Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          RFqHx2QIe169D6gt0czq+TBERxz0CAuRZ75cOLwHDi4=
Subject key identifier:   D0:C8:63:E8:9E:FE:D8:15:50:56:2F:53:90:79:5B:E8:7D:23:9E:09
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       01935206FD773F6ED9A1E2A45CF5057BE25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 04:00:09 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:09 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:09 +0000
Files and hashes:         1: 7F4hoTdmt0FLp7vLmGFnxY3ONBA.roa (hash: +5u2pP0JLq/oHdO491BsQEnypqUd5Kg9060fKHo2RP0=)
                          2: A7LdBdwqjw-dfYugPxn54Yn1-LU.roa (hash: nOCJnfd+zJP50idAf6vH/amaxAZcthpFcy6JgtBljsU=)
                          3: RLxXGCPyth7oIKeKLJIYY5XJUVk.roa (hash: 8YBFWTNhTbOMC6zBZlRleUOdO9Sx8scy0LJ/ikd/P7U=)
                          4: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: Uh5lenh9VHGkGKGjb33Ki/lFQQuMydjpttDJ1wkB9bE=)
                          5: nJDBeZljnhP9pDx3Jrs8w9avvMM.roa (hash: T7SelzsqA9yj/i2ABqnL2Dxwo4tWg0eVKoXNCJnHUnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:06:fd:77:3f:6e:d9:a1:e2:a4:5c:f5:05:7b:e2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Nov 22 04:00:09 2024 GMT
            Not After : Nov 23 04:00:09 2024 GMT
        Subject: CN=d0c863e89efed81550562f5390795be87d239e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:a0:38:90:e4:fa:0e:9d:e3:6c:e6:7f:3d:
                    0c:3e:a0:d1:2e:c3:2f:0d:da:1c:c3:d8:5f:a1:e8:
                    55:d3:fa:c8:d8:4f:40:56:4c:0f:8e:11:19:7a:f4:
                    07:52:e9:d0:64:1c:a9:83:fa:98:48:9c:f3:b6:c7:
                    88:21:61:a2:6d:78:38:ec:8c:d3:c8:c3:cd:9c:a2:
                    65:2c:29:b8:b1:65:da:9f:6c:20:bf:a3:8d:7d:bf:
                    c6:3a:e0:30:af:5c:e5:74:91:e4:44:f0:4a:a1:f8:
                    95:b1:89:87:1a:16:2b:1f:a3:ab:39:cf:1c:5e:50:
                    63:a1:f4:ef:86:50:3c:02:b6:f6:b8:88:a6:2a:07:
                    5b:68:5b:0b:db:b7:86:f0:aa:7a:5d:11:8c:ea:66:
                    53:65:0a:de:0b:7a:05:7a:e5:72:74:d6:db:14:5a:
                    e7:eb:9c:9f:09:0b:e2:65:04:dd:be:44:32:29:4e:
                    5f:db:4a:bb:ed:d0:6e:fb:de:e3:f8:9f:80:75:ce:
                    f3:24:33:0d:58:c7:74:54:9e:84:15:cf:75:ea:1d:
                    a6:36:f1:c1:db:8b:47:e2:55:6b:26:5d:6a:5b:5a:
                    ff:8a:f0:ca:68:84:03:ab:64:c3:15:12:5f:fc:55:
                    a9:fd:d8:9e:b8:c4:c7:cf:dc:d5:92:ed:72:75:0f:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:63:E8:9E:FE:D8:15:50:56:2F:53:90:79:5B:E8:7D:23:9E:09
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:7b:76:05:7b:e1:e3:a5:fb:1b:72:67:1a:d9:ea:58:83:
         56:0e:4d:e2:43:aa:e8:e4:41:c6:f5:cf:e2:dd:c8:eb:ba:a6:
         6b:0e:34:3c:8f:f3:c2:76:e0:f7:7e:da:98:6a:41:59:20:07:
         35:74:98:d0:98:b8:74:c5:c9:bd:c8:96:d7:fc:73:eb:0d:74:
         95:62:71:ef:d7:00:e9:82:ec:c8:56:56:a7:5e:24:66:a0:8c:
         72:39:9d:db:e7:60:e6:f6:bc:c4:60:c3:a1:20:ae:cf:b6:d7:
         8a:7b:28:56:5b:83:cd:73:70:78:1b:df:ac:24:c5:88:ac:33:
         78:5a:09:eb:09:f4:1b:3d:ac:35:ea:63:07:25:4b:64:8c:6c:
         0c:ad:9c:15:f4:7a:95:1d:8a:0d:8f:22:b3:81:88:cf:eb:08:
         fe:59:6b:4f:d7:c9:12:43:b0:a6:1b:cf:61:97:06:72:42:e0:
         77:9d:a5:42:03:89:e1:18:f0:66:a4:ff:d5:b5:91:f9:ca:18:
         89:7f:e6:ee:98:2e:14:7c:4d:9d:9c:1c:34:68:b6:11:e5:26:
         c6:67:54:b1:2c:a1:cf:dc:75:aa:ce:30:ba:2a:ac:d5:5d:41:
         41:37:ef:73:1b:64:4d:bc:95:da:10:f3:a7:c8:0a:67:e5:70:
         c5:35:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----