Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File:                     jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier:          yd4uboEG63TRfGdhqEcDf87NWviV/Jo7Uuzf58zYLxo=
Subject key identifier:   DE:B8:3A:39:17:0C:F0:EE:D9:D9:7E:99:B3:C0:F3:B3:D2:73:B9:5A
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer:       /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial:       019354D136E2F8090EAD0F3F751378F1FD4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 17:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:17 +0000
Files and hashes:         1: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: e2GME5nhs7GohyQJBR6KhYEnpFll9qwje03Pi6BoHx0=)
                          2: ufQKk1KwQBRFZafBNF08K_1zCUc.roa (hash: CVVNoCD8RpSTzQ2paqkCikAc1fOZMuyywiY6SZF8aIM=)
                          3: wAoxLtAy9ZtpBAu2nlnoCEcTsY0.roa (hash: XxKBNnTYeYg4v+CKCiU3SqKHUPwRacRQPok5lAsUmo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:36:e2:f8:09:0e:ad:0f:3f:75:13:78:f1:fd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
        Validity
            Not Before: Nov 22 17:00:17 2024 GMT
            Not After : Nov 23 17:00:17 2024 GMT
        Subject: CN=deb83a39170cf0eed9d97e99b3c0f3b3d273b95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:59:a3:2a:15:e3:d6:3f:ec:33:c6:39:7c:
                    99:14:22:ac:50:1c:80:a6:8c:e1:dd:e2:8a:ed:87:
                    08:2a:fa:7f:89:c2:c8:f0:3e:6c:d3:73:dd:2b:5a:
                    af:aa:df:0d:28:8b:2d:ef:8b:4f:a5:3a:69:62:4a:
                    da:5f:d9:7c:3f:ef:1f:d5:77:60:14:62:f9:d3:70:
                    bf:d3:5a:6f:75:58:9c:5a:82:62:3b:f8:d5:c0:d5:
                    cf:3d:9e:5f:3b:1a:f6:02:02:38:b4:e1:9e:74:38:
                    57:ff:84:d3:3e:b7:8d:1d:00:78:59:71:77:e3:7f:
                    7c:83:de:8b:c7:5c:0f:07:f3:af:27:1a:5e:b9:92:
                    fc:50:45:6c:7f:00:d9:cd:9c:b7:ed:35:64:ee:e7:
                    fe:c8:6d:15:c9:2d:95:95:82:c7:dd:ba:0a:54:94:
                    e8:bd:47:fc:3b:3c:f3:c4:fe:3a:5b:55:20:33:fa:
                    3a:1d:67:cc:b4:c2:3a:4e:ba:bc:3b:b3:71:2c:49:
                    46:44:b7:54:f0:d7:17:5e:65:08:40:63:bd:b7:ac:
                    29:87:57:56:c0:81:13:c9:e5:c8:01:40:39:37:f4:
                    c2:08:bf:02:51:78:a9:b8:0a:35:a7:9d:a5:8b:76:
                    c0:2f:f2:64:fe:af:e7:a0:90:ef:f8:59:7c:cc:b7:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:3A:39:17:0C:F0:EE:D9:D9:7E:99:B3:C0:F3:B3:D2:73:B9:5A
            X509v3 Authority Key Identifier:
                keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ee:ac:f3:1c:55:5a:a6:4e:32:a6:ec:78:16:1d:17:77:85:
         84:bb:2a:c6:f5:18:00:37:81:4b:c4:5b:19:d6:fe:53:d6:a2:
         a3:8d:a5:82:61:9d:ee:ea:bf:42:cd:69:fd:e7:b1:ac:6b:bc:
         ed:26:88:d2:d1:63:fe:55:eb:be:aa:67:72:8a:41:2f:f8:e4:
         7a:c7:d3:9d:7d:46:b5:19:70:0a:1c:a5:56:fe:b5:d5:e6:4c:
         61:7e:7a:cc:bd:bf:e5:95:6b:2c:3c:97:3e:dd:85:55:75:92:
         3d:43:e0:a2:b0:23:bd:99:10:23:91:c9:39:30:b4:0b:16:41:
         39:7e:ce:3b:54:ff:0e:70:86:e3:8b:c4:12:38:58:5f:0d:c9:
         cb:15:44:27:07:d4:b2:2e:cc:ad:13:c5:a6:76:f9:c5:be:c3:
         f9:5f:b3:8f:ad:0b:1e:7e:92:d9:06:b0:c4:a0:e0:86:a6:9e:
         bb:ee:16:f5:aa:c6:37:a8:f5:5d:d0:93:89:63:8f:b3:6f:4b:
         9a:da:04:91:e8:e4:0a:31:9a:3c:a3:cd:8e:a2:54:12:cf:7c:
         24:9a:32:a9:53:fa:7e:d8:4d:c1:7d:df:e9:58:81:20:a2:81:
         03:0c:68:bb:a7:47:76:1c:86:41:30:2b:89:cd:a2:1f:6b:b0:
         03:28:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----