Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
File:                     GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft (raw, json)
Hash identifier:          FCHIaokOWgNA2irdDLaH4/fex7jxd0qUIYEhy8DeX5U=
Subject key identifier:   47:0A:C5:63:1E:82:5A:A0:9B:A0:9B:98:29:9E:F1:1C:A0:CB:13:16
Authority key identifier: 18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
Certificate issuer:       /CN=18c48d1b33abdead205b0a920fb333827e1ce150
Certificate serial:       019359534C88570914EB57C1E388C7F4F69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
Manifest number:          0293
Signing time:             Sat 23 Nov 2024 14:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:51 +0000
Files and hashes:         1: ARJiU5eLhDKvZnD6c0tNlltO8J4.roa (hash: PUe/EUy1001zsWktV4WDW2Q8DrsmcsYXUhQungauaeg=)
                          2: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl (hash: J1ujOrc2QPCaP142yboUr1QIODSrCh4KYE1Jn+awbtc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:4c:88:57:09:14:eb:57:c1:e3:88:c7:f4:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c48d1b33abdead205b0a920fb333827e1ce150
        Validity
            Not Before: Nov 23 14:00:51 2024 GMT
            Not After : Nov 24 14:00:51 2024 GMT
        Subject: CN=470ac5631e825aa09ba09b98299ef11ca0cb1316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:3d:c2:2f:7e:a3:88:51:a6:d1:18:fc:80:
                    86:46:67:65:57:7d:0f:23:bd:f7:fb:2b:13:0b:24:
                    d2:84:87:c1:7a:87:74:1b:2d:9f:18:4d:d8:f5:9f:
                    d6:f0:d3:0e:69:62:30:e3:3d:4a:53:b8:ad:3c:52:
                    4e:69:cd:00:95:50:f6:cf:5f:b1:b6:99:d7:30:5a:
                    59:fd:0d:a1:05:63:0d:2a:7d:d0:74:a2:74:6a:ab:
                    68:bd:0c:d0:32:8a:e1:ca:a0:2f:2f:73:62:72:1c:
                    37:00:a1:93:23:04:9c:7a:50:e5:e4:a5:32:19:c5:
                    f9:f8:53:5a:c9:1a:e1:c3:1a:c0:dc:10:0b:bc:0a:
                    7d:ee:2d:47:52:54:7c:80:ac:ac:6c:c8:f6:77:12:
                    84:4c:04:ee:c2:71:a1:f8:42:26:be:03:48:b3:70:
                    12:e0:03:c1:30:23:4d:85:49:d4:c2:70:0b:97:6a:
                    b8:5f:4a:21:c1:50:7f:31:ec:c0:f9:d3:73:5b:28:
                    ca:68:bd:2d:5c:d0:91:a7:45:d3:ce:e0:06:84:b9:
                    c5:da:10:cc:ef:8b:b3:b8:4d:4d:4c:d8:79:f2:59:
                    d6:9d:4a:68:f3:c1:57:0b:02:20:09:ba:bc:b3:8b:
                    b9:7c:64:19:cc:7e:27:8b:7f:d1:43:65:38:55:cd:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:C5:63:1E:82:5A:A0:9B:A0:9B:98:29:9E:F1:1C:A0:CB:13:16
            X509v3 Authority Key Identifier:
                keyid:18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:4d:8f:17:4d:08:d7:fb:e9:c6:85:20:31:4b:85:e2:d6:
         82:87:35:10:67:85:2a:ae:93:1a:c3:d2:34:04:e8:08:b1:65:
         dc:08:bf:4f:10:b8:97:6e:26:0d:4b:53:17:4a:23:46:e8:98:
         89:05:49:ac:01:76:a2:0e:56:d1:c1:de:20:c9:9e:3f:ce:fd:
         00:b1:f4:41:af:c9:6d:04:c4:94:8f:8f:fe:15:a1:57:ce:9a:
         da:ad:0a:e7:b2:35:f5:10:ab:98:f4:5d:f7:8a:9a:d7:2a:53:
         11:8c:30:ce:8f:bb:75:41:73:7d:ea:f1:64:d3:59:ab:44:a7:
         16:7e:0d:ba:5a:61:66:38:78:92:f5:d2:9b:7a:20:10:56:ef:
         3d:8a:33:95:82:55:72:a4:7c:49:98:d6:4d:7b:b1:38:2b:95:
         2e:82:4b:06:96:c3:7a:67:f8:0a:9a:02:e3:f5:bf:dc:5b:1b:
         c7:6a:5c:db:f1:f8:2a:71:e2:ea:a6:15:7b:24:0e:55:1a:26:
         18:25:9e:a8:3f:75:14:13:8e:fc:d6:d2:99:fa:f9:7a:39:d0:
         b1:5d:0f:3e:f2:84:cd:eb:64:2b:22:0a:0d:32:46:66:df:73:
         3c:98:d6:9a:5e:bb:6b:53:39:85:4a:43:b2:d9:5f:df:4f:65:
         07:7d:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----