Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File:                     3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier:          qPOPLzklmqs5IyEaLtahGWh+YH3sTBwT8AcrXLQN+ok=
Subject key identifier:   B5:E8:DD:60:06:FD:43:DB:D7:0F:77:30:55:46:22:4A:BB:64:92:D4
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer:       /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial:       0194064819B538FC404E8BDC7F520907C428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number:          0ED2
Signing time:             Fri 27 Dec 2024 04:02:55 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:55 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:55 +0000
Files and hashes:         1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: cxn8dJFw1Fjc7mGWS+dyd1ZAZFCBw0H6YXuZmFXWEDY=)
                          2: iATKWIkD06Xkwedl6oU4RGHzqmE.roa (hash: wpwO0HlDIoPqWewjFbKP5Andzy3fEZl3THlYKaSIhf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:19:b5:38:fc:40:4e:8b:dc:7f:52:09:07:c4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
        Validity
            Not Before: Dec 27 04:02:55 2024 GMT
            Not After : Dec 28 04:02:55 2024 GMT
        Subject: CN=b5e8dd6006fd43dbd70f77305546224abb6492d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:db:13:3a:a8:de:24:41:28:2e:d1:b1:35:
                    9a:e8:7f:a6:0e:33:95:89:06:03:aa:1d:16:36:3e:
                    5b:6c:9c:b4:a4:56:13:83:18:4a:eb:82:48:74:36:
                    d7:ac:51:ca:ef:40:d7:5f:0d:46:32:11:ec:c6:41:
                    26:89:86:51:33:e5:9a:a2:ab:83:b6:4c:fa:81:6a:
                    c5:ee:63:c0:6b:11:9f:80:e2:f9:51:e0:59:84:91:
                    96:12:23:36:a0:ce:2c:91:c3:9a:3f:af:84:c5:29:
                    32:cc:d3:e7:5f:80:11:15:9b:75:69:ad:97:4f:e4:
                    52:d3:3e:4f:ed:30:06:69:03:91:76:71:0a:c9:17:
                    df:60:5e:f4:de:67:42:ff:3a:27:51:e8:39:6b:2a:
                    28:b4:b8:a4:bb:d1:ad:64:81:b7:a9:c3:cd:b9:bb:
                    be:ad:9f:45:3d:27:cb:0f:28:b0:71:95:36:a8:f9:
                    bd:2c:52:53:c8:72:b6:27:70:e2:f0:34:31:4e:96:
                    3a:f1:75:01:ab:50:4a:ab:3c:c1:4a:e2:d3:38:53:
                    7c:16:9c:aa:5a:0e:e1:31:7c:9f:9b:d7:53:cc:9d:
                    b6:42:4a:2f:06:df:b2:0a:89:db:7a:d2:c0:45:e1:
                    ed:8b:d5:49:77:93:ac:0a:21:a4:1a:dc:95:db:33:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E8:DD:60:06:FD:43:DB:D7:0F:77:30:55:46:22:4A:BB:64:92:D4
            X509v3 Authority Key Identifier:
                keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:19:fd:90:39:9a:43:19:d6:76:a3:42:2f:8b:b1:ce:ac:72:
         6d:a6:16:8d:b8:5b:e5:cd:05:dc:e3:b4:b6:f9:c1:7e:55:ba:
         56:88:18:88:35:9a:b7:2f:a9:b7:ff:26:47:71:b8:61:cd:f3:
         45:4f:82:e3:83:9c:7e:be:d1:00:9b:93:7e:e2:3a:29:e8:8f:
         a2:d6:49:44:8d:e8:a3:58:91:e3:b1:88:6d:26:7c:d9:ef:90:
         73:5e:ea:72:f7:c4:2c:1e:ce:f1:fd:cd:52:d8:ea:71:ec:bd:
         e5:df:50:85:ec:a5:ea:3a:1b:37:c4:c0:06:91:1d:da:7d:02:
         e8:92:29:2b:6e:bc:6c:25:38:ee:82:32:14:d7:5f:d3:23:51:
         a9:0e:62:54:00:b5:61:d1:f9:db:74:62:01:b1:02:7c:8a:82:
         d6:4b:d2:4d:92:c0:99:5b:43:07:a4:36:bc:e4:f8:ec:13:0c:
         c4:7e:bc:b0:cf:58:b2:a1:15:4a:37:9b:ba:b9:c7:5e:fb:12:
         1c:af:1a:49:a7:1e:5a:a6:49:b5:a9:75:27:77:ed:1c:b5:b7:
         3c:03:d4:b5:74:e8:1a:26:65:eb:cc:44:a2:57:9d:5b:94:aa:
         6e:01:32:6a:d2:4c:46:a2:d9:be:9d:e5:09:a7:55:88:ab:25:
         4b:32:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----