Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File:                     olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier:          tK9eJ4QMfwhEZjukIxZBkbHA9n2MRyzd6LP4M8vvxqc=
Subject key identifier:   40:CE:74:62:4E:68:39:8A:3A:A9:A8:1C:19:1F:0D:49:F4:24:59:50
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer:       /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial:       01936AB4D5A67B9513150238A48136BE38A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number:          0D76
Signing time:             Tue 26 Nov 2024 23:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:56 +0000
Files and hashes:         1: Y86euGQ_SA5ONcNaPLluLQROYxY.roa (hash: dnxVNmI9jDRCJpqvfca39nW8CJQJoC7sn9UBZfjph2s=)
                          2: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: WjSm3cKSvav5SN44qAOBqJQwE+JLO25FIJdQIVdrUHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:d5:a6:7b:95:13:15:02:38:a4:81:36:be:38:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
        Validity
            Not Before: Nov 26 23:00:56 2024 GMT
            Not After : Nov 27 23:00:56 2024 GMT
        Subject: CN=40ce74624e68398a3aa9a81c191f0d49f4245950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:5a:fd:54:e4:c2:44:07:fc:d5:ee:c8:c5:
                    1f:67:c3:f5:36:64:5e:3f:25:14:94:95:51:39:c6:
                    fe:cc:89:09:94:8b:36:38:5c:f8:e3:30:e3:aa:40:
                    bf:24:0b:14:b5:74:23:66:f4:2e:d9:df:db:bf:cb:
                    f3:54:14:60:76:7b:04:95:2b:87:dc:1b:5b:3a:a0:
                    af:16:91:cd:1f:b2:ae:39:0e:84:c9:0b:77:07:fd:
                    c4:31:96:b2:05:14:36:3e:73:bd:48:88:ee:eb:66:
                    56:53:20:19:e9:aa:2a:24:9c:48:cb:8e:fa:c1:7c:
                    b2:2d:ee:f7:42:27:fb:b6:1c:b8:6f:2c:ab:35:3e:
                    da:51:de:7b:39:ad:c1:d2:4a:61:7e:72:22:cb:52:
                    e9:bc:3a:ec:ea:00:86:86:4e:8a:4d:93:d3:3c:48:
                    5b:04:25:8c:92:38:a2:06:13:67:5e:2d:8e:e5:07:
                    ff:d7:8f:3a:df:41:e1:1d:1c:b9:a9:20:83:b7:77:
                    cb:f1:69:c3:bd:31:36:08:e5:8c:54:aa:10:32:f2:
                    a6:3d:b4:ea:09:8b:e4:0d:65:7c:7c:11:b0:1d:ae:
                    6b:8a:7e:18:6e:b8:08:cf:ae:b5:1c:81:15:0f:e3:
                    5b:e2:5f:eb:ee:30:9b:ab:a4:b6:64:d9:51:36:03:
                    5d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CE:74:62:4E:68:39:8A:3A:A9:A8:1C:19:1F:0D:49:F4:24:59:50
            X509v3 Authority Key Identifier:
                keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:1d:e7:a7:d3:86:70:5d:1a:66:77:51:58:e0:75:fe:0a:
         05:7e:3b:35:80:0c:7b:6a:70:7b:c5:b4:85:fc:48:96:65:e1:
         41:2d:1c:99:6f:d5:ca:c0:e1:d9:8d:ab:d1:ee:3b:4a:9b:ea:
         6f:dc:63:67:57:fc:41:2b:ab:97:9e:35:67:eb:6a:19:3e:b9:
         51:bf:72:ca:f8:61:d4:6d:dc:6c:46:e7:14:66:06:bd:37:19:
         85:f7:60:3e:53:f8:5e:f0:f2:38:eb:df:7f:df:60:59:64:1f:
         dc:c6:c4:35:21:db:96:c7:3e:36:5d:bc:7c:e8:73:41:00:8a:
         f7:d3:93:e1:a0:c4:23:8d:e6:1a:98:54:4d:58:79:e5:82:29:
         4b:fa:54:6f:49:05:cd:18:92:97:c7:ad:a6:5a:48:24:04:bf:
         da:13:01:fa:02:c0:6e:27:78:e6:b8:1a:3d:38:18:fe:dc:b9:
         9c:c3:dd:f8:7e:c6:eb:67:87:7d:eb:d5:85:4d:75:56:28:1a:
         1f:9d:e1:33:23:6a:0b:2d:29:31:8f:32:15:a7:97:cf:ad:4e:
         4b:7e:32:b8:a9:03:48:ff:a4:6f:15:77:f8:22:f4:7c:d5:0f:
         27:d0:12:5f:55:07:68:bd:fc:a3:70:09:20:e5:e9:d4:a4:95:
         06:53:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----