Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          l/qGYVNa6EsTZQ8L7a77daH4l3xy/txXMxc9rij9UO8=
Subject key identifier:   DB:77:06:6C:33:B0:32:37:0B:9D:61:A4:7D:A2:D2:49:E7:0A:6B:09
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       0193639F6651FF84F82412BC47D31F4A5C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          0CC9
Signing time:             Mon 25 Nov 2024 14:00:10 +0000
Manifest this update:     Mon 25 Nov 2024 14:00:10 +0000
Manifest next update:     Tue 26 Nov 2024 14:00:10 +0000
Files and hashes:         1: AsbDcpcfCr6aI4OoPM0DofM2eE8.roa (hash: hR3lFZpL/TaNsSm44D2BW2O8ASIh3fXXk5cNr+qdWsE=)
                          2: meqjRoAVgs8VQyNuOGWvDNS6iHE.roa (hash: 6HmELG6k1OhdhstVge8R2hTIkxFRjFOkD6a3ooSJZr0=)
                          3: ozO1CA0XgWkoJsek8riCYKsu6Aw.roa (hash: ua2+mg3Tka1wyRGgatcmvBH47duQysmdBTO65y1ddMA=)
                          4: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: WBMMjcLAM8OOfKhLapEce9SovXdemXhcyJm0hMhHZ44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:9f:66:51:ff:84:f8:24:12:bc:47:d3:1f:4a:5c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Nov 25 14:00:10 2024 GMT
            Not After : Nov 26 14:00:10 2024 GMT
        Subject: CN=db77066c33b032370b9d61a47da2d249e70a6b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:f0:c2:70:56:ac:f0:97:92:34:cd:61:a0:
                    36:bc:e9:ee:14:0f:b1:d8:e8:ff:65:c8:01:de:33:
                    19:28:2d:3d:70:08:39:d9:2b:5b:6c:64:ab:05:12:
                    fa:cc:d3:c9:ce:d6:f8:ea:9e:c1:b5:ee:a4:8b:f6:
                    87:96:39:29:34:99:40:39:8a:af:75:25:29:9e:d4:
                    ec:14:d9:19:4a:8d:7d:a4:61:0a:30:c9:5d:da:e6:
                    87:16:55:b0:a6:23:7a:f6:06:80:c5:ba:62:34:58:
                    bf:62:63:81:0a:26:8e:0b:94:04:48:7a:06:08:39:
                    f7:6c:dd:3c:37:dd:1d:39:84:7f:e6:54:43:77:68:
                    b2:26:5d:a2:0e:b4:db:fa:39:7b:66:11:05:34:ba:
                    42:35:ee:32:61:c3:f8:43:64:7f:3d:0e:50:41:79:
                    bf:5c:c3:cc:42:03:92:6e:66:7a:a7:b1:e3:45:38:
                    6a:e2:5b:50:c1:28:e1:08:ee:65:a8:09:24:1e:b8:
                    fa:e3:5d:92:b4:54:a8:af:4e:1a:40:b2:90:f4:eb:
                    52:bf:9f:d2:cd:84:dc:68:e2:a3:ce:33:fa:1b:67:
                    44:99:d1:5f:b5:43:5a:46:3f:f1:10:01:c6:b2:39:
                    b9:f7:cf:eb:3f:e2:21:0e:5a:ab:75:cb:65:2c:3b:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:06:6C:33:B0:32:37:0B:9D:61:A4:7D:A2:D2:49:E7:0A:6B:09
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:e6:66:26:03:dd:b4:e9:18:76:8e:5f:8b:47:b9:20:28:
         19:6c:54:10:64:66:2e:de:41:08:8b:0d:a2:cb:c3:df:a7:19:
         b4:f1:25:db:2d:fb:a9:70:ea:ae:e7:a1:49:64:e4:7f:4c:18:
         2b:73:eb:e1:22:94:8c:e1:81:61:82:03:9b:48:c3:27:8c:2e:
         ba:ea:ab:a2:5e:c5:c3:73:5d:7d:6e:ff:5b:5b:82:af:20:ab:
         74:88:cf:b0:81:05:61:6a:4a:d6:e8:4d:61:d9:90:7d:1d:b4:
         99:37:c1:0e:44:88:2e:01:4b:74:d4:9b:49:0d:4c:26:e3:c1:
         dc:0d:81:c4:ed:5e:b6:09:b0:e5:0d:2e:c2:ea:d3:58:c9:a6:
         e8:6e:7e:92:0f:0b:0f:cf:1d:66:ac:99:f2:09:fc:69:e8:ea:
         f8:14:f0:ca:f8:55:0c:c8:07:a9:16:0b:db:5b:c2:5c:09:d6:
         74:5b:c9:8d:3c:40:d0:e3:a4:18:3d:02:36:2f:f3:7d:4a:b5:
         5c:93:b2:92:40:7f:9d:ae:f3:48:33:fb:cf:09:29:5a:e7:b7:
         82:3d:1a:05:0f:03:e1:0b:fc:1c:b3:f3:55:e0:af:03:68:b7:
         de:c9:75:16:72:4b:a3:d3:4c:7a:00:05:ff:e3:f4:f0:28:fc:
         5a:1e:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----