0:50:FB:7D:7A:61:0B:A0:2E:A7:D7:8E
            X509v3 Authority Key Identifier:
                keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:9c:49:4e:19:e2:4f:44:36:1e:c5:92:68:4a:d2:93:14:
         98:52:da:57:fd:2f:14:da:90:5d:c1:01:17:57:5d:fd:f8:16:
         9d:53:9f:e2:2a:01:51:8e:c3:fa:68:2d:e4:08:67:9d:0d:2d:
         84:02:33:b9:7d:9f:5e:b1:46:3a:73:c3:b5:e8:c0:72:83:78:
         f4:c0:6f:ea:71:88:6e:34:4d:0a:a3:3f:7a:e0:cf:43:3c:5a:
         70:3a:58:15:99:d3:ca:70:7c:82:0e:a3:39:8e:65:f0:44:b7:
         04:b4:3a:a4:cd:58:95:34:40:bf:c8:cb:a2:47:cc:73:97:20:
         54:f2:e9:ff:54:ac:95:72:04:4f:57:d0:75:2a:81:f5:e0:11:
         de:e6:d9:0c:22:e9:04:f7:6f:63:eb:8a:09:10:11:6b:3e:4d:
         23:cd:44:f8:a3:5b:fd:6e:dd:76:c3:ad:52:84:36:59:a3:35:
         10:d9:55:75:9e:2f:25:83:c9:c9:2c:9a:04:02:a4:61:b1:82:
         02:86:91:d7:b8:33:44:51:a0:fc:75:80:f7:9e:9e:07:5d:96:
         55:c4:0e:de:b4:ca:f3:d3:55:1c:09:13:6e:28:58:45:a2:40:
         f5:6b:37:3c:4b:8d:01:e5:7e:c2:9f:87:df:38:93:3b:75:ca:
         62:fa:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----