Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File:                     fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier:          MKoeCJa3e8r5yD9CfUDApujwZAZnAFFE1NjcXXorTMc=
Subject key identifier:   CC:31:ED:89:7D:4F:76:30:A7:F1:DD:E9:FA:82:AB:75:1A:81:08:E6
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer:       /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial:       019359C0B005929B8BDAD11431F5683C3D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number:          1148
Signing time:             Sat 23 Nov 2024 16:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:20 +0000
Files and hashes:         1: GPVQKiv2kfwlhUy1TzF5EG4QNeE.roa (hash: TKvwLPVWyOOSs37hoySa0NtV0RTszkfh655OBWKFDSo=)
                          2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: /ZOnuOX/ItkT+Lc6hQgKYgIqZNN8OrCrpOc1WEKhVFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:b0:05:92:9b:8b:da:d1:14:31:f5:68:3c:3d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
        Validity
            Not Before: Nov 23 16:00:20 2024 GMT
            Not After : Nov 24 16:00:20 2024 GMT
        Subject: CN=cc31ed897d4f7630a7f1dde9fa82ab751a8108e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:7b:b2:c6:2e:45:f5:54:9d:7d:ba:e8:57:
                    26:14:d6:ab:d0:16:70:d1:ce:ce:b3:f2:1a:9d:89:
                    a5:1b:e6:80:60:02:20:17:36:28:bf:76:ff:b8:77:
                    e8:23:f5:32:39:af:4e:7f:71:b4:6b:e5:87:b8:5d:
                    3a:ff:64:ba:f5:7f:f1:ea:c5:e2:5a:55:da:d5:7e:
                    53:79:9a:4a:aa:b0:c7:e9:7d:59:ca:09:d4:77:1a:
                    c9:9b:98:26:8a:45:a3:d3:b0:0e:44:ce:44:71:19:
                    34:bd:4b:8f:3a:8e:fb:44:c8:f7:30:4f:a4:31:ca:
                    60:7c:63:5a:27:e9:39:98:5d:4d:da:75:71:f2:a3:
                    96:30:69:89:d1:c5:76:81:7a:0c:35:9c:93:49:67:
                    4c:80:28:ff:b0:c4:0c:1f:91:46:b8:25:9a:7f:f4:
                    d6:c9:50:b0:9f:db:c3:31:52:a7:d2:88:d9:5c:55:
                    3a:46:fe:61:b9:c1:e8:e4:95:75:8c:7b:b5:ad:a0:
                    6d:87:16:95:b1:3e:90:36:b1:6b:53:7c:58:eb:15:
                    9c:e2:41:76:fa:5b:6a:b4:72:c4:bb:ba:ea:0d:73:
                    fa:a9:77:67:f6:86:14:b0:06:2a:c6:92:71:2c:8c:
                    18:4d:35:55:b6:5c:9c:6f:30:97:55:1c:ba:1d:7d:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:ED:89:7D:4F:76:30:A7:F1:DD:E9:FA:82:AB:75:1A:81:08:E6
            X509v3 Authority Key Identifier:
                keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:61:60:08:ba:6d:cd:8e:11:e6:f7:ee:d4:7f:3b:f7:58:95:
         8b:a0:64:ba:d9:2e:cc:57:75:87:28:a4:90:d2:63:97:9f:1f:
         22:d4:ed:d4:75:19:9d:5a:3b:ba:78:d5:7e:74:64:36:16:3e:
         25:8b:db:32:28:06:fb:84:67:11:4e:8a:54:23:1e:ff:96:13:
         af:ef:b1:c6:ca:8f:32:6d:20:e1:38:7a:e7:ed:3c:6b:54:e7:
         e1:ad:11:2f:e8:76:59:fa:47:c2:36:4a:54:60:dd:bb:d9:6a:
         9e:a7:81:d3:b8:76:e7:8e:fb:08:db:d0:a2:e6:af:79:cf:4d:
         49:6a:f1:ce:e6:de:1b:ea:94:81:b7:1d:b9:33:04:c9:74:53:
         ca:75:f6:c3:9e:1a:69:26:28:4d:01:89:fc:3b:9d:51:93:2d:
         7f:42:be:53:b7:59:22:77:96:5a:fd:4e:d7:71:23:b5:53:62:
         58:3d:ea:48:e2:d7:6c:fe:41:3e:fa:51:ea:fd:4b:09:c9:59:
         ae:7f:43:8e:84:4b:3a:ca:a7:6f:42:dd:f5:9e:b0:fc:88:91:
         76:c9:21:08:b3:2e:d6:43:69:d0:74:a7:f6:9f:6a:29:c9:55:
         d2:2c:e2:1c:c6:ea:67:7e:20:8a:5a:cd:b2:90:11:bb:cd:dc:
         bf:2e:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----