Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File:                     iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier:          eyOF9KJxipO+YXveWSmfvFnXaLj1fobnajgaEhcnSQQ=
Subject key identifier:   FF:24:0A:9A:09:30:89:30:8E:68:68:EE:BC:05:B5:16:8C:F8:F3:F4
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer:       /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial:       0193549C49B96C836A9D719DE3C90A73EC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number:          09DC
Signing time:             Fri 22 Nov 2024 16:02:28 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:28 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:28 +0000
Files and hashes:         1: 6iToi6CwaHAOoJ7FTS4Luu9hSiU.roa (hash: ut2Y2dbFxOACDj5M8rCiUjdMbv6slwUpRWyl2K+0bOs=)
                          2: 99aLGGncA7ONgf1gcUfCn5t2xm0.roa (hash: cakgZCw2cJAcqhZM3jwQUZhMCGO4As9K3/h8++ohNgA=)
                          3: ABAalErJKGhPd6Er0l5hueIg_8o.roa (hash: 4A6yBuvpp7uECPa0oErBAPxWDhnQtw7QqmjAatGs+JI=)
                          4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 8r+w5bK/ebqbqaLjvZyiNretnqv/na7iTBbexv8X+wU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:49:b9:6c:83:6a:9d:71:9d:e3:c9:0a:73:ec:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
        Validity
            Not Before: Nov 22 16:02:28 2024 GMT
            Not After : Nov 23 16:02:28 2024 GMT
        Subject: CN=ff240a9a093089308e6868eebc05b5168cf8f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:67:e1:62:1c:31:ff:2f:55:7a:79:0e:06:
                    bf:c1:07:2d:c3:5d:31:76:9b:25:93:65:71:04:da:
                    97:0b:db:91:f2:15:c8:ec:fd:48:cc:3e:26:05:77:
                    2f:69:b5:06:84:c8:df:5d:00:89:b0:30:e0:01:60:
                    b3:63:e4:c2:79:6f:d3:61:7e:13:2a:49:74:83:da:
                    9f:9a:b1:6d:88:74:47:ee:d9:22:86:0d:0f:62:ab:
                    99:f6:85:bb:85:a5:1f:56:87:d9:07:b2:30:76:07:
                    32:9c:b1:d7:af:1c:b3:3e:97:30:a0:e0:30:8c:0f:
                    23:6e:62:f6:cb:00:17:51:66:93:93:3b:ae:cb:26:
                    c0:ee:c8:09:4f:53:9b:4c:9e:dc:ef:7d:16:66:34:
                    f4:23:49:0b:4e:20:ea:f2:e6:00:71:7b:c1:92:40:
                    a6:70:1f:06:51:8e:83:24:b4:15:70:01:fe:43:51:
                    0c:38:81:18:85:b7:96:e3:14:82:f3:c7:7e:97:f3:
                    8c:f4:78:97:c9:23:d8:0d:18:06:c7:46:3c:b6:a3:
                    fa:2d:ec:e7:41:f1:ca:b6:78:23:7f:93:b5:cc:95:
                    bf:63:c5:ec:ab:16:33:2f:8a:51:0d:0b:57:30:f7:
                    a9:0f:32:25:2a:6c:34:22:24:06:c5:1d:05:2e:bf:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:24:0A:9A:09:30:89:30:8E:68:68:EE:BC:05:B5:16:8C:F8:F3:F4
            X509v3 Authority Key Identifier:
                keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:d2:69:7e:de:d1:e5:84:c5:b8:bd:61:35:c6:9b:ff:76:
         06:9e:28:a8:59:3e:1d:f0:fc:e6:8f:e0:84:fa:f0:d8:3a:5c:
         48:ef:76:15:5f:de:c5:5a:6c:0f:75:fb:6d:ac:19:8a:27:91:
         16:a5:8b:e2:52:ce:b7:70:5c:62:94:13:32:99:26:1e:9e:7b:
         c6:e2:5f:f1:0e:a3:16:08:3b:93:8d:dc:4c:65:cb:f3:47:15:
         d8:15:d8:31:38:5c:dc:ba:00:e2:49:fc:8e:1f:45:e2:1c:65:
         a2:b0:bc:e1:d2:3f:98:d8:46:6c:78:f4:8b:5d:f1:32:04:ed:
         6e:74:c5:b2:53:93:2a:82:1b:47:23:7e:6b:45:17:47:01:39:
         22:3a:48:52:b4:27:17:b2:ee:c4:dc:89:3f:85:6c:f3:07:d5:
         f1:9c:5b:4d:4c:28:42:ac:fe:54:71:d2:f0:f3:ad:87:1e:b8:
         b8:af:4d:e7:b7:61:63:6c:0c:c7:ee:35:ee:f9:a7:53:9c:9c:
         55:44:e5:8b:70:84:ae:ca:87:42:0d:50:33:27:42:f0:b7:86:
         c5:01:03:75:c2:8c:47:12:d2:94:9f:0e:8e:24:9d:20:43:ef:
         97:1d:54:a9:71:e2:fc:ca:3d:34:36:df:fb:4f:62:8c:0a:39:
         24:07:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----