Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File:                     PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier:          1H0RnRCQ3lUGds7YqGaOgF+Rxm7FqcpBRxFklxZ8Krc=
Subject key identifier:   97:F7:73:A8:2B:95:0A:7A:AA:E1:50:74:9D:5A:DA:3F:89:E4:99:FA
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer:       /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial:       01935764EFE6315A3B042FD83CA9110E0125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number:          0B84
Signing time:             Sat 23 Nov 2024 05:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:52 +0000
Files and hashes:         1: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: ZQPsGW5YY6hY/w+7UGcHB0VsS+YgOKA4bGHwFzxYu8g=)
                          2: dSbhL2yPOCTfM8yX6RxNH--tyk4.roa (hash: hfjZ/nFOt8IskNPeS9G8zTEwfdBB7x8lslc+hfsCKTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:ef:e6:31:5a:3b:04:2f:d8:3c:a9:11:0e:01:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
        Validity
            Not Before: Nov 23 05:00:52 2024 GMT
            Not After : Nov 24 05:00:52 2024 GMT
        Subject: CN=97f773a82b950a7aaae150749d5ada3f89e499fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:b4:37:d8:5d:e7:f1:81:c3:17:74:35:6d:
                    6e:56:44:8e:77:c8:88:a2:88:6e:90:c5:3d:76:db:
                    1d:67:3c:86:ab:47:4e:0f:d0:31:97:3e:c9:28:cb:
                    d1:a3:d9:92:42:6b:7a:1e:5d:18:14:23:4e:26:1e:
                    3c:b8:39:ff:49:ef:66:19:c6:6c:5c:7b:41:5a:46:
                    4f:fc:e6:cd:ab:25:a9:4a:86:0d:d3:ba:ae:a7:35:
                    bb:dd:4a:96:bd:a0:c3:5a:ae:b7:22:bf:29:de:25:
                    17:4e:81:86:0f:b2:78:71:c0:b7:25:f6:24:60:13:
                    0d:94:9b:d1:20:ed:71:9c:0a:27:26:37:89:96:d4:
                    af:aa:0c:e7:b8:94:71:38:ce:f1:5d:e8:c5:f0:83:
                    10:b3:11:d0:68:e3:1c:6f:5a:ee:d0:25:8f:51:60:
                    9c:96:6a:78:9d:b7:40:44:03:e2:85:f6:69:7f:9a:
                    65:83:72:c4:69:52:e2:84:da:74:46:dd:7d:7d:0a:
                    58:30:c8:c1:33:73:2e:b9:70:aa:41:55:10:9f:3d:
                    21:95:03:8a:ce:0c:09:c0:8d:20:52:81:eb:85:48:
                    62:93:36:f9:ab:cb:da:b6:98:1b:91:53:0d:11:a2:
                    9f:66:8a:91:97:81:9c:5f:6f:ae:d5:83:47:c6:d0:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:73:A8:2B:95:0A:7A:AA:E1:50:74:9D:5A:DA:3F:89:E4:99:FA
            X509v3 Authority Key Identifier:
                keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:24:ed:a8:b1:f9:56:7a:54:fb:89:8d:79:e5:41:8b:f4:
         0f:e8:5d:2b:4d:d1:a1:ee:03:a0:4c:1a:d2:06:7c:0a:3e:53:
         26:d3:f4:d1:ad:f3:8b:fa:4d:7b:a6:87:f2:53:eb:6c:c9:2f:
         a7:2d:8e:45:63:39:56:8a:2d:93:f0:d8:9e:62:01:4c:6b:d0:
         de:6e:bf:1f:8f:2f:59:c2:62:d9:33:19:c1:c5:26:44:6d:72:
         87:43:d2:a8:24:9f:b4:11:70:04:74:0a:5f:58:54:14:9e:e7:
         ee:2a:d2:ae:c3:0d:55:bb:16:33:f1:bd:f1:17:03:f2:99:30:
         f5:bb:67:14:39:6b:7d:e7:78:2d:39:93:3a:43:92:13:fc:1d:
         ee:69:be:68:f4:ec:cd:29:27:e9:f1:a6:c8:37:2d:4b:86:58:
         93:3f:03:fc:7f:da:ea:4e:18:59:d9:c9:4c:c2:3d:ab:3e:e8:
         c9:c9:ca:e3:9f:54:ee:d0:4f:1b:b9:a9:06:b6:06:b6:2a:4c:
         0c:cb:d1:84:9f:81:1a:8c:b0:ff:81:ca:7c:ae:07:b0:0e:66:
         9d:79:6b:70:f0:00:28:19:f0:a4:ba:2e:ed:25:c0:ce:76:24:
         25:a5:db:7a:34:49:10:95:3c:25:3e:60:43:3f:c2:7e:67:02:
         d1:a0:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----