Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File:                     csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier:          JpPgKeltr5HmfM7gChurmV8K23p2C5sL2Qaq0s/c5UY=
Subject key identifier:   50:2C:3D:F0:4F:B6:72:B0:E1:E5:32:B0:A6:5F:FA:AA:AD:80:99:A8
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer:       /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial:       019355765DEA8A511189E05EC7148C09FFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number:          12D7
Signing time:             Fri 22 Nov 2024 20:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:40 +0000
Files and hashes:         1: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: 3cEmiP718R3FYGkjoDzusFjcVY8LnLuC0DPfHS8v2P0=)
                          2: jhrWShEwRw7K99l2b7X_7nCylR4.roa (hash: Q6f2DqP7444vvYjcbYSSMxWaXsTRgnSTGVJCrPy+b9E=)
                          3: uEwm_GeIZvsK8Ws7rzc-EgwbhkU.roa (hash: KaLv8AiZYRIpG6i+GDYbH6VWAhx7ari73CwywUqCjr0=)
                          4: vs6t8YyrtZuDnITwn4N-Us9XAUU.roa (hash: S3ZIaYWCALhrIAkedJfMMsT7d2mKYP5nWh0zTlghvRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:5d:ea:8a:51:11:89:e0:5e:c7:14:8c:09:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
        Validity
            Not Before: Nov 22 20:00:40 2024 GMT
            Not After : Nov 23 20:00:40 2024 GMT
        Subject: CN=502c3df04fb672b0e1e532b0a65ffaaaad8099a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:36:6d:f8:dc:b6:d3:b4:c5:7f:d4:e2:36:
                    24:79:6e:76:73:ec:2d:05:da:7b:c4:7d:d1:8b:90:
                    09:9d:c5:1e:2a:fa:54:ad:23:79:ac:4f:f0:f1:8b:
                    a7:ce:0f:3d:01:2a:4b:40:1b:3f:20:41:1c:ea:e8:
                    11:63:63:42:f0:e3:2f:bb:a9:b1:5f:c1:05:34:10:
                    f3:b8:1d:81:ba:81:31:86:a9:0b:c0:7c:98:e4:7e:
                    ff:c0:79:d2:4d:61:b2:3f:f4:36:6d:2b:2f:ed:32:
                    b9:0a:a7:86:54:c4:bb:d7:e0:c9:ea:16:99:d4:7a:
                    89:5e:58:7b:e2:09:8f:f8:36:5f:b1:93:4b:fe:c8:
                    ae:bc:80:cd:21:8a:d5:31:fe:13:75:a4:ef:18:fd:
                    60:d1:51:69:54:52:d0:53:33:25:f5:50:18:54:db:
                    80:ce:e3:54:cf:ec:b0:12:74:9c:45:75:75:7f:a8:
                    41:7b:96:5f:66:dc:0a:9c:fe:76:bb:5b:b1:ff:bf:
                    cd:ad:f4:dd:c3:10:6b:e0:77:b0:2e:1c:eb:72:ab:
                    0c:10:63:4c:ef:4d:96:81:3c:aa:d0:27:70:33:04:
                    3d:5a:01:9f:b6:4f:6a:0a:d0:76:29:2d:2b:5a:d9:
                    48:4e:e1:70:19:c8:57:6f:04:bf:cc:26:fa:16:ad:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:3D:F0:4F:B6:72:B0:E1:E5:32:B0:A6:5F:FA:AA:AD:80:99:A8
            X509v3 Authority Key Identifier:
                keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:22:98:dd:80:81:37:9f:27:5d:19:be:f2:e5:13:f3:f2:
         d1:9b:c7:3e:2b:79:d8:0d:79:d7:1c:47:d5:2c:a0:3e:d3:85:
         f2:ca:d6:7f:e0:62:b4:0d:d7:4d:a2:1b:a5:c8:54:8d:1e:2c:
         56:09:08:f4:44:a5:42:e5:09:b2:b5:5f:4a:25:43:be:d8:ed:
         02:dd:35:14:5d:4a:10:a5:71:bb:f8:68:55:a3:1f:a0:3a:bd:
         7c:11:72:96:29:1b:1a:4d:b5:9f:7c:d2:88:f0:f3:56:26:19:
         58:a3:68:61:e7:84:a7:3c:98:0e:94:07:8a:82:1d:1b:fb:24:
         15:8b:aa:8f:2e:41:af:03:4d:7b:ac:15:b6:7f:05:fe:33:ce:
         b9:10:84:31:77:0c:d1:5b:2a:7e:7f:f0:a6:59:3e:17:89:bb:
         0c:a7:c5:d4:33:86:94:59:c1:59:d0:b7:a9:5a:a0:27:b4:98:
         59:b3:f8:d8:ad:fa:7d:d3:8e:b8:be:7e:2e:fe:f4:e3:e5:0f:
         7e:a5:97:61:18:35:6a:4c:ce:e4:ae:42:1f:1f:3a:2b:66:28:
         c0:ad:33:f2:9d:6b:5a:7a:86:34:e8:8f:49:db:5d:96:44:97:
         c4:fb:54:c3:1d:91:cd:b2:c2:f9:93:2d:85:15:1f:81:5e:c8:
         48:23:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----