Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File:                     sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier:          z4b5iBGD2EroEFIE3BIOo8FLM0zPuGDyk7NEM5tJkFc=
Subject key identifier:   0B:B5:20:29:9F:AC:FA:A9:00:56:C9:61:0A:00:D2:A4:F8:7D:EC:70
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer:       /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial:       0193553FB6EEAC630355B0F83E57127AE772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 19:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:59 +0000
Files and hashes:         1: bBa0MdpvqFa-gva0WZoeKrRVYYc.roa (hash: yS450Ufo5bHV8Ya4e4plryxnsuW2Q/lR0xzbbCzTsHo=)
                          2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: 5yUG8qiOHwED1KE7/FKEeVuJA170iE7sh4K6tuLsBJ4=)
                          3: sW4CSIBPn4q54ZqZ2CTnySbnuw0.roa (hash: WmYUGJd4XF3nyoYu5JrZ41fy1FOzCnzjIMR0P+hQNUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:b6:ee:ac:63:03:55:b0:f8:3e:57:12:7a:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
        Validity
            Not Before: Nov 22 19:00:59 2024 GMT
            Not After : Nov 23 19:00:59 2024 GMT
        Subject: CN=0bb520299facfaa90056c9610a00d2a4f87dec70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:2c:33:10:81:59:c6:9e:12:a5:ab:4b:04:
                    8c:e0:61:9e:db:0e:a8:65:3b:30:98:d5:cb:b1:82:
                    f4:75:9b:e3:d4:83:de:f6:91:5e:ab:0c:4a:d7:bd:
                    f2:f4:59:4e:a6:05:7b:74:61:2b:72:0c:de:ab:0b:
                    84:6b:5d:b6:73:8d:4b:a0:3c:f6:28:86:be:65:b9:
                    64:97:1a:7a:a8:57:0b:19:ca:4c:ed:95:bc:28:eb:
                    5d:f5:cf:3c:18:73:05:ea:e8:dd:88:61:a7:f8:92:
                    31:64:87:0e:31:fa:f1:6b:cd:7f:9a:15:09:58:b6:
                    0c:31:0b:9d:ef:a3:05:7c:27:a2:2e:99:f1:ab:bb:
                    f5:a2:c8:49:27:00:b2:03:8e:80:a9:0d:7a:48:90:
                    bf:75:11:08:42:fa:fa:28:66:e3:13:b4:5d:ae:8b:
                    b3:fb:63:04:16:a5:c8:e3:50:fd:91:05:1c:df:31:
                    e0:ab:95:50:f2:52:5a:8b:40:04:f0:b7:64:3c:60:
                    e6:5c:0d:9d:3b:f2:37:6f:29:1a:36:47:00:73:0f:
                    3c:a9:71:e3:35:f0:e3:4f:0c:33:0f:f2:79:ab:d0:
                    48:74:66:63:9f:b4:42:35:0a:14:70:d1:a2:fa:3a:
                    c0:e1:00:fb:dc:9f:12:ba:c0:11:bc:d3:1a:14:40:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:20:29:9F:AC:FA:A9:00:56:C9:61:0A:00:D2:A4:F8:7D:EC:70
            X509v3 Authority Key Identifier:
                keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:07:d4:d7:34:85:80:26:7a:ab:d1:a5:96:8d:f5:b0:ca:
         78:3a:ef:5a:8d:25:a1:e6:a8:2a:cd:e7:51:84:63:38:51:d7:
         ea:36:3c:b9:a4:ba:17:24:3e:00:29:b2:db:cd:66:50:78:6d:
         89:c5:b2:45:02:2e:df:86:c8:2f:8c:1c:10:58:9f:99:46:f5:
         f4:9e:bc:c3:85:c1:19:31:4d:df:55:0c:ec:fd:db:d1:82:c2:
         7e:a5:c8:79:70:29:ed:71:bf:18:f4:19:be:86:b1:f3:bc:a3:
         43:44:53:07:0c:e8:19:75:2d:16:89:ac:c4:11:a2:2d:8f:72:
         3c:b6:8e:2e:68:cb:f6:4f:1c:95:cf:97:ae:1f:6a:68:41:5f:
         d2:60:b4:e4:7f:12:a9:fe:18:86:11:01:74:05:e8:1c:a1:78:
         6a:fa:d6:d4:d6:0e:e5:99:d0:c8:d0:04:72:57:de:a7:f9:6d:
         7e:ea:a0:30:3d:66:97:a8:20:3c:e6:5c:e3:2a:53:ef:d5:6d:
         ff:9e:79:66:98:d1:6a:b5:1d:c1:91:e3:fb:1d:1f:d5:1a:72:
         73:d3:81:50:b9:0d:59:8c:ae:91:da:f5:8f:9b:5b:4e:f9:52:
         da:6a:e7:36:59:31:bf:8a:49:56:1f:7b:56:df:24:52:9f:54:
         ce:af:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----