Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          I4CI7lWQ30O9K46aqI1Mh58sjC4reHHiuyVQ+WG7Jcg=
Subject key identifier:   7C:0E:4E:4F:E8:6B:B9:A6:FF:0B:C3:D1:DD:50:3E:BB:D5:C1:95:1F
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       01935A6617D9F36712A16409C2A9E0C4D30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          0F16
Signing time:             Sat 23 Nov 2024 19:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:00 +0000
Files and hashes:         1: obBE1iEcSoN0jyqaLFcOElOHPKo.roa (hash: FQKVFtHKjJwJLhwwBumbkysX2tVuC3A8rzbcfYkoEPc=)
                          2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: SjeJT3t/WGMCE0vA0dJN2YIKe1O4/ifER+GHQgHmaI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:17:d9:f3:67:12:a1:64:09:c2:a9:e0:c4:d3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Nov 23 19:01:00 2024 GMT
            Not After : Nov 24 19:01:00 2024 GMT
        Subject: CN=7c0e4e4fe86bb9a6ff0bc3d1dd503ebbd5c1951f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:8f:e0:f9:a7:b2:74:0f:a7:e6:ae:18:78:
                    ff:f3:e5:15:0b:4f:bc:b6:d7:12:5b:31:f4:a6:ab:
                    3c:f7:34:7c:de:b7:12:3e:3d:e9:3f:7b:32:ad:fb:
                    5f:b8:23:4e:43:dd:43:90:c8:13:4f:6d:ad:f2:f0:
                    00:5b:a3:a6:df:e6:cd:e3:ab:95:7d:f6:33:75:9d:
                    c7:34:f9:62:c9:41:99:72:7e:04:37:e1:76:dd:20:
                    a9:38:37:78:90:c1:0b:23:bd:3e:6d:e7:17:56:3d:
                    8c:d3:61:6e:d3:69:b1:8b:24:31:e6:10:38:dd:e8:
                    a0:ce:61:8a:f3:a2:b9:d7:ec:2f:f2:ae:16:bc:b8:
                    46:5f:13:20:89:ea:b2:70:e7:37:40:9b:73:db:cf:
                    e3:bd:b8:6e:23:a2:d9:5f:24:09:6e:08:7f:24:6c:
                    a4:91:7a:65:a8:e0:32:3b:1e:ed:99:37:9e:a2:d1:
                    01:c9:4d:48:56:d0:ab:c0:df:68:37:87:30:cb:10:
                    23:b4:d8:9c:48:17:79:0a:21:d5:62:56:e6:a3:36:
                    36:d4:98:25:f4:f0:f6:db:44:3e:bd:07:65:02:db:
                    43:4b:90:5f:20:33:de:7d:b5:9b:f5:20:4a:9d:d9:
                    59:f3:e9:36:f3:82:4a:54:9b:0c:df:bd:f9:42:1a:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:4E:4F:E8:6B:B9:A6:FF:0B:C3:D1:DD:50:3E:BB:D5:C1:95:1F
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:16:16:3a:5f:18:6a:ae:2e:19:30:cf:77:bf:f2:69:f7:
         e2:c1:60:30:86:4c:9e:38:fc:57:27:1f:a2:52:9c:9d:68:11:
         7a:6e:ae:a2:ae:45:d4:8c:25:0f:3e:12:89:a2:29:80:6d:41:
         98:17:8c:ab:7b:71:83:6b:6b:a8:d0:fa:2a:e5:3b:98:04:be:
         b4:d4:ac:e6:3c:e0:9f:41:a4:4e:6e:5e:11:a3:d8:e3:d1:5f:
         a6:cd:d9:60:6f:2e:ca:18:71:72:e8:0a:f7:d8:de:ab:13:7f:
         8e:8e:ff:7a:d2:0b:61:04:79:af:d7:ee:12:a8:bc:44:50:6b:
         85:bf:73:b0:dd:bf:63:c8:e3:4c:3e:e9:c8:b6:e7:42:1f:9c:
         ba:6f:47:e0:1d:c4:d4:65:4c:b1:4e:4a:b0:b7:10:2d:3d:71:
         73:ad:39:10:6c:8a:57:29:cc:6d:d4:4e:61:ad:3d:2f:15:c4:
         14:80:c9:d0:ef:1a:a2:e8:90:cf:81:58:f1:df:93:c6:4c:03:
         67:d6:0b:6f:e6:00:8d:80:0d:34:b3:db:f1:6f:bc:24:53:eb:
         42:92:df:9d:4c:90:96:51:1f:24:2b:21:78:0d:3d:d8:3e:25:
         5b:84:4d:72:97:2d:5c:21:1f:fe:d7:62:a0:96:35:42:1f:b7:
         ee:ef:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----