Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File:                     y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier:          NaP67DYj+aDkwmat4sYRAxLa42pZ02594Vg3b4wQJQI=
Subject key identifier:   86:F4:A9:37:99:58:F8:DD:43:5D:83:AC:D2:BD:52:38:9F:3A:37:22
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer:       /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial:       019352ACD42CBA1C95EB79AB04527BF4F617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number:          136B
Signing time:             Fri 22 Nov 2024 07:01:18 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:18 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:18 +0000
Files and hashes:         1: e5yzV14srFuMQBfDsGMAopQJ9D8.roa (hash: tOv+VMq7EQXi9YBTq0jYFyZ82xca/Pk86C81PHEgKv4=)
                          2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: qp7xsERjuPVXc6JEJrK0GBYQCxkuju3kNRXejqkpuR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:d4:2c:ba:1c:95:eb:79:ab:04:52:7b:f4:f6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
        Validity
            Not Before: Nov 22 07:01:18 2024 GMT
            Not After : Nov 23 07:01:18 2024 GMT
        Subject: CN=86f4a9379958f8dd435d83acd2bd52389f3a3722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:01:3c:23:e0:fa:78:b8:9e:81:8c:c8:ff:
                    e8:13:e8:4c:46:e5:d9:07:87:0e:d0:c6:4a:4b:f6:
                    dd:89:11:e7:b4:de:19:4a:37:83:cf:3a:cd:ba:eb:
                    86:58:b3:5c:07:8b:61:01:a4:3f:2a:5b:24:82:99:
                    cf:a7:8a:24:2e:d3:aa:32:e4:f9:0a:fb:7f:1b:ef:
                    e8:be:d4:1c:86:30:1c:ce:5a:79:51:da:56:f0:bd:
                    e0:75:ee:92:bd:40:9e:98:63:99:31:9a:e8:fd:a4:
                    42:e1:dc:92:e0:7a:12:99:45:6c:18:57:f2:48:c2:
                    a4:46:5c:c1:5f:38:d3:fd:51:bc:10:97:57:51:51:
                    9f:f7:d5:1f:d9:e7:cc:c7:69:7a:81:cd:86:90:ad:
                    03:26:5f:09:a7:9f:a4:39:e7:11:30:1e:1c:2e:f2:
                    b4:15:ff:65:02:ca:35:25:30:1f:a0:ed:25:14:f6:
                    48:93:65:fe:40:a8:28:ba:08:b3:84:18:e8:35:e7:
                    89:a4:de:61:ba:76:17:35:7a:3b:73:ed:ea:73:f4:
                    a9:ad:b2:f9:38:de:79:74:d1:13:c2:35:1b:1d:06:
                    1d:c6:12:40:27:a6:31:b9:20:b2:2a:df:6f:95:4e:
                    7c:2f:96:fe:1f:e0:8f:6d:a5:7e:51:f8:49:7e:cc:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:A9:37:99:58:F8:DD:43:5D:83:AC:D2:BD:52:38:9F:3A:37:22
            X509v3 Authority Key Identifier:
                keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:2a:68:01:7d:86:4f:a7:9d:c8:cf:64:ca:4d:7c:d0:97:
         c0:3f:84:76:e7:a5:d5:1c:07:93:cb:57:d5:64:8a:84:d1:9e:
         ca:13:3e:3d:ff:35:8b:1f:4d:74:cd:94:f3:9c:36:6a:52:14:
         59:3e:2a:08:50:05:84:94:98:a2:1e:e5:81:ab:85:f2:0f:34:
         50:5c:9d:b2:72:c1:47:1b:b4:31:c5:24:6f:a3:87:cc:f6:60:
         85:b0:e8:b9:60:8e:d1:8e:1e:63:70:47:7d:92:bc:7e:53:a1:
         19:e1:39:15:4b:7e:49:f1:9b:8b:79:03:6c:85:82:63:84:18:
         d6:23:1a:37:09:d8:e5:55:c2:89:3a:fc:ed:1c:4d:53:50:c3:
         b5:16:3a:29:2a:c3:d7:cb:db:59:64:a9:5a:ae:53:e7:17:8e:
         18:4f:19:79:53:a9:66:4c:88:23:da:87:b3:2a:de:d5:71:1c:
         83:34:1e:9b:1f:4e:b8:0d:d2:e3:e3:55:7f:00:84:56:5c:4a:
         f1:09:6f:f9:d2:75:72:bf:6b:99:79:d7:ba:21:a5:43:af:51:
         40:43:74:b0:84:9d:ae:60:de:32:c0:f2:5c:43:2f:16:cb:ca:
         0a:fb:98:54:4c:ac:2c:7f:b8:cd:3a:39:e1:53:13:d9:a0:88:
         1c:a4:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----