Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          XEp6I94B71cxPCz6lFeBytnT53gv9dQrJfG0YwRoxao=
Subject key identifier:   79:2B:00:11:24:1E:38:BE:CF:14:29:16:D1:01:EE:9B:EB:F4:E4:06
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       019369D9BDE113DFF5D3706F9BB44DC0D136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          0F3B
Signing time:             Tue 26 Nov 2024 19:01:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:37 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: 89LkRk+o5jVmX7Zh8e7GEbq8DPZhB22M0B87gQkKKJ0=)
                          2: hBHiDeqXKu_F_jI2ihb85LIjfYE.roa (hash: 04PHS+ARirwYSDn81cEBc5yadsjFdazG19gNYuxU+gI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:bd:e1:13:df:f5:d3:70:6f:9b:b4:4d:c0:d1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Nov 26 19:01:37 2024 GMT
            Not After : Nov 27 19:01:37 2024 GMT
        Subject: CN=792b0011241e38becf142916d101ee9bebf4e406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:2e:6c:92:f2:f5:64:b1:fd:c2:46:fe:d7:
                    12:4c:ea:9d:bf:8c:fa:fb:01:4c:f7:ec:ad:ac:7f:
                    60:97:72:3e:16:b1:bc:69:76:13:32:d2:d0:1c:1f:
                    8e:62:60:32:f3:d4:31:45:b6:bc:43:5d:52:16:0e:
                    53:8a:c8:b6:23:1e:a9:ad:14:7d:0f:b4:59:23:7e:
                    93:17:78:40:0e:96:06:3e:bf:5e:50:03:2e:f4:26:
                    57:11:5b:01:5f:27:a2:3e:7c:d1:7f:ec:83:a4:cf:
                    c2:6d:d2:11:a1:db:c6:db:d1:87:35:f4:72:f1:82:
                    ef:4c:4d:fb:68:6c:36:0a:2a:9b:48:a1:88:d5:fd:
                    7b:bf:70:42:ef:46:90:78:35:29:8f:ca:57:99:c3:
                    62:ca:e7:86:dc:75:dd:71:a4:3b:0d:38:94:09:7f:
                    2f:ef:97:5a:7c:f2:ce:56:30:7b:b7:83:5d:21:87:
                    2d:c6:bd:5b:5f:2a:71:7a:8a:0b:b2:c9:b0:2e:a4:
                    c7:1c:33:b5:66:3f:5b:18:8f:cb:d4:47:f1:e0:bd:
                    cd:09:6a:ca:d4:a6:1f:9b:fa:c0:f6:70:35:c1:5f:
                    ed:fb:22:c2:07:54:54:7d:5d:de:6c:2e:d7:d5:e0:
                    d2:dc:9f:dc:62:5c:c7:fc:72:3e:d2:34:08:ad:f0:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:00:11:24:1E:38:BE:CF:14:29:16:D1:01:EE:9B:EB:F4:E4:06
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:55:d9:88:3b:10:86:21:a4:74:f1:37:a9:22:76:df:4a:a0:
         e8:11:47:1b:59:08:1f:6d:c2:1a:f9:af:34:70:69:1a:45:aa:
         86:57:48:06:5d:48:e7:b8:99:7e:9e:d4:99:50:0d:37:fe:2c:
         7f:54:8f:02:0c:bd:51:f9:dc:ad:11:d1:07:67:de:1e:6c:c2:
         37:61:5b:6e:da:7a:37:2f:80:8b:38:7c:7b:4b:1a:3e:f5:a2:
         4c:d4:5a:39:58:9d:72:dc:a6:40:fc:eb:a1:03:12:53:b9:db:
         2e:95:f8:82:75:8f:ba:f0:fb:bb:14:52:5c:3a:c7:38:dc:aa:
         b8:14:96:56:5d:d4:58:ff:81:53:18:2b:c4:1b:19:22:a2:05:
         af:4e:f3:40:1b:fe:58:40:0f:46:b4:bd:14:9c:b1:88:0d:0d:
         69:94:f3:3e:cf:82:91:8e:69:66:38:7c:97:70:e4:4a:70:28:
         a1:2b:53:bb:c8:e3:86:b9:12:bc:a3:8a:a3:3e:e1:1a:cf:4b:
         62:ce:c4:d3:b8:eb:5c:95:b2:0c:9b:c9:6a:16:7f:11:55:59:
         ad:b2:b6:f9:70:22:c6:d8:c2:77:f5:fc:6b:5b:1d:b3:53:99:
         0c:76:41:a6:73:d8:7a:10:a3:f0:d0:1b:5f:ea:35:8f:44:5a:
         c0:73:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----