Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
File:                     fUOw7HmVHV1VgBM-UympDy_uHFs.mft (raw, json)
Hash identifier:          /M0XPhwQsaOyv9hbqqy3JTCNLF1/l1Gvl9BSaocuQFw=
Subject key identifier:   5D:75:C2:4A:7D:50:92:F9:70:D1:EF:12:3C:68:94:17:0E:40:9F:5D
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Certificate issuer:       /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial:       01935A67617210785EF0224850AEB8A2C3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
Manifest number:          137C
Signing time:             Sat 23 Nov 2024 19:02:24 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:24 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:24 +0000
Files and hashes:         1: 9_oXzXkvk6JM4XAyyc15CXyefw8.roa (hash: h8/llCu6axcElkIH+lBi/iTIE3nU0MthB+9nyy2Gp1g=)
                          2: fUOw7HmVHV1VgBM-UympDy_uHFs.crl (hash: M+t/CqREQHg2s5YvcV2yhru7zQDkg4siPP1JTJfrDH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:61:72:10:78:5e:f0:22:48:50:ae:b8:a2:c3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
        Validity
            Not Before: Nov 23 19:02:24 2024 GMT
            Not After : Nov 24 19:02:24 2024 GMT
        Subject: CN=5d75c24a7d5092f970d1ef123c6894170e409f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:0f:c7:58:a1:1b:7d:ee:38:68:d1:8f:49:
                    67:50:a5:46:90:25:3a:8b:07:54:db:7f:df:0d:a8:
                    3d:b5:a9:e7:79:3b:af:1e:7a:75:17:c6:28:50:a3:
                    66:74:b8:8d:42:98:2c:ff:2b:bd:9c:f7:fb:8e:57:
                    94:b6:f7:cb:8c:3b:95:13:e2:55:c6:63:da:b1:66:
                    61:24:e2:e7:c7:f4:1d:47:36:1a:60:f6:20:35:7c:
                    4b:7e:d8:fe:1a:b3:30:8e:d3:ef:ba:cb:9d:e3:af:
                    de:93:fa:77:ac:5d:c6:36:53:ff:db:52:6a:76:a9:
                    44:be:d5:07:6b:a1:05:cf:ca:c8:7a:92:25:7d:24:
                    e9:a2:7d:19:7f:da:a7:4c:54:48:6c:21:6b:9d:1e:
                    e2:ba:f4:17:c4:6e:dd:c2:c1:67:eb:2c:bf:87:eb:
                    dc:1c:66:7f:a1:df:14:48:c4:af:25:b1:05:34:32:
                    ad:9e:ec:cc:37:65:cb:c2:49:91:64:8f:90:fb:b3:
                    d1:f1:91:5c:84:5b:c8:7e:1a:41:a6:57:83:60:7e:
                    a5:34:ea:54:7e:6a:ef:fa:5c:c7:45:0b:1c:cc:5d:
                    d7:b6:86:24:b5:4c:95:3c:f6:ff:85:41:74:2a:88:
                    00:fa:75:c9:64:14:e2:31:41:29:c0:83:b1:b2:e0:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:C2:4A:7D:50:92:F9:70:D1:EF:12:3C:68:94:17:0E:40:9F:5D
            X509v3 Authority Key Identifier:
                keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:81:d7:57:54:68:78:2a:4c:47:bb:5a:f5:13:7d:b7:d6:
         99:23:ad:f3:0a:90:ad:a0:72:07:b2:fe:6a:1a:08:68:09:b1:
         a1:c9:65:1d:c4:ae:55:e9:78:fb:b6:13:20:70:3e:9c:3a:3e:
         3c:36:0c:65:37:23:ff:19:31:45:bf:ae:75:9c:12:dd:2b:ab:
         7b:6c:fd:97:40:44:b7:ab:a1:db:c9:52:b9:8a:89:48:5e:32:
         36:00:ab:b8:84:24:83:68:71:11:8a:08:d1:a6:c3:e3:7e:78:
         af:10:c6:8c:c8:cc:30:80:69:e0:29:18:86:09:fd:97:01:86:
         b6:b1:31:47:2a:2d:f2:7c:c8:55:ec:9e:45:bd:bf:15:6a:e0:
         06:3b:5a:00:27:c7:98:c0:a1:cb:c9:17:65:24:75:46:9d:29:
         79:a0:9f:7d:67:83:6e:86:26:26:6d:d3:26:63:80:80:62:f0:
         78:bb:b1:f9:5b:b6:5d:e9:a8:a2:e7:b9:47:c5:99:ac:2b:89:
         d6:66:52:60:71:13:65:c8:cd:e3:b5:10:8b:a4:4a:fa:82:cb:
         e8:3c:55:35:b2:99:70:1b:50:d4:81:66:a7:bb:f7:32:23:ee:
         02:fd:dd:b8:75:13:af:06:d2:97:5b:0d:3a:62:93:38:e8:fe:
         26:7c:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----