Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File:                     2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier:          +Grykw2jtNeHOSY725qrZ0+E8ipM9/XCmBjmEKfZZgk=
Subject key identifier:   98:9D:94:E1:2A:51:5E:C7:21:3F:7A:54:34:91:2D:98:78:AC:C1:85
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer:       /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial:       0193579BE8F9ADD21D822BECA42BDC14E5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number:          0E62
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 9Egj0vrVid9jp470/fnU9veJoGM/1SmfgTEiWoTOY8c=)
                          2: Ys5ZcIWNUfItTusOPrfvQd8ap0g.roa (hash: 38d64IY2ChVXjGOP4GDjbOrJeZmqfSM1GL3TXxbSeec=)
                          3: xLnSF2b56sdGvEy1nIz5m5r51yI.roa (hash: qVK23ObsKI6e1rTm6jUAy0nD1WL/SdzGZ0NJ7KNEkbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e8:f9:ad:d2:1d:82:2b:ec:a4:2b:dc:14:e5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=989d94e12a515ec7213f7a5434912d9878acc185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:e4:09:ad:fe:02:76:43:af:f7:13:16:19:
                    c9:bc:c6:c8:ba:06:44:e2:50:e3:e5:f7:d5:9f:aa:
                    66:7d:80:9e:f7:9e:86:45:61:6f:b6:d3:12:ff:5c:
                    67:f7:62:ad:f8:1a:87:30:a8:7f:20:1b:9b:69:cf:
                    e6:fc:c0:f7:08:4f:04:2f:af:10:e7:80:53:3a:8c:
                    04:7e:ea:79:0d:34:6d:f6:4b:c3:ec:30:6f:e4:2b:
                    e9:56:d6:3c:95:89:4e:b2:88:5c:33:d1:68:c8:40:
                    06:49:d6:ea:dd:cf:0f:d5:c2:a0:12:aa:1f:1f:9c:
                    89:19:43:e5:4e:8e:5b:c1:55:5f:7f:9d:a9:49:4d:
                    39:93:75:55:3b:c8:8f:de:1e:ec:09:3f:c5:3e:14:
                    c7:f9:d3:7c:26:37:06:d9:8f:8f:9d:94:fe:74:51:
                    ac:52:52:37:56:fa:b0:71:14:bd:c2:1a:42:02:56:
                    a7:e6:23:2f:9b:60:48:6d:42:62:5d:04:83:e0:ee:
                    e3:68:0b:48:82:9d:0e:ed:47:fd:a7:06:ed:9d:f5:
                    20:bb:56:6a:b6:f6:a8:1a:34:63:ca:42:52:c7:8c:
                    e4:69:ab:72:56:4c:7a:c9:4e:95:45:7d:6c:9e:83:
                    38:b7:92:f1:d3:a7:87:ef:cb:84:5d:13:72:d2:13:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9D:94:E1:2A:51:5E:C7:21:3F:7A:54:34:91:2D:98:78:AC:C1:85
            X509v3 Authority Key Identifier:
                keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:c6:1b:9f:21:a0:14:15:b8:0b:ac:3b:33:49:8e:3e:69:
         d6:0e:de:db:21:86:5d:b8:72:4e:e8:e0:64:08:a5:ae:c0:0e:
         86:59:f5:f3:51:d0:79:37:2e:b4:56:3d:17:5f:cf:38:bf:af:
         f3:c5:0f:68:f6:72:09:0f:c6:b3:1a:f1:af:f4:07:71:9c:e7:
         fc:8f:91:e8:ee:e8:3c:aa:94:27:db:36:ff:07:39:e0:5d:f8:
         4c:de:1b:17:8d:0e:33:c9:60:1f:df:ae:6a:0f:68:b6:68:57:
         d7:f5:02:8d:69:ce:8f:74:67:28:8d:12:78:a4:e5:43:9e:f5:
         83:c6:5c:0a:e7:01:9b:83:44:4f:dd:01:f2:18:65:3a:e2:0a:
         35:51:a6:c4:3b:7d:3d:40:cc:57:10:8e:76:ac:2a:6d:4f:84:
         8a:28:4e:5b:ba:d2:4a:d8:5c:c7:f8:fc:1e:aa:04:23:60:97:
         98:e7:7b:39:40:66:1c:d5:e1:1e:db:0e:eb:85:5b:a7:84:4e:
         6b:b0:c0:cb:d1:c3:da:60:1b:54:69:f0:c7:d8:41:fe:86:82:
         f3:d5:7b:ff:d5:0d:a2:a4:73:f2:36:df:59:1d:8a:04:a3:e7:
         84:65:bf:5e:62:d8:fc:24:34:78:b9:aa:fc:f2:f5:c9:73:da:
         64:c5:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----