Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          tveNqURaP0O0SfdH0gh+glhCMtbQOzqT2nbt0EcEQJA=
Subject key identifier:   E0:12:BD:23:42:1C:55:F7:4C:E1:1C:94:15:B9:58:76:E9:44:61:B5
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       01936A7DEC3D8F4383F3D605E6EC9E570B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          07FB
Signing time:             Tue 26 Nov 2024 22:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:57 +0000
Files and hashes:         1: gWXOBHvUXlSsrKQ3mJC4UfZNwFQ.roa (hash: 5xMcQHFh6hC67zriw5kaqhZA9QDV++mW1dmjsYo2sM0=)
                          2: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: Ja19fZSrRZ1k43M0gGGNUN/CtIdIsK5X6tTZh707qXU=)
                          3: zpF5Kp4VKdLaWEdEZZ1qyt_oXGQ.roa (hash: Dtm+c+uU7/4+m6dTBv7WnbSpU02cmzAxJ8K9he1sJ8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ec:3d:8f:43:83:f3:d6:05:e6:ec:9e:57:0b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Nov 26 22:00:57 2024 GMT
            Not After : Nov 27 22:00:57 2024 GMT
        Subject: CN=e012bd23421c55f74ce11c9415b95876e94461b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:b5:84:c5:02:7f:64:e6:37:9a:55:55:48:
                    de:2b:c7:aa:0d:c9:c3:49:c6:ba:6f:9f:4e:f2:c5:
                    f4:ea:f1:b4:16:79:61:d7:3d:11:f6:1c:7f:e7:48:
                    ea:63:84:1b:87:dc:69:44:d5:8d:78:cb:47:c6:a2:
                    8d:9e:29:3b:0a:8a:f7:c0:52:f0:0d:49:48:e6:b0:
                    87:9f:c0:b1:be:65:76:92:98:f9:72:ca:c7:e7:54:
                    9e:6e:c8:9e:a2:5b:5b:e5:f7:68:8b:6c:9e:a6:0d:
                    a4:48:33:0c:4e:fe:88:25:1b:b6:89:57:99:4d:0b:
                    d2:6f:e2:fa:45:a5:a0:e8:e7:f7:55:c5:f8:92:40:
                    da:36:c8:46:55:02:14:9d:9c:44:91:4e:44:73:31:
                    02:27:dd:4e:40:3b:ef:50:b6:24:6a:89:65:25:f2:
                    42:bd:b7:fb:f0:b2:f8:31:e1:bb:49:6c:f2:d2:c5:
                    bd:51:84:b9:2c:0f:54:7a:99:33:bc:da:8d:aa:4d:
                    2a:9a:96:26:c8:6b:62:12:73:14:6c:ff:e4:53:f4:
                    72:1b:e6:ac:c7:53:9e:22:8e:2d:3b:c0:e2:06:f9:
                    fa:2c:f6:55:e7:f4:ac:cd:15:1f:8d:30:96:1b:a6:
                    e6:65:85:3f:cb:dc:2e:8e:7d:9b:45:7f:c7:1d:46:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:BD:23:42:1C:55:F7:4C:E1:1C:94:15:B9:58:76:E9:44:61:B5
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:63:cb:07:8a:23:f9:97:36:9a:b7:62:fa:55:fa:41:1c:11:
         eb:98:e0:eb:ea:94:74:27:13:4f:24:d2:08:81:72:43:83:b5:
         e8:0a:0d:a6:2a:a0:d8:5b:8d:71:03:9e:4c:c5:6d:70:9a:b9:
         67:95:fc:76:e5:a5:36:3c:2c:d2:f3:3b:37:1a:04:d4:35:63:
         dd:94:0a:d9:e3:5c:0a:1d:b7:dd:49:82:46:45:41:db:ee:35:
         ce:91:05:76:3a:67:73:0d:46:69:50:87:c4:41:e1:b1:6c:16:
         bd:e9:2d:10:b1:17:9c:43:89:d0:97:f3:d1:63:58:ef:8c:03:
         49:b9:2f:b2:4d:bc:06:82:b2:24:fa:24:c6:31:88:88:de:e0:
         47:41:de:41:b1:ba:9c:3e:bd:11:d2:47:5e:cc:2d:db:2c:55:
         75:93:ec:fc:b6:fd:94:db:77:0f:09:b3:0d:c1:af:89:e7:2b:
         20:09:89:6b:ea:05:c6:11:39:7e:ad:dd:33:23:13:85:14:82:
         22:70:7f:d2:fe:8e:59:a9:0f:39:25:9d:30:36:77:f6:5c:99:
         30:06:68:8c:7d:2c:95:54:41:4a:6b:1e:fc:3c:1d:0e:62:64:
         bb:5b:71:e0:42:5a:6e:17:00:5c:ae:f4:f5:59:7c:b0:fc:7f:
         de:e8:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----