Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          afcqlGt0Ix0un+UddHNA7KXG4u37wfUagkuZ48bOLXQ=
Subject key identifier:   AA:96:D9:50:44:B3:40:A6:2A:61:28:49:49:B0:43:2E:16:9C:5A:A7
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       019352ADAA94E0AA444676A21B911058F20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 07:02:13 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:13 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:13 +0000
Files and hashes:         1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: 8pO7Ot/Y/IT6rPkQOP0GQn2yXTEexb3R4MlDHIvlN88=)
                          2: GhDBeFsV0o6Q5aVQohlMSB4QT1g.roa (hash: UYV/suRHLLDsYPK9PyGH4BBnn3WpwoULemZ5uunPcns=)
                          3: T3OmX6fYRixijJVDFCXqiwRayg4.roa (hash: qR86wt86guqDozQ+i9IvQs4Js9DTPvG+6whxTcH5qcI=)
                          4: TSBVqN-q4gFL2xnBzcLoNSaEF14.roa (hash: aN3PElmz6uoj7dhdKoLePOiU/o2fDJBnIhp+cy+lO/M=)
                          5: d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa (hash: Z6wqQX1HkGABN23lXsqtSdSrxhePPN2WOsymZTeTm2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:aa:94:e0:aa:44:46:76:a2:1b:91:10:58:f2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Nov 22 07:02:13 2024 GMT
            Not After : Nov 23 07:02:13 2024 GMT
        Subject: CN=aa96d95044b340a62a61284949b0432e169c5aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:7e:99:a2:83:6b:5d:01:0a:8e:03:fe:49:
                    f5:31:e4:7e:ed:02:97:52:8d:75:df:85:32:33:21:
                    05:fa:9f:d8:8a:a6:37:df:ed:a2:23:ab:9b:d2:48:
                    6f:a0:30:ab:9e:1b:95:db:1b:26:5b:d4:b4:c3:8f:
                    52:19:3f:fa:82:eb:a7:64:fd:7d:d6:54:77:d2:ab:
                    5d:ce:81:02:1c:33:8d:33:e3:b1:60:6a:30:f0:84:
                    96:7f:f4:fc:49:58:bc:0d:54:1d:21:28:ed:c8:92:
                    ea:8c:36:23:1d:0b:77:85:c5:f6:fa:1d:ee:37:c1:
                    69:3b:3e:2d:5b:09:22:e7:75:f6:75:4d:99:23:bb:
                    36:0c:9a:c4:da:70:7b:2a:6e:0b:ed:ee:eb:38:4b:
                    6c:8f:76:ed:e7:5e:a8:79:3d:7b:ca:c3:74:3b:52:
                    1a:4a:d0:8b:7a:d4:3b:5a:66:56:4e:91:1f:41:b2:
                    d0:4f:fc:e2:a5:76:a2:9b:67:ad:bc:e6:c0:c5:e3:
                    ab:fa:3f:fc:ef:c5:f0:53:1d:1a:da:5a:35:b7:76:
                    d0:3f:37:f4:57:18:b0:ca:c8:0b:02:51:7e:59:9d:
                    17:2c:ee:26:ce:09:4f:6b:3b:b6:31:44:39:ab:fb:
                    48:1d:3c:4e:94:e5:71:71:25:2b:59:71:93:a1:66:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:D9:50:44:B3:40:A6:2A:61:28:49:49:B0:43:2E:16:9C:5A:A7
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:64:ac:c6:74:03:e7:17:07:83:9b:3e:ab:ec:47:d5:7d:0c:
         04:8e:c4:f8:10:a1:5a:16:f8:b1:3e:11:82:7c:2b:23:dc:ae:
         9e:88:8c:76:d6:08:01:70:c0:9f:73:56:1f:cb:00:cb:85:93:
         fc:ac:e4:5b:a6:d5:b3:39:e2:bc:d1:c8:2b:21:d6:80:30:91:
         0d:ac:fb:1e:d0:61:26:04:fc:2c:5a:03:ea:97:93:fe:fc:ed:
         7e:38:5a:65:f0:1e:c3:b2:07:1b:b7:76:f2:55:c8:a0:1f:a9:
         b5:51:79:76:98:2b:b0:e6:93:9b:49:a4:e5:8b:59:1c:d0:9b:
         59:6e:3d:e1:74:e8:14:6d:63:57:b4:4f:9c:ef:4b:33:8a:9f:
         8a:30:ff:fb:36:61:60:c9:56:50:fe:bd:86:4e:ba:b4:66:ab:
         22:ed:f5:42:46:4d:b8:e8:c3:9d:58:e9:bb:58:39:73:65:e5:
         02:a1:36:dc:6b:e0:b0:70:86:ac:66:7e:42:4b:4b:d1:da:3a:
         cf:22:dd:a3:ba:f8:6a:0e:3b:fd:3c:ce:e2:d7:00:6e:cb:b8:
         d9:a7:e1:64:9b:42:a8:42:3b:8e:ae:16:6a:c4:a8:b1:5e:d4:
         33:b2:61:d2:7d:a9:e3:3f:b8:25:51:9a:ea:81:90:48:c9:d0:
         bd:b7:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----