Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File:                     bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier:          xWKcXWUpelmr5H8FDmIqb1t+nqD/6Z08a2EfLKDtNzg=
Subject key identifier:   87:70:D9:05:2E:F8:10:69:E3:BF:62:CF:1E:33:0F:2E:78:92:7F:24
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       01936BFDD812B4887A3C38A81C6711CB5FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number:          12E2
Signing time:             Wed 27 Nov 2024 05:00:18 +0000
Manifest this update:     Wed 27 Nov 2024 05:00:18 +0000
Manifest next update:     Thu 28 Nov 2024 05:00:18 +0000
Files and hashes:         1: AlvMn_yPKgvyROwezvyWtxIK-kk.roa (hash: Iruzz+Ph8s6kqnhbf2bOn6KXM2zHb/ZcMBEYDYbuyfQ=)
                          2: Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa (hash: fMegt5QCb6OP2xTFWguBMuvIS0HfhD1tR6kLUdW+ADQ=)
                          3: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: E/a5GE2gMGjFYw4CP35NXpVJlfuTRnijhFGLIx6zS1k=)
                          4: xPlhtt53GhDIVXeCJFWJ_KduDAo.roa (hash: ioYqW83JnB7ILtcNCTe5GrwzojCFdv5UCVxHiJsrD2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:fd:d8:12:b4:88:7a:3c:38:a8:1c:67:11:cb:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: Nov 27 05:00:18 2024 GMT
            Not After : Nov 28 05:00:18 2024 GMT
        Subject: CN=8770d9052ef81069e3bf62cf1e330f2e78927f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:1f:3c:dc:aa:7f:73:7e:ed:0e:76:37:1a:
                    48:be:5d:59:3b:fb:de:b0:22:c4:c5:65:ff:50:65:
                    94:13:8a:66:f2:1a:1d:83:9c:6c:74:05:48:f5:e7:
                    79:51:2a:f1:e4:ca:b1:4e:3b:28:f6:b3:d4:e4:90:
                    da:bc:f6:9b:91:f8:05:7e:91:47:a7:d2:e7:9b:bf:
                    11:a6:0b:7f:01:ff:40:3b:b6:d3:e1:71:4e:4d:81:
                    9c:19:53:5e:ed:1e:a2:51:73:8c:45:ad:ab:3b:a1:
                    63:14:f8:70:fe:49:9c:68:e9:f7:ce:2a:ce:18:6c:
                    f9:e2:fb:c3:a2:3a:bb:67:c4:18:cb:33:94:30:0c:
                    26:08:10:20:07:c9:51:fa:05:1d:db:ba:68:c8:b5:
                    e7:66:0d:7a:02:74:c9:70:db:e8:f3:e5:e0:72:0a:
                    bf:50:42:19:4d:b2:f7:cf:11:50:de:59:b5:5b:9a:
                    8c:a9:df:ba:67:64:44:0f:31:03:52:31:01:fd:a2:
                    0c:bb:ac:83:9a:8f:c5:43:1b:ca:3d:06:4e:c3:c8:
                    46:df:af:f5:52:34:5d:f4:54:3a:17:54:3d:35:af:
                    03:ac:80:6a:e6:87:43:4f:d1:8a:52:0f:5a:fc:c7:
                    13:eb:90:4d:b9:d0:cb:c6:1e:f8:09:f4:39:18:42:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:D9:05:2E:F8:10:69:E3:BF:62:CF:1E:33:0F:2E:78:92:7F:24
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:6d:79:4b:82:11:6e:71:17:49:aa:69:d3:ea:db:10:e9:
         e7:47:f9:76:41:65:d2:b3:1e:48:84:7b:80:2d:9d:6e:d8:08:
         bf:d5:92:dd:b6:fd:01:ed:10:f9:8b:31:48:60:d8:a2:6b:0b:
         f3:ce:da:9b:da:7c:c8:e7:5e:fe:df:b7:3f:59:6f:ea:75:f4:
         c0:8e:fc:cc:e2:65:7f:89:8e:44:ef:3c:b9:6a:00:1b:7a:c2:
         9f:d4:ef:24:f2:d5:c0:8b:eb:5b:2e:ef:98:d2:89:5a:dc:90:
         6c:3f:98:02:27:d3:83:99:5b:a8:cd:60:85:f5:cd:05:ce:9e:
         e7:66:13:75:11:11:1a:e8:c3:4f:59:a2:8d:1a:03:c7:74:0e:
         11:7d:62:94:5d:74:b8:dc:d9:04:d6:f7:14:ba:76:2e:5f:bb:
         50:55:5f:49:ad:5d:51:6d:1f:57:4c:a8:32:fb:f4:3f:bd:c0:
         22:a2:dd:07:a5:67:14:8c:6b:62:d3:8a:18:29:b3:5b:11:9b:
         84:e9:87:ad:50:b7:36:87:bb:db:8d:cd:8e:b0:41:49:50:01:
         91:cd:9f:b0:2e:e2:3c:dd:21:1c:bc:dc:b5:f2:4a:08:bd:1d:
         e6:a9:a0:02:97:b2:51:41:b6:d6:10:b8:f3:21:14:02:46:e4:
         d0:4d:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----