Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
File:                     3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json)
Hash identifier:          fYTCwX18pYHkfPbxPCmOyWtEeqldjxCNTXwwu8p5US0=
Subject key identifier:   84:B4:F3:1B:4F:33:22:A0:2B:B3:21:89:F2:9D:C4:C6:1E:B0:9D:5C
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Certificate issuer:       /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial:       019369D9ED9CD0839712AD92164C5F414B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:49 +0000
Files and hashes:         1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: xmrDoaZMt4vnY0dC+TEd2faLDgK5kEcbLRije+WOGH4=)
                          2: mghO5ylhvY_gZFSL1PekcRM9WSQ.roa (hash: v2Ob6r0FMWjdDrEGgRYAWm06JcyMt9f/F5ve/gS/VCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ed:9c:d0:83:97:12:ad:92:16:4c:5f:41:4b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
        Validity
            Not Before: Nov 26 19:01:49 2024 GMT
            Not After : Nov 27 19:01:49 2024 GMT
        Subject: CN=84b4f31b4f3322a02bb32189f29dc4c61eb09d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:ea:92:16:1b:5e:60:e2:8a:6c:23:94:d1:
                    07:00:01:37:90:5a:0d:1d:28:02:4d:75:52:0b:15:
                    03:e2:9d:bb:a0:3f:32:61:8c:42:0e:60:6d:72:1c:
                    0f:8d:52:d7:85:84:d8:9b:28:da:00:d5:df:ff:90:
                    dc:dc:66:de:27:0b:76:a9:dc:3d:52:25:3b:f9:b9:
                    9f:ec:7d:01:5d:75:24:97:4c:f6:3b:78:af:a3:a8:
                    35:2d:49:f1:6a:d9:1c:23:88:9f:9a:62:ee:51:0c:
                    d3:85:15:f3:b2:78:0f:56:65:1c:6b:65:f8:bd:f0:
                    25:1e:d8:52:79:9b:c2:4a:63:bd:e6:22:08:12:87:
                    78:02:e1:aa:c4:f8:69:9a:54:cd:f9:7d:24:b0:51:
                    a7:06:1e:94:59:ab:10:a1:07:e5:36:ae:c3:51:3c:
                    9c:58:90:19:c6:8a:d3:2c:0c:63:c2:88:64:ae:41:
                    2b:e7:5e:0f:44:b9:3c:7d:b5:6c:37:ec:be:b5:88:
                    f5:8b:c0:f7:8f:76:f6:1f:93:12:1a:92:65:72:c7:
                    98:46:73:fb:1d:a0:44:a3:24:24:88:af:cb:fb:a4:
                    49:c3:87:fd:4a:4c:3b:38:30:43:01:86:b3:c3:86:
                    22:ee:72:6d:f8:a4:0f:56:a4:5e:c1:81:34:5b:3c:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B4:F3:1B:4F:33:22:A0:2B:B3:21:89:F2:9D:C4:C6:1E:B0:9D:5C
            X509v3 Authority Key Identifier:
                keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:dd:ee:83:a1:36:73:e7:8d:72:21:f3:dc:6f:91:59:58:
         3e:01:0b:4d:f7:ef:46:5e:e1:5b:49:39:4d:f3:c7:d3:a3:df:
         a7:5f:16:64:92:86:28:b1:e5:b6:0f:1d:bc:89:63:ef:53:7b:
         36:84:61:7b:f5:e4:a5:4a:ae:4a:3c:49:13:fb:1b:9a:a9:ea:
         66:f8:e7:7c:82:8e:b6:d8:4b:84:e0:84:f2:de:6e:9b:98:5a:
         56:07:ab:b7:f7:37:7a:61:0d:f7:35:a6:08:3b:b4:a6:67:06:
         64:46:73:f8:c9:a8:ea:a2:a7:85:48:88:45:5f:14:12:57:c9:
         7a:07:d0:01:17:6e:bd:39:09:49:36:60:97:82:98:73:42:74:
         b5:dc:24:10:01:3a:c5:dc:6a:17:9f:dc:f3:18:40:d7:43:da:
         f0:4f:19:d5:6a:ca:8e:40:97:ee:88:75:d3:f1:cc:46:f7:86:
         e7:f9:0c:5d:0d:d0:cb:dc:33:e8:32:55:d5:5d:d9:b2:cb:07:
         49:5c:ea:47:5c:81:07:82:53:11:d1:b7:73:d2:89:69:43:72:
         58:8e:27:e6:b7:b0:28:fa:85:9f:01:41:1b:79:b5:fc:87:6a:
         9b:97:85:d3:9f:3d:95:f0:cf:f6:ad:bc:ad:42:41:03:b1:32:
         ae:33:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----