Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File:                     8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier:          /YFolkMswbAhKA17gFfUn2YT0+Vup39WsBJbLqsb9d8=
Subject key identifier:   DE:A0:8F:47:E8:94:B1:E6:5F:C3:0E:B7:5C:CF:95:B3:CC:52:54:7A
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer:       /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial:       0194067CD8C2C0173FAED70EAA5DE714909D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number:          014A
Signing time:             Fri 27 Dec 2024 05:00:32 +0000
Manifest this update:     Fri 27 Dec 2024 05:00:32 +0000
Manifest next update:     Sat 28 Dec 2024 05:00:32 +0000
Files and hashes:         1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: P+L0dUKM6lo3zcP88ub6OUneDt7AbbJ0ywEBKLzUMsg=)
                          2: H_0l7nZQSgFuvebWYRzzLXwsx3c.roa (hash: CHRBDIFN/9WxPGjKuAcSU7xch5Ev10JC2Rds4G2quhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:7c:d8:c2:c0:17:3f:ae:d7:0e:aa:5d:e7:14:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
        Validity
            Not Before: Dec 27 05:00:32 2024 GMT
            Not After : Dec 28 05:00:32 2024 GMT
        Subject: CN=dea08f47e894b1e65fc30eb75ccf95b3cc52547a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:83:23:01:53:10:03:61:31:69:83:83:96:
                    7f:49:27:16:b0:c7:24:84:b5:98:e2:91:7d:14:7e:
                    7c:79:3d:3b:ae:5e:5a:2c:8b:98:6e:60:b2:1b:c2:
                    d3:51:5c:65:8d:f2:42:d7:8f:b4:4f:98:39:e8:fb:
                    4d:0c:62:06:11:47:28:4e:60:72:eb:be:5a:3b:75:
                    07:8e:ce:56:16:11:cb:3b:9d:76:1f:88:2c:a2:51:
                    65:36:e4:16:64:33:3c:d4:26:79:0b:3e:b9:26:79:
                    2c:35:49:82:e1:c3:f8:b7:e6:a1:5d:ba:37:53:c2:
                    97:07:b8:ef:85:46:4a:a9:36:40:27:4e:c5:9b:d6:
                    5a:f7:0a:a9:f7:f7:0a:55:f8:76:ff:06:48:9c:b7:
                    7d:4e:fa:13:fc:63:e9:cd:a0:74:3b:e8:4d:2f:92:
                    18:d2:58:6d:8c:74:b5:82:65:12:64:a2:6e:2d:be:
                    5a:d9:69:45:59:7d:76:5e:51:00:44:3c:d8:bc:c6:
                    d7:0d:a1:2d:d7:ff:07:9e:bc:52:55:1a:bb:a2:e2:
                    dd:38:a8:b0:f2:24:6a:91:9b:26:22:3c:96:17:48:
                    a9:98:9c:a3:bd:1e:fe:8e:98:d1:0f:2c:22:83:69:
                    06:5d:c6:8b:f7:cd:a7:8c:b2:71:71:d2:f0:f6:a2:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:8F:47:E8:94:B1:E6:5F:C3:0E:B7:5C:CF:95:B3:CC:52:54:7A
            X509v3 Authority Key Identifier:
                keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:fc:b1:c0:be:06:8c:d4:d1:92:29:d3:ec:c7:34:f5:90:
         81:df:94:d6:00:fb:c6:11:63:02:d3:97:dd:a0:f4:01:76:62:
         c9:b5:f4:d3:df:5b:c4:ed:40:30:34:39:17:7e:71:93:6e:66:
         8a:ef:ff:6c:c5:db:04:b1:bd:6d:b7:63:05:17:3d:fb:30:c8:
         89:0d:6e:5b:b9:16:31:9b:6e:20:31:cd:89:4f:55:c1:08:9e:
         ad:af:ad:d4:87:4a:46:76:8b:50:7b:5d:c3:c2:70:01:51:60:
         86:47:d6:25:57:9d:97:25:f4:01:ad:d0:bb:c1:9c:9a:f9:d1:
         fc:e7:8c:4e:1f:c6:6e:aa:e9:cb:4b:93:6e:fe:86:33:ce:44:
         05:16:f7:91:d9:c6:d7:c8:3e:a8:1b:e8:90:46:92:69:ed:1e:
         3f:f6:e6:fc:a3:d2:bd:cd:79:62:f2:ce:28:74:8c:0d:c5:5a:
         65:16:c5:75:f2:14:c6:d7:4e:3e:a5:81:3f:04:25:4d:9b:83:
         31:7c:ad:ab:fb:c4:52:60:1f:f6:a3:dc:1d:0b:da:b3:1e:f2:
         73:0d:18:37:88:5d:8c:ea:8a:81:fc:bc:a2:83:04:27:3c:59:
         10:9f:db:05:d8:da:54:82:7e:01:d7:5f:79:2b:00:c3:48:bd:
         b8:c3:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----