Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          Xrkygm1Evg/i+Hrg4HQHkzD4KVntgbGEog54q4LbYNA=
Subject key identifier:   87:77:0A:3F:02:CF:3B:C2:F4:71:9C:AC:25:85:D0:A6:9B:00:C8:97
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       019356892ABA4AD0BFC836430BEE7F6A0C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:49 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: QIyQs2hhgbsY4DKvRRJXMlUnBTO6u9iaS+Al4N7vpXw=)
                          2: fHVhusNAY2MR5dWgtPYv6wC0Aww.roa (hash: V5Mhvx0BGUE3n+ECbZIHg2NNqv5+ZbKAU/oHt2DbFCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:2a:ba:4a:d0:bf:c8:36:43:0b:ee:7f:6a:0c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Nov 23 01:00:49 2024 GMT
            Not After : Nov 24 01:00:49 2024 GMT
        Subject: CN=87770a3f02cf3bc2f4719cac2585d0a69b00c897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:eb:23:18:06:6b:49:9a:d7:55:26:a6:43:
                    84:ae:d1:ef:04:3c:73:9e:1b:84:c8:33:da:d7:63:
                    ae:0d:fb:ed:66:68:98:cf:88:94:08:2e:c8:70:04:
                    7c:c3:85:a9:c2:6d:e7:1d:aa:8d:d0:3b:29:fd:df:
                    17:b8:89:de:62:5c:65:88:c4:6d:d3:4e:25:6b:08:
                    fa:9d:ba:98:2f:e3:b6:cd:7d:81:9f:62:ed:c5:1e:
                    64:ca:9a:d2:69:ba:14:37:d2:34:88:bf:d1:4a:8a:
                    7e:af:19:58:89:9b:49:27:e0:3c:94:f9:c9:4e:70:
                    26:63:91:1e:2a:31:35:d2:76:ff:17:1d:3d:c1:56:
                    80:48:02:df:9e:49:70:f8:37:bd:ac:ca:71:6c:1d:
                    ad:57:f9:90:4a:19:8a:ac:72:4b:ac:05:6a:df:a7:
                    73:de:1d:d0:f5:ea:b6:bb:92:a5:d2:0d:e5:b6:fd:
                    0a:d7:33:6d:26:68:49:c1:8c:8a:57:25:c4:bd:91:
                    51:9c:aa:70:b5:ea:c1:0c:1b:b3:00:f3:40:d3:c5:
                    c4:9d:8d:e6:e0:d0:a1:d3:55:54:cb:40:64:53:0e:
                    23:80:9b:05:eb:11:9a:49:5f:85:38:f7:ff:fc:66:
                    f8:6f:aa:72:51:08:68:7d:7a:49:2b:f3:73:cd:b0:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:0A:3F:02:CF:3B:C2:F4:71:9C:AC:25:85:D0:A6:9B:00:C8:97
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:4e:54:e6:e4:08:5c:df:cf:d6:24:c8:d9:19:61:89:67:
         ad:11:eb:35:89:de:17:9f:a8:55:e6:8a:df:ad:2c:4e:9c:03:
         0a:96:08:8b:0b:65:70:7e:40:18:6c:c6:df:f8:9d:9e:b0:4b:
         98:fe:a0:bc:13:d8:03:f8:0f:19:b8:07:ac:ed:8e:fb:cc:05:
         9d:d8:c1:e2:d5:b9:83:1c:f3:2b:50:a2:91:10:0b:b8:c2:1f:
         1c:c7:08:40:83:9d:e6:2c:21:6a:77:c6:a5:82:6b:77:2d:4a:
         09:2b:a9:3e:bc:b4:d9:ec:4f:cb:a7:41:ec:a1:1c:15:55:c3:
         36:63:03:f9:b1:8c:0f:f9:a9:ca:68:62:82:50:6f:e6:f9:b5:
         9b:6c:a4:2b:1d:69:fe:7b:cd:67:36:1c:97:50:9f:b1:2b:03:
         59:9e:b8:fa:9b:d9:e7:7c:70:9b:12:6b:a6:ee:d9:a9:ab:1c:
         91:57:04:bb:4d:ed:65:99:a4:99:a2:7d:26:20:19:a9:cf:37:
         d6:a0:a4:61:f7:9f:8c:0b:f5:a6:c6:4c:3d:8f:48:68:5d:b4:
         db:7c:44:e7:64:43:b6:b6:3c:c3:0e:97:71:5b:eb:c7:5c:f7:
         64:de:5d:b6:4a:cb:e7:67:fd:e9:56:56:55:f8:a3:83:74:2e:
         58:bf:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----