Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          C0W08ZVXmPz4iaHT35QnQFgXHEF/MzUrEJLE84wp7P0=
Subject key identifier:   54:37:C2:9C:12:7B:5A:CC:7C:D6:3F:B6:D2:0A:2A:F1:63:7F:4A:61
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019356F726AEA7425376E7B030704BC2DD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:58 +0000
Files and hashes:         1: 5WvYUS894izAN50hHLGi8kPCQjA.roa (hash: hZN5WK9oYtDLbukBGmpw1FHc4eYY3VNcUF3feM+wI6s=)
                          2: EgbJlEuwDewS8yuD3ytBP3XJBKA.roa (hash: SFtJlbIEJSOVsRnZOMjV3yv9b83dFRmVHNG+05M7Z3w=)
                          3: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: DOGPCnNYO48mVhuLljVB5NR+4g00SO9zgoBqgnthtIM=)
                          4: oeb9UBNR9XB41PZS5De6AK2-ch4.roa (hash: yvRTUZmjA37axeac03/0cLnrIOrYbuj3vfuCbXulDME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:26:ae:a7:42:53:76:e7:b0:30:70:4b:c2:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Nov 23 03:00:58 2024 GMT
            Not After : Nov 24 03:00:58 2024 GMT
        Subject: CN=5437c29c127b5acc7cd63fb6d20a2af1637f4a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:68:c9:34:27:30:83:a1:95:74:8f:c1:6a:
                    e9:fa:7b:0c:e2:17:8a:eb:68:65:2e:7b:9e:64:38:
                    fa:43:24:da:fa:07:4e:c3:9d:c8:47:ca:63:99:5a:
                    db:e7:44:9c:f4:cf:03:3c:8a:65:7d:13:d9:98:7b:
                    e7:11:73:98:47:0d:8d:95:d6:f7:c3:4d:b7:13:4e:
                    69:da:5c:6f:1c:98:e4:ff:00:bf:c9:2f:e3:01:a4:
                    12:c3:29:ae:8f:21:40:07:3a:b8:47:87:2d:f1:6e:
                    93:38:30:26:bc:3d:72:5b:64:b9:ab:7c:0a:50:20:
                    56:96:bc:7a:27:44:58:bb:86:e0:74:04:62:23:2b:
                    40:6e:10:23:6d:71:ca:c0:0c:09:30:75:c8:20:62:
                    62:e1:3d:8b:5b:7c:ae:5a:f4:3e:ce:52:f4:73:a8:
                    bb:66:aa:ad:ac:9f:96:fc:e9:e7:47:5e:d4:5f:59:
                    fc:15:36:98:e7:80:a0:4f:f2:5d:24:52:a4:f7:94:
                    df:7b:2d:8b:2d:22:6c:85:a2:f3:4a:e8:31:e7:96:
                    64:21:25:df:b5:4b:7f:7d:42:c9:c6:af:1e:ec:20:
                    61:6f:71:c6:19:0e:4d:77:d5:9a:ab:b4:82:c2:8d:
                    bb:13:9a:4a:e0:b0:e1:8e:24:3f:c3:f8:6e:22:97:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:C2:9C:12:7B:5A:CC:7C:D6:3F:B6:D2:0A:2A:F1:63:7F:4A:61
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:04:bf:ae:83:cb:3b:eb:95:73:9d:79:84:12:2f:50:d6:83:
         b2:8f:e5:48:6d:d6:81:c3:d4:77:6c:3c:11:0b:2e:f4:2d:7c:
         55:ac:33:ae:06:1e:7c:2a:6b:34:5f:38:9e:88:1c:41:38:f1:
         40:01:ad:ec:fd:f7:31:6a:19:8b:50:20:62:33:f7:6b:9e:b9:
         71:e1:cb:25:8f:8e:74:00:7b:a9:19:97:ff:7e:5e:53:f2:8c:
         cd:2d:b8:0a:92:77:ec:f0:33:f2:9c:60:92:d8:47:83:ef:a3:
         a1:2c:b4:6c:2d:ea:69:4e:f8:63:14:fe:5f:60:fe:30:f7:52:
         5c:8d:41:0c:e1:7b:30:b8:f8:8f:e8:5e:96:f5:02:68:02:ed:
         b6:ab:24:d7:69:a9:03:78:ea:c2:48:73:ff:af:05:3e:2e:db:
         c3:67:c3:c2:a2:e6:71:59:66:b8:6b:b3:23:e4:f0:ee:80:44:
         6b:fe:30:50:2a:b4:97:c1:d4:39:a6:ff:54:f2:60:34:b3:28:
         1a:d2:b3:05:95:2e:16:fe:35:6b:d9:ad:04:8b:ed:49:0e:12:
         85:85:32:af:77:0b:5d:1c:64:b9:2e:59:7d:09:cc:82:0b:14:
         66:fd:d4:b5:08:f8:bb:71:fd:56:4c:c8:54:43:9d:57:9c:33:
         cb:c7:80:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----