Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          sDYgi3KALsKwd4mKGD9Ii95gRpjwSLIJdn1QAvrcUes=
Subject key identifier:   5E:8B:B5:B5:F3:47:98:2C:AD:88:4B:D2:CB:39:2B:FC:B5:1D:20:40
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       019350BEE057699ABE3C65810ABF2B156E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          0E0C
Signing time:             Thu 21 Nov 2024 22:01:46 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:46 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:46 +0000
Files and hashes:         1: 7KHVPABIwblxDSXLzI-JiRzjEik.roa (hash: WSWds6cJkaRR6UbskNv4gRNI1unzXSDmI3DwnJvVNt4=)
                          2: Cx2ctPr0RpvU99YfH33KAXv8cyI.roa (hash: kOP6VBjk7tLQARvDqjCehcXvTOiCgQW5NfbDe1uTmwU=)
                          3: IQXaogSvRuB1X3RRqB2M_ZhcJAw.roa (hash: HbjfL0LrOVoNL82kCby9X9GwiRgEEauuhGoJW1UkPZI=)
                          4: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: WJtikaY3DlvoAx1XTtxpR6Dq5VNnt2l13W9XDxEvIhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:e0:57:69:9a:be:3c:65:81:0a:bf:2b:15:6e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: Nov 21 22:01:46 2024 GMT
            Not After : Nov 22 22:01:46 2024 GMT
        Subject: CN=5e8bb5b5f347982cad884bd2cb392bfcb51d2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:b4:27:18:a9:4c:26:a8:98:66:07:ea:63:
                    50:46:d8:76:e3:ae:6e:55:3b:19:6d:42:dc:2b:86:
                    f6:9c:d9:1e:d7:5c:25:2c:e8:be:c1:29:09:6c:65:
                    eb:43:59:78:10:36:34:84:b7:cb:4f:de:b3:0e:c6:
                    dc:be:7a:1e:8b:78:4e:cc:0e:ce:3a:26:58:fa:b3:
                    5c:9e:16:3c:fb:17:40:fe:67:42:ae:2b:ad:73:e3:
                    24:b0:4f:58:6c:aa:f9:79:67:9c:f3:4d:f8:9c:8b:
                    22:13:5f:5c:3d:13:83:0b:52:68:be:0f:41:cd:c5:
                    34:5a:ba:c1:0f:60:fa:ce:0d:92:34:39:44:64:4b:
                    17:f7:6c:f4:d6:6c:84:0c:a5:da:63:1f:9f:5e:cb:
                    1f:ba:0c:8b:54:31:96:de:d5:e3:8e:5f:29:2a:84:
                    ff:00:78:af:76:72:ae:fb:03:25:7c:ad:bf:46:db:
                    9d:68:89:43:d8:84:25:2b:4d:0b:de:8c:3b:3d:10:
                    89:d9:2c:d1:3b:12:aa:51:97:de:34:c7:31:dd:9a:
                    1c:38:b9:21:61:b6:d8:e2:16:1b:ed:3e:21:89:19:
                    4a:76:2b:17:0e:ff:c2:4b:00:f3:b5:3c:17:e9:51:
                    b6:36:00:23:ba:a3:2b:64:36:f1:89:26:78:86:8c:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:B5:B5:F3:47:98:2C:AD:88:4B:D2:CB:39:2B:FC:B5:1D:20:40
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:86:1e:70:a3:11:e5:e1:1a:d6:17:ad:c9:8d:44:dd:fd:
         50:96:fe:ea:8d:90:9a:35:ac:fd:f6:ab:f5:f3:dd:63:f3:26:
         da:10:4e:98:7d:a5:c7:b4:d5:ae:47:09:c7:a9:51:30:9c:a6:
         b0:bb:85:7d:61:f8:b3:eb:05:20:6a:8e:93:c9:e7:4e:91:d9:
         57:77:74:0e:1f:46:a1:2d:64:ed:57:5e:d4:14:6c:76:2e:7e:
         aa:23:21:92:63:5d:67:64:f3:1c:77:a3:75:23:fe:5c:95:69:
         99:09:e3:dd:6e:c9:48:67:20:37:b0:65:36:88:58:ad:f4:16:
         1a:74:ee:bd:ab:1c:30:48:b1:61:fb:18:20:f3:cf:7a:be:f6:
         81:a9:54:f0:c7:55:d6:e0:6d:fa:fd:03:a1:d0:cf:f7:66:17:
         39:e6:9b:1b:af:d2:c1:f7:0b:b9:ed:9f:09:5f:c6:52:d8:5d:
         1b:6e:25:2b:44:8d:56:a6:c0:7c:2a:14:06:0e:2e:59:8d:63:
         c3:57:18:79:3b:1a:8a:ff:c6:b7:fd:7a:95:18:9c:c5:ef:20:
         30:48:ec:4f:cb:ca:fe:f7:70:e9:7c:12:f2:a7:dc:20:ab:b6:
         f2:5e:d7:43:e6:27:de:15:c8:08:5c:f1:0d:f8:6f:24:e7:c1:
         a3:48:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----