Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File:                     oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier:          eVhppSvQM/0oCkCwPw3WPJEt4gy4hjZeXZV9cdOcLps=
Subject key identifier:   2A:33:19:F2:74:AB:30:7A:8C:45:CA:FA:BC:65:9B:E1:7B:37:81:CD
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer:       /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial:       019369345093113D1B6141BCDED012B19427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number:          0F37
Signing time:             Tue 26 Nov 2024 16:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:56 +0000
Files and hashes:         1: o80n6Qz7pVNgGzPhHNU2MS14QOk.roa (hash: C8b52w8ieYcAzHjigdSlzRtxKU+/UlpKmT2y1RBZXBo=)
                          2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 5bGjlzZkRn9zjx0MZSLkw4cygE/KrUNGBAyOL6HSjSE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:50:93:11:3d:1b:61:41:bc:de:d0:12:b1:94:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
        Validity
            Not Before: Nov 26 16:00:56 2024 GMT
            Not After : Nov 27 16:00:56 2024 GMT
        Subject: CN=2a3319f274ab307a8c45cafabc659be17b3781cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:f5:20:b3:2c:6b:75:e6:51:3c:2b:ba:ae:
                    1b:2f:65:5f:40:1c:68:95:3c:6d:6f:81:92:a5:8d:
                    b6:78:7f:ed:cb:c8:4b:b1:63:1f:7b:68:a1:1e:f3:
                    88:5a:9c:c5:ee:e3:33:36:cb:29:26:51:81:48:19:
                    44:34:f2:25:28:10:87:45:56:95:db:f0:b6:3d:6e:
                    25:3b:0c:0c:16:b3:30:ec:03:7c:4e:03:da:cc:a6:
                    43:62:fc:de:f6:2a:38:fa:88:9c:b0:c8:33:97:7b:
                    e5:d4:0e:9a:ba:59:ef:aa:40:7b:c5:01:38:a3:47:
                    f2:5a:6a:e2:79:cf:5c:b9:57:25:a0:92:65:b5:11:
                    2d:94:fc:2e:8f:9e:ec:a2:b6:97:99:1c:53:c3:08:
                    42:e1:98:12:13:90:a0:43:b3:de:56:3e:5b:92:a0:
                    aa:31:0f:6a:ef:05:17:e2:35:2d:d5:3a:23:9c:71:
                    42:da:9f:20:7f:89:8c:95:93:48:99:2f:e6:d5:b4:
                    25:36:e4:55:85:e7:f2:67:70:ef:83:12:8d:cb:3d:
                    50:eb:9e:08:05:ec:45:f0:bd:bf:2f:dd:bf:5c:ce:
                    6d:39:89:6b:0f:0e:11:a7:da:d8:f5:2a:fd:7c:12:
                    92:03:48:f8:28:f2:09:1d:df:ef:04:4d:d4:95:69:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:33:19:F2:74:AB:30:7A:8C:45:CA:FA:BC:65:9B:E1:7B:37:81:CD
            X509v3 Authority Key Identifier:
                keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:82:92:a3:2d:b7:db:93:fa:18:e1:8e:c2:68:35:85:bf:
         d8:cd:ba:63:db:ad:f3:0b:60:b2:12:17:15:66:8e:18:aa:d9:
         41:b1:12:9c:c5:03:9c:83:0b:0a:c3:ba:bc:e7:1d:01:22:e6:
         5d:f9:4a:10:8f:78:56:32:7f:5f:25:6a:8d:c0:1a:0b:dd:32:
         0f:1d:af:95:04:7e:61:13:04:b6:92:e9:0d:92:bc:c8:5b:f5:
         9e:05:cc:df:b8:51:35:8d:e3:43:b8:96:b6:ba:49:d3:47:7d:
         21:c1:76:d3:2d:d4:01:47:61:80:5f:2b:e9:4b:5d:8b:21:4a:
         a2:2e:94:30:16:72:8f:65:d3:c9:d7:d6:f6:4f:ae:de:57:95:
         5b:30:34:3e:fb:15:60:42:4b:a5:b5:5d:66:0e:c5:d1:da:7a:
         d2:9b:bb:62:1e:14:a7:e1:01:52:3f:e0:49:f3:ea:03:68:7c:
         16:73:52:12:80:f5:d8:da:29:2d:10:38:58:a3:f1:18:85:b4:
         aa:ed:b9:7f:03:10:42:67:69:eb:5f:4f:a3:88:79:cf:e9:b2:
         f5:51:e0:a7:99:2a:a2:5e:47:2d:3c:89:27:ca:a0:23:c3:36:
         2e:1a:70:30:18:c6:0a:03:e6:4b:cf:13:c9:3e:3a:b9:4b:cd:
         65:59:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----