Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
File:                     JPQQpKDnIUOITahEO-gpaoGimQg.mft (raw, json)
Hash identifier:          B1u6IyYxB7JKU8nCey0ZRgzJzX7KAvtlPhKonAiMNcQ=
Subject key identifier:   9D:D3:84:C6:4A:C6:A3:81:F1:26:4A:63:B5:F9:AA:76:3A:FA:DB:87
Authority key identifier: 24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
Certificate issuer:       /CN=24f410a4a0e72143884da8443be8296a81a29908
Certificate serial:       019369D920F37FDEE9CF744FC889B3D8781B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
Manifest number:          0E52
Signing time:             Tue 26 Nov 2024 19:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:57 +0000
Files and hashes:         1: JPQQpKDnIUOITahEO-gpaoGimQg.crl (hash: E5dw8B3NIVGQoe9Yke3/cdDcB5OHZpLfP/Pso2nNHJw=)
                          2: bVqzdwgN359vsNGp9yElyAFbNJ8.roa (hash: zFBDlgyLJAYJZvieTYNRUVsVC3w0XLVGlWffIogQcYc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:20:f3:7f:de:e9:cf:74:4f:c8:89:b3:d8:78:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f410a4a0e72143884da8443be8296a81a29908
        Validity
            Not Before: Nov 26 19:00:57 2024 GMT
            Not After : Nov 27 19:00:57 2024 GMT
        Subject: CN=9dd384c64ac6a381f1264a63b5f9aa763afadb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:c4:8d:69:7c:b1:39:ab:fc:94:a2:01:d4:
                    55:07:ae:9b:8a:78:8a:3f:ee:ea:28:6a:f3:cc:9b:
                    e0:0b:59:ee:e9:bd:8e:f4:32:78:8a:03:05:94:93:
                    62:eb:ff:43:c4:f1:7f:2e:8a:61:8f:14:40:36:7f:
                    25:02:92:cb:59:69:e8:98:b9:e0:d7:96:83:4d:21:
                    b1:4a:3c:91:fc:a5:87:22:e0:fe:a6:f3:c3:5a:cb:
                    80:0c:8e:0d:5d:af:fe:87:3e:42:4f:60:ce:72:f0:
                    b8:c5:a3:4f:69:40:23:50:fc:94:12:8b:85:cf:00:
                    b1:6b:b1:cf:f8:dc:15:af:dc:19:49:74:16:d5:bb:
                    19:96:b0:66:e7:bc:78:50:18:ad:a7:2a:d0:dd:ff:
                    4c:1d:52:27:4c:75:b7:f9:92:55:3d:05:8e:98:52:
                    46:ad:82:e2:c5:df:5a:46:8e:9f:62:5f:67:a0:d7:
                    63:44:0a:64:e9:a4:59:0d:76:f4:c9:4e:55:7d:3a:
                    f9:d0:86:c9:3f:c3:b3:42:07:ab:49:0c:73:60:59:
                    84:d3:1c:93:41:15:75:71:f6:84:1f:5f:03:7f:d6:
                    f3:dc:e2:fc:1c:a1:f3:55:cb:e9:08:de:6e:0d:5d:
                    b9:9c:e7:4b:75:95:d4:1e:ad:8e:57:ae:af:dc:65:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:84:C6:4A:C6:A3:81:F1:26:4A:63:B5:F9:AA:76:3A:FA:DB:87
            X509v3 Authority Key Identifier:
                keyid:24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:8e:8a:13:52:1d:93:dc:7e:8a:ff:8a:3c:36:74:01:8c:
         c7:98:ba:46:cb:d9:c7:28:ad:d7:40:e2:de:9d:99:7d:4e:55:
         72:b4:24:ab:95:fc:97:7c:48:be:8d:22:ea:0e:c0:34:51:48:
         cd:66:19:bb:d5:8b:86:8c:e9:b3:dd:11:97:db:55:9f:a3:e1:
         06:a2:0b:ee:9d:a6:b4:f0:b6:bd:76:ed:9f:a6:23:69:6a:3d:
         65:8f:f6:9d:04:b1:24:92:73:c0:b7:3b:97:ec:a8:17:16:bb:
         09:87:20:ab:86:44:b4:1f:29:b5:5b:bc:6c:fb:55:b0:0a:92:
         a5:a5:21:8b:1e:79:d0:02:5a:a2:ac:49:11:a3:66:53:22:ce:
         2b:4d:2e:a4:69:b8:de:2a:b1:ca:0d:77:66:4e:ce:69:89:0a:
         25:c0:7f:52:19:18:8c:a0:50:04:9e:6a:54:80:3d:a8:40:6d:
         32:77:a2:9e:61:91:66:81:c0:26:e8:ac:6c:d8:17:3b:e2:bb:
         53:18:28:77:49:b4:e0:88:9e:8d:b2:94:8c:fb:a2:8c:9e:37:
         c8:48:ee:12:f3:fa:f1:a3:6e:0e:2a:5e:3a:a5:ae:a7:b0:04:
         f8:2a:51:05:04:7e:92:3f:40:e4:f8:eb:30:c0:15:4c:b4:8d:
         d0:10:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----