Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File:                     3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier:          GMt86dYdJsXw9oJG/Qq5pBB0a55SGvggsW6BCR7+2c4=
Subject key identifier:   FB:38:F6:7E:A2:A7:42:6D:30:70:15:DF:4E:CD:46:A9:45:57:C7:F4
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer:       /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial:       0193550869143DADF7FB3E2F58F450E3AB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number:          0E23
Signing time:             Fri 22 Nov 2024 18:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:34 +0000
Files and hashes:         1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: snV0YX7/LqiboYyTC1od+rFNLCKsom8285VZadayUXA=)
                          2: Nsj0oiIKC-Tkj7NOBASjpUnxTak.roa (hash: LEcDgsiDskc4uU8d2d2v3oD6GNkitQ8mElipShmr77U=)
                          3: PisH7q2stl7meBlZXFZhrO0OAro.roa (hash: kHeLfOPVVR5+WX3sxPCjQ57NXW/zae15AEynPFIzCvM=)
                          4: mWL4wsbt3j4ARlEOJhppMCJLn5c.roa (hash: x7x3occ4o/erUocFLXHwLCKbtbacRQeYzvcRiIdQTpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:69:14:3d:ad:f7:fb:3e:2f:58:f4:50:e3:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
        Validity
            Not Before: Nov 22 18:00:34 2024 GMT
            Not After : Nov 23 18:00:34 2024 GMT
        Subject: CN=fb38f67ea2a7426d307015df4ecd46a94557c7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:a7:13:c8:fc:21:36:46:12:58:cb:f2:1d:
                    66:5e:d5:65:f9:0e:b5:ef:04:e8:ad:5c:43:a0:b0:
                    04:83:93:dd:72:27:21:9b:56:06:13:a0:b4:e7:10:
                    ea:7c:dc:a7:40:95:69:3f:12:0c:c6:d8:94:f9:45:
                    f6:1c:ae:b0:97:5c:ac:29:b2:d4:9c:36:f9:6c:dc:
                    af:f9:b6:67:db:e7:d4:b4:2f:bd:4b:7c:8a:ca:40:
                    44:3c:18:64:ef:cb:f3:f1:df:71:46:b7:ec:94:64:
                    d9:ee:4e:e5:62:8e:fc:55:ae:f9:68:04:00:2d:69:
                    9f:f7:70:8a:8a:86:e5:1b:18:51:fa:ce:42:32:c0:
                    f5:7f:0d:db:22:17:5a:52:ef:51:fe:14:01:2c:5a:
                    71:c8:e6:d8:b3:b0:1e:7e:a6:6e:f0:e4:05:22:7e:
                    c2:d7:9c:35:0a:e2:39:ad:90:06:03:14:fb:cc:9a:
                    48:46:eb:e2:15:aa:f7:8d:76:09:2c:ce:74:9b:96:
                    3c:a8:13:f0:56:28:70:07:cb:27:4a:db:b2:19:57:
                    79:a1:70:52:00:86:9c:be:81:13:d3:94:b4:38:48:
                    9b:ac:b9:ac:e2:9e:77:fa:ec:e4:d3:c7:f7:4f:55:
                    5c:c7:39:8f:0c:cc:23:11:e7:28:f0:53:80:0d:e9:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:F6:7E:A2:A7:42:6D:30:70:15:DF:4E:CD:46:A9:45:57:C7:F4
            X509v3 Authority Key Identifier:
                keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3f:7b:be:19:d3:64:3a:67:0b:7f:c1:ad:40:ce:35:7e:21:
         c7:67:48:d8:e4:14:1b:5e:ac:8c:d3:66:8a:15:4c:e7:66:9f:
         40:33:3e:78:40:f5:eb:b5:11:44:c4:7c:19:4d:78:1c:c1:79:
         6a:05:c0:05:d1:4d:0d:d5:10:7e:9b:9c:be:62:43:8a:60:29:
         8b:c8:63:13:03:e0:9c:0e:c5:0a:61:ed:16:e9:38:53:e9:3a:
         bd:3c:8e:6b:54:8c:96:b0:c1:f0:04:ca:aa:84:24:6a:de:a7:
         73:a6:99:52:14:21:66:30:41:53:d8:65:af:5b:7b:4f:3a:bc:
         de:bd:c0:3f:7a:aa:51:e3:a3:af:2d:aa:a7:7d:14:42:f5:5d:
         44:dd:73:23:49:ff:4a:a1:cb:d0:1b:4e:ec:b3:db:38:41:de:
         ec:ca:be:4f:1f:04:8c:fe:1f:00:2b:e8:e5:2f:11:47:bb:0d:
         88:f3:af:36:be:5b:93:14:c6:f8:0b:71:33:75:f3:4f:d3:3f:
         5a:45:70:db:f4:7f:f1:d3:b9:fd:52:59:f2:fa:f7:d1:10:d3:
         22:78:71:f8:d0:13:f8:19:8e:ff:8f:da:cd:7f:2e:d8:f3:c4:
         d4:b6:7c:d5:c3:54:dc:14:74:f5:28:67:56:2d:3a:62:8f:59:
         27:bd:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----