Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File:                     fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier:          D2bhsI/uRDsWRjEdzciQQE2VAvk7y0eSOtxG2UO6jR8=
Subject key identifier:   6D:99:D6:25:97:3E:21:40:EE:6B:E1:1D:64:3E:B1:5F:42:90:13:9C
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer:       /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial:       0193535152A2F8FBBB75724132EAC9E211F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number:          138D
Signing time:             Fri 22 Nov 2024 10:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:58 +0000
Files and hashes:         1: PG8vuKKnppsZDa3_MbY_0im1rUw.roa (hash: lploPa/vChvDsGc+ZyUPRLdoh2kmpQotTduJ2+fhynU=)
                          2: Z2b3jibAp-lgkBM-jMqaH7fNwlM.roa (hash: VBCKmRZASlHGcvHG3tE9JyzTrpKFa8hDoQ4Ltnwlhno=)
                          3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: 2e5LMEilfkJxTqfFIVfJvgQm4RR0qQOLFK4hSljssV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:52:a2:f8:fb:bb:75:72:41:32:ea:c9:e2:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
        Validity
            Not Before: Nov 22 10:00:58 2024 GMT
            Not After : Nov 23 10:00:58 2024 GMT
        Subject: CN=6d99d625973e2140ee6be11d643eb15f4290139c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:84:56:e2:37:1b:3f:7a:19:0e:ef:af:5f:75:
                    d0:4f:9d:20:80:6e:f6:f7:8d:97:5d:ab:e4:65:76:
                    a0:28:88:2a:c6:d0:54:e3:f1:20:57:5e:d8:25:59:
                    01:36:68:6e:71:43:a0:c1:ea:67:af:ca:b5:58:95:
                    47:6c:37:a9:03:10:85:ee:a2:9c:77:63:81:e5:26:
                    18:4a:fd:6e:ff:d7:38:c7:2f:a6:16:71:f8:f8:f6:
                    d3:78:b3:cc:ca:01:ca:c5:55:e2:90:b7:d1:0f:06:
                    e0:f0:74:34:6d:3c:96:7f:82:98:33:b0:b9:52:e8:
                    61:b3:b9:25:16:95:56:fe:d7:f9:6e:54:8c:dc:ea:
                    2d:e6:3b:a5:4a:84:de:cb:5b:57:ba:15:df:f2:03:
                    37:9a:79:62:86:62:1b:c8:0c:fe:07:86:d8:1f:b6:
                    cb:a2:b9:b4:74:12:23:5b:22:6d:d2:04:b0:9f:7f:
                    6f:4a:b7:07:a8:3f:a4:78:6f:68:ec:25:ae:cd:bb:
                    63:a2:0b:d1:47:52:70:75:60:3b:07:c0:c4:d5:f8:
                    6f:c3:0f:32:b9:70:27:b1:02:e2:b7:75:53:9c:40:
                    4f:48:cb:36:c2:f7:38:32:f2:cb:3d:e6:27:4c:fc:
                    6c:80:d9:de:4c:f9:6d:f6:6d:e2:3f:e5:50:e1:14:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:D6:25:97:3E:21:40:EE:6B:E1:1D:64:3E:B1:5F:42:90:13:9C
            X509v3 Authority Key Identifier:
                keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1f:bf:4e:27:09:44:8f:de:5d:58:36:ca:c8:9b:ee:26:b8:
         b0:53:b0:5c:13:5d:1d:30:ef:01:39:51:fc:8d:69:2e:5e:c9:
         d3:99:d5:f1:92:f7:7b:ec:56:24:77:16:44:72:be:39:09:06:
         e9:7f:0a:fd:59:bc:b1:e2:b5:9c:0c:c1:7c:45:80:31:e4:61:
         10:d3:c4:c9:fc:8f:96:95:c2:84:36:09:d5:a1:54:bb:14:65:
         9c:9e:1a:f7:4d:53:d3:b2:12:c0:92:7f:ac:ae:d7:86:a6:f4:
         96:9e:12:10:76:4a:5b:2c:8b:4a:ce:87:30:15:c4:97:87:08:
         e2:b0:d4:e6:e0:b9:ff:8e:f8:0f:49:dc:6b:a1:46:af:78:a9:
         bd:05:fd:36:15:f6:b6:87:f4:99:70:bc:d4:9d:af:b4:19:e9:
         69:58:bc:94:29:97:11:5d:4f:86:8d:8a:d1:69:86:4e:7b:fb:
         12:5a:eb:ab:9c:c9:1e:81:2f:21:2e:99:c6:ea:19:65:e7:e5:
         c8:2a:f2:ba:54:14:bb:9b:eb:dc:dc:64:74:84:e2:19:98:e4:
         3d:c5:65:76:43:18:ff:9f:5f:52:d0:08:df:70:12:c5:ba:8a:
         c5:bc:d6:81:9e:23:f1:89:dd:2d:0d:82:06:6d:77:36:be:ef:
         9f:ca:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----