Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          BHufX+2UJV3cSGamfPyJ+bvd47uVPa3lM/86G3Tgmu0=
Subject key identifier:   FB:CA:D6:49:4C:3E:8F:88:9A:33:09:69:6B:C3:B3:80:81:16:C0:3F
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       019358776067685AC7F7AFB6801AE372BFC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:38 +0000
Files and hashes:         1: N-O2tHBJaejyp6_2GdNk2WLNgsA.roa (hash: fgshQXzM6ocxQi1uwK95ZU1PlhemC7H61Zb6fOFzeIc=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: 1HM99NRQXDKnVJ7rpdtW53PXh/EW4sel4fADFI94JEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:60:67:68:5a:c7:f7:af:b6:80:1a:e3:72:bf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Nov 23 10:00:38 2024 GMT
            Not After : Nov 24 10:00:38 2024 GMT
        Subject: CN=fbcad6494c3e8f889a3309696bc3b3808116c03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:97:1b:e0:be:fa:0e:63:96:40:5a:0d:37:
                    79:ee:6f:b7:8a:6a:88:50:0c:fe:a5:78:29:92:01:
                    98:82:3f:5d:7d:ba:c1:d7:0e:dd:eb:06:c2:be:b2:
                    93:6b:4a:b4:1e:aa:9f:75:94:ef:8b:49:e6:c1:c4:
                    79:65:3e:f5:65:15:5e:11:5e:f3:bb:97:9c:22:e9:
                    e7:17:42:c7:0c:f9:59:f0:6c:36:ce:67:69:5d:76:
                    34:88:c2:67:14:89:75:e1:83:b5:51:ff:83:b5:84:
                    f4:5f:06:29:37:b6:68:e6:5b:c3:ee:3c:49:f5:d2:
                    02:e3:9b:94:7a:2c:15:76:89:ed:48:23:0f:37:ea:
                    8f:91:d7:5a:78:f4:8f:cc:33:e5:64:ae:a9:0c:54:
                    05:eb:fb:e6:e4:6b:f2:e0:2f:6e:b9:b2:12:90:97:
                    78:e9:a4:06:da:e1:e0:3d:c2:ba:11:93:04:ec:92:
                    de:5c:97:10:1c:d8:f3:04:e0:f0:4e:d3:71:47:30:
                    cb:d2:fa:0b:b7:2b:17:01:f2:81:63:1e:6b:2f:5c:
                    a9:c4:07:22:5b:d1:09:87:49:cc:42:58:a1:24:a5:
                    b6:8c:43:05:4f:12:18:3d:2d:8c:6f:d4:dc:3c:5c:
                    0f:94:42:0d:5f:5c:32:b5:47:fe:c0:53:f3:ad:1d:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CA:D6:49:4C:3E:8F:88:9A:33:09:69:6B:C3:B3:80:81:16:C0:3F
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:37:37:d7:26:14:e1:8b:a3:af:2e:a0:2e:2f:bc:f8:97:
         20:32:1e:d1:f3:f6:9c:69:17:db:05:12:23:3e:ad:3d:3b:03:
         0e:aa:53:62:25:08:7d:e7:6f:48:ec:50:69:0b:61:c5:71:83:
         0d:c9:12:0a:66:76:c9:b1:da:ac:80:ec:cb:8e:d1:d9:c3:f1:
         b5:1a:19:42:de:f9:3f:c9:8e:bc:6f:2f:45:f4:ab:6a:36:e6:
         17:11:34:db:52:2d:80:2c:e5:ed:65:5b:55:f0:93:20:99:67:
         e7:4d:ab:b2:dd:c3:4f:0d:6d:3c:c3:4a:13:56:86:37:cd:8f:
         09:2a:1f:6b:1c:8b:62:1a:fc:22:5a:23:6a:cc:ba:2d:e7:67:
         dc:c4:d0:8f:93:1c:f3:38:cd:6a:23:ec:aa:9a:fd:b7:58:3c:
         39:ca:c7:9c:9f:9b:b8:89:06:9d:86:01:ed:6c:e5:42:8b:e7:
         c0:5e:02:98:64:f6:f3:02:fd:3c:3b:c4:13:ef:f1:63:b3:6c:
         85:a3:6f:4b:4d:2d:78:c6:eb:dd:14:ed:91:47:5f:73:50:80:
         8c:48:56:a2:ca:84:72:06:28:6b:07:a5:fe:a6:ad:5b:c0:bd:
         42:93:25:44:b2:cb:cb:95:8f:c9:3c:38:68:a1:54:e1:6d:74:
         69:e0:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----