Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File:                     ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier:          R95H/jMwVHLMNnDyan3sGK8ygqglSQW/Q+3+we+3UMs=
Subject key identifier:   58:9A:20:A4:3B:0A:2C:7E:D0:A5:ED:91:79:1E:7B:86:E3:69:1D:E0
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer:       /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial:       019358E547B48ABB4EF7A3A19FEE2B7C2281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number:          135F
Signing time:             Sat 23 Nov 2024 12:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:41 +0000
Files and hashes:         1: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: wi9ge45P0gsAXOFUEZPqJqqO0uQlauZj4P5LNX7zSMM=)
                          2: h2fUVc0uTggwQNtpWvNAhKf_vcc.roa (hash: orf+75UHl2iY/YBLm6vVB1Fs2+r5Fp37tfcdNlV94P0=)
                          3: kxKCxULXaJmpwU2DasODTJ_Xpik.roa (hash: pHz8U+D8pIVNPkH3yndLN4Sz2tgdp2F/zAa4sz6tgMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:47:b4:8a:bb:4e:f7:a3:a1:9f:ee:2b:7c:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
        Validity
            Not Before: Nov 23 12:00:41 2024 GMT
            Not After : Nov 24 12:00:41 2024 GMT
        Subject: CN=589a20a43b0a2c7ed0a5ed91791e7b86e3691de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:4b:5f:1b:4e:4f:0a:52:97:5c:a8:f9:46:
                    f0:a3:7e:86:62:41:b8:70:98:b1:7e:94:07:38:17:
                    9a:78:67:64:84:82:54:8f:98:9b:dd:b2:da:34:0d:
                    0c:dd:94:dd:2b:4a:87:ff:cb:71:09:8a:ed:a9:e1:
                    cf:ad:24:9c:bd:e1:8f:4e:6b:5f:e3:e7:3f:e6:30:
                    f1:49:dd:7c:f4:1d:0b:63:de:0c:0b:0a:8b:6b:4e:
                    c9:63:11:0a:eb:ec:36:56:f6:a7:60:0e:24:f0:0d:
                    13:f3:34:7b:3f:08:49:8c:8a:2b:46:a0:d9:77:78:
                    52:b9:0c:9d:e0:a7:9c:b8:5a:8f:41:78:c7:33:e6:
                    f3:b9:34:8d:a4:1e:ea:e4:70:56:9c:73:9a:db:75:
                    e4:1e:a2:d5:7c:fe:0a:16:3f:12:50:e8:6f:86:67:
                    0a:2a:3a:82:52:9d:ee:04:b6:86:db:3e:7d:f1:61:
                    77:11:24:78:2a:7b:a5:80:12:b1:ec:b4:c6:6b:f0:
                    80:a0:a7:3e:19:d6:85:e5:af:df:82:91:16:70:35:
                    fc:4e:dd:ca:37:89:23:a3:bb:82:88:80:be:4b:d2:
                    57:18:59:f2:06:cf:ad:ac:03:a9:c6:03:57:bc:03:
                    28:93:f8:9d:6f:fa:d5:84:50:9d:1e:e6:74:08:03:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:20:A4:3B:0A:2C:7E:D0:A5:ED:91:79:1E:7B:86:E3:69:1D:E0
            X509v3 Authority Key Identifier:
                keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:e9:c2:b8:50:81:38:ac:f8:84:b2:f9:af:8c:9b:4c:68:
         ca:e0:3d:ab:83:52:18:24:c3:26:87:12:c6:34:81:53:9c:d6:
         8f:b2:03:5f:f0:b2:c2:4a:4c:56:f0:53:ce:82:56:eb:82:bb:
         be:29:28:05:53:92:46:58:f3:ad:f3:5f:8d:75:58:20:5d:25:
         c8:9b:7b:e8:c6:0c:5d:bc:71:8a:33:7d:bd:eb:01:02:5e:65:
         48:ef:92:5d:48:7c:04:8a:53:87:e6:84:51:20:86:59:6a:33:
         81:11:4c:a8:13:44:71:81:68:d0:f3:78:de:d6:a9:cb:e5:17:
         d3:e4:28:29:c9:ba:ec:e9:bf:3a:58:b4:1c:df:c4:bf:fe:71:
         c9:8e:ec:5c:43:c5:5a:c3:d0:ee:37:e3:f7:28:70:1a:0e:d4:
         1e:f5:9e:b6:5a:c1:45:57:83:1f:09:2b:6b:36:2c:87:12:f9:
         81:37:dc:59:90:15:a7:f3:ae:44:a8:b7:68:11:e4:30:46:2c:
         b6:68:5f:b6:04:ef:d6:a5:00:f3:d1:e2:cd:e5:38:8f:45:e1:
         ac:1b:9d:22:a4:24:5f:f5:42:73:90:a0:2b:64:f3:6b:6c:b8:
         19:98:13:cf:e2:84:7c:4b:10:a2:18:8e:ef:b8:48:50:af:4c:
         bd:72:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----