Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File:                     m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier:          EFEhUDffNAjWf/z5slBnVljWKVRt/hN99wtYx7zyu10=
Subject key identifier:   D5:24:98:C1:FD:81:6B:24:42:00:38:BF:53:A1:C1:F5:6D:FD:6E:2F
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer:       /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial:       019369DAFDDA2916B90797C239D2A4EE86D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number:          076C
Signing time:             Tue 26 Nov 2024 19:02:59 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:59 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:59 +0000
Files and hashes:         1: VYux3D_g-m3C0cAC4N-wxSwFmFg.roa (hash: 8yIbmFq6qwo0MCfrElXu71AaZ8x8+UgiAdO8iyDslWU=)
                          2: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: RtSENHfYzzihnYSLWRGsPtLxF/sfM34StUMWON8rwsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:fd:da:29:16:b9:07:97:c2:39:d2:a4:ee:86:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
        Validity
            Not Before: Nov 26 19:02:59 2024 GMT
            Not After : Nov 27 19:02:59 2024 GMT
        Subject: CN=d52498c1fd816b24420038bf53a1c1f56dfd6e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:80:a0:80:c9:87:54:b6:d1:a6:8b:ab:c1:
                    89:78:1b:0b:4a:4f:ac:a9:5f:9e:7f:79:f7:95:bd:
                    e2:c6:a9:50:ca:ae:c6:f5:80:16:bf:f0:e3:bb:8f:
                    c2:74:21:82:70:45:da:61:79:5e:62:5d:94:e9:e8:
                    e3:e9:c8:be:df:94:ab:f7:46:82:a9:97:11:be:77:
                    a2:a8:a6:bf:ae:68:e9:8b:ef:d5:1e:6c:21:4a:77:
                    03:9e:06:00:97:b3:7c:f8:86:bf:3e:bd:eb:60:c9:
                    54:d6:76:77:d5:8c:0c:e2:3b:6b:90:52:e9:1b:cf:
                    23:99:df:33:20:dc:84:75:7d:ec:1b:db:ba:39:da:
                    2d:c2:9d:8b:dc:de:93:b0:ec:5f:7c:b1:5c:a7:97:
                    15:d3:01:40:8e:fa:12:31:b5:d5:29:29:f3:2f:94:
                    7f:6d:e4:ad:4b:6d:93:dd:df:f3:a6:21:86:a6:a8:
                    cd:32:8f:e5:81:ec:56:23:ee:52:bd:cf:cc:fe:e0:
                    9b:50:e6:c4:90:7f:51:df:8b:7b:91:ae:d1:0a:6f:
                    43:9a:2f:e4:3e:b0:bc:07:da:af:4e:5b:a9:7a:1b:
                    80:93:56:06:4b:60:b7:24:f8:ba:e0:2f:63:96:78:
                    ac:24:81:06:93:83:09:e3:21:06:8f:79:50:d2:ff:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:98:C1:FD:81:6B:24:42:00:38:BF:53:A1:C1:F5:6D:FD:6E:2F
            X509v3 Authority Key Identifier:
                keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:67:1e:28:51:5f:d3:2e:18:10:7e:9e:8e:97:a3:22:30:
         fa:26:74:54:1c:14:fe:7a:cb:1c:d3:d2:fe:6d:11:12:ed:cf:
         7e:a0:3a:ae:cb:b7:2a:b6:61:dd:0a:c1:2e:2e:88:3e:a1:85:
         26:e6:36:5a:ca:44:16:0c:fc:97:ee:d4:ac:12:79:ec:b5:c4:
         d6:7c:00:92:8a:c7:7d:f2:7d:41:1d:eb:d3:08:70:11:a9:b9:
         b0:28:b2:fd:e8:c5:fc:8b:3e:49:9d:4a:21:c6:a0:24:79:43:
         08:8a:06:2f:e1:a7:3e:60:7f:49:7e:a2:e6:90:f7:f0:0c:44:
         27:a4:2d:d5:49:b8:8d:03:d6:78:b4:82:9e:63:33:da:c8:3a:
         25:57:f1:d5:f4:44:50:c2:67:f2:25:3d:b8:5c:f9:fc:b1:32:
         7d:bb:2a:35:39:ba:f9:01:2f:34:b3:b8:3a:36:87:f0:8c:28:
         72:a5:2e:0f:3b:8d:ab:7c:02:ad:fc:f2:b7:05:5f:d6:d8:a6:
         14:a6:3f:4f:c0:06:e1:ce:33:aa:a8:90:d4:96:cd:0c:2f:43:
         57:fe:e8:94:cf:e2:16:62:af:3c:32:96:ee:1d:a0:e1:0a:58:
         67:bf:06:d5:6c:dd:4d:1c:da:1d:d8:bb:8e:40:cc:a9:c5:f0:
         f0:61:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----