Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File:                     pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier:          7TtcvaKwedIp8C6oBquSQolT6gNq+nKN0rMYWuwgtPs=
Subject key identifier:   CF:83:15:ED:60:79:52:DD:E3:B9:2F:05:83:82:0B:C7:0F:52:27:D4
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer:       /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial:       0193549B50B735E60C49EA0F2AE102861797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number:          05FC
Signing time:             Fri 22 Nov 2024 16:01:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:25 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:25 +0000
Files and hashes:         1: 8ZbhZdGqTuUbTiZUceH5f8a8ZfY.roa (hash: /DO8Z6I7XwQSyCZTg+pjHpO8kRKYvIZd3AsUfN7zq4E=)
                          2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: M9PvB3k2BLKgfAJtSA/XZShp3OKpmSre5poNXb4lKBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:50:b7:35:e6:0c:49:ea:0f:2a:e1:02:86:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
        Validity
            Not Before: Nov 22 16:01:25 2024 GMT
            Not After : Nov 23 16:01:25 2024 GMT
        Subject: CN=cf8315ed607952dde3b92f0583820bc70f5227d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:89:f8:d4:1d:87:23:63:b8:c8:7d:d9:ea:
                    42:04:5d:cc:b4:1b:89:28:cd:6e:49:e2:54:16:f0:
                    8c:ab:2f:b9:fc:27:fa:a5:71:de:5d:c4:46:30:e4:
                    c9:e4:d2:d0:5b:c5:51:1e:d4:9d:3c:a5:9d:e8:3f:
                    49:43:cb:e0:b5:12:2e:c8:f8:65:bd:74:68:4c:88:
                    34:2b:56:3e:33:86:7b:3e:59:36:f5:b7:dd:13:1b:
                    a5:20:c2:46:39:52:d3:51:fc:a8:33:6f:91:d3:3a:
                    7a:d5:25:34:e6:07:68:8e:9d:8a:f9:85:f9:21:5c:
                    b6:b2:a2:4f:25:80:34:02:10:23:7c:8e:2e:cb:ec:
                    c6:2c:6e:ed:45:9d:ed:72:da:77:ed:96:1f:ce:bc:
                    6a:20:b6:b3:fc:57:91:4c:74:91:f4:bc:b9:96:c0:
                    0a:e8:aa:85:e0:d2:b4:de:b4:c5:1c:ff:42:de:15:
                    a3:f4:ec:a7:cc:45:f0:3a:ec:1a:ef:40:48:3d:b0:
                    f4:45:b7:ad:48:34:78:bb:da:d3:cb:c2:e7:9c:9b:
                    fd:d5:65:96:8d:0e:71:f1:f3:33:e4:62:f9:a5:80:
                    cf:6a:75:de:37:f5:f4:05:e6:9d:52:6e:0a:d7:d6:
                    65:0e:3c:c9:61:13:1d:b8:e4:bb:25:69:7a:00:ed:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:15:ED:60:79:52:DD:E3:B9:2F:05:83:82:0B:C7:0F:52:27:D4
            X509v3 Authority Key Identifier:
                keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:57:4a:aa:96:5f:38:e5:e0:8a:43:c3:16:94:74:51:ce:71:
         57:69:1c:0c:76:b6:7c:7a:6b:6a:2f:d7:21:02:19:ab:98:c3:
         80:47:84:41:b2:1c:79:66:d3:7b:5d:ab:6d:66:f9:f3:4a:1b:
         93:37:3f:31:0b:69:82:db:f3:41:d8:a9:72:d9:15:ab:03:ee:
         81:12:9c:4d:a6:38:c5:76:7f:c5:fe:1f:ff:8a:12:3f:17:3d:
         f7:16:86:b1:05:e9:f9:ef:0b:cb:b8:cc:df:12:03:3b:bb:6e:
         82:a2:e6:e4:33:18:f0:95:3e:57:0d:6b:31:48:f1:06:2f:60:
         38:27:3e:de:14:08:11:2a:b1:82:f9:ab:5e:1b:42:fd:41:c5:
         fb:ce:a6:66:45:0e:c8:eb:53:2f:cb:54:56:b1:32:53:dd:1e:
         7a:14:c9:77:9c:a0:a8:16:82:dd:5b:b7:a7:1b:a8:a5:2a:bd:
         9a:3b:35:fd:3c:b3:bf:6f:df:86:ae:ca:33:61:bd:c7:82:b1:
         09:ad:91:40:2a:71:e8:d4:0f:25:ca:91:36:89:33:35:c6:20:
         7e:d6:b4:60:62:89:46:0a:b3:35:2d:de:59:2f:4f:3a:e8:c2:
         af:35:b6:50:85:33:79:2d:87:02:79:26:52:89:63:6d:91:a8:
         1a:d3:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----