Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File:                     wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier:          qh6DBCr5h99W8O+zSU4e/mEE8fhPaf6zYCS1VHguKx0=
Subject key identifier:   62:A6:93:85:52:A4:77:9A:39:67:F2:68:7C:02:AF:E0:C8:D1:ED:9C
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer:       /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial:       019356BFBB6259460F6B48A8F3F9D545D66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number:          031C
Signing time:             Sat 23 Nov 2024 02:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:26 +0000
Files and hashes:         1: GbJx8rSHf1fG8o4WQDe4Qzpophk.roa (hash: bYJDqP4haPuB0S+yl2972iakwx1bzFGXOnQK7MmrzbA=)
                          2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: 4FN9bWPEav9PNrw9KKCJMii2PvcWYwwZeuPpCOQ22iQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:bb:62:59:46:0f:6b:48:a8:f3:f9:d5:45:d6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
        Validity
            Not Before: Nov 23 02:00:26 2024 GMT
            Not After : Nov 24 02:00:26 2024 GMT
        Subject: CN=62a6938552a4779a3967f2687c02afe0c8d1ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:40:c9:27:10:06:23:85:a2:a3:11:21:d4:
                    b9:e5:aa:0c:8f:6f:ac:07:99:42:15:2e:a8:69:01:
                    2a:c8:c0:d5:7d:d8:0f:eb:42:01:23:c0:2c:7b:ec:
                    0f:d0:86:ec:e1:1d:b9:c2:b6:b2:00:f0:c8:78:34:
                    c6:9e:cd:25:0f:6a:73:11:0e:a2:b8:39:ab:d8:45:
                    03:da:77:06:4c:5f:1c:7b:66:c2:7b:7b:47:b3:7b:
                    49:7a:ff:d6:5c:17:f5:e3:35:ef:e2:b4:93:51:73:
                    56:dc:1a:0b:ec:dd:cd:2d:7d:d2:02:c6:58:84:80:
                    2d:ee:1c:1d:8b:29:9e:50:e5:58:d4:55:2d:a4:5a:
                    51:8d:75:6e:9b:ea:da:cc:9f:ee:b1:b9:7b:c0:95:
                    86:f4:fb:f8:83:76:b8:a0:be:60:c7:a1:98:6e:82:
                    cd:82:93:dd:f1:84:48:6d:46:79:18:a2:0e:e6:99:
                    10:f9:2c:4e:fc:9b:75:ff:92:5f:85:b9:b4:b1:f2:
                    99:0e:66:1f:e3:93:f9:55:0a:b9:1f:06:ea:bb:28:
                    6d:fa:38:77:aa:54:48:77:58:f3:69:e5:dc:06:c3:
                    71:5d:29:04:d6:25:ed:c8:d4:5e:37:2e:f2:4f:d8:
                    25:34:2b:e9:54:ba:8a:73:76:50:64:8a:54:bf:b0:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A6:93:85:52:A4:77:9A:39:67:F2:68:7C:02:AF:E0:C8:D1:ED:9C
            X509v3 Authority Key Identifier:
                keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:57:d3:65:ae:72:63:fc:bb:d4:26:f0:4e:14:dc:9a:69:
         b0:17:63:2a:75:f8:34:b3:3e:52:88:72:d5:55:4b:b1:e0:e2:
         b2:01:c2:86:2a:53:97:66:81:36:d7:2c:a1:3a:35:7e:42:da:
         06:d8:c6:8a:5f:39:84:fd:73:43:4d:4b:54:31:99:f1:e7:8a:
         b4:9f:27:b3:da:6c:74:ff:bc:31:6f:b1:a0:ae:5f:db:15:e6:
         4f:87:4b:47:6c:0c:b4:39:f7:b9:61:51:ad:44:84:38:f2:4f:
         58:0a:25:64:45:64:5b:b3:9e:d5:94:d5:7c:1c:b5:27:58:af:
         e0:18:3d:81:f6:32:da:fd:66:b5:6b:9f:b9:7c:32:22:93:b8:
         91:ea:76:92:34:c4:b8:1f:f2:c9:d5:56:b6:c7:c7:3a:3e:1e:
         b2:ea:c1:5a:0b:d7:11:4d:57:e3:ff:70:52:36:eb:ad:d4:86:
         bd:bf:ef:42:34:09:43:92:04:9e:f6:ba:6c:b7:7a:76:cc:1a:
         72:c4:fa:68:5c:9c:16:76:e5:b1:bb:7d:56:36:05:35:ab:09:
         df:2f:04:70:ee:79:35:ff:d5:f8:a0:d5:c6:78:83:d1:28:9e:
         11:b1:65:da:4f:7d:e9:85:59:47:09:9f:3f:8c:fe:c8:c1:9c:
         37:c6:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----