Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File:                     v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier:          mcWeAAs9e3mY+/16puIvtZupYJDBddlR97zzyxrI6JM=
Subject key identifier:   2A:DE:20:1E:B8:4A:7C:99:60:2F:39:D8:3D:AE:B7:B0:01:38:49:9B
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer:       /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial:       019352ACCC9BD1867ED9D35CC5591846B58F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number:          1247
Signing time:             Fri 22 Nov 2024 07:01:16 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:16 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:16 +0000
Files and hashes:         1: gVKmbGF_GYGmI3cfQwrudCTb5AM.roa (hash: giKgNqapatZpSerF64A5k1RvAL6uIPUVnz/pzRD2j+g=)
                          2: msfAmzBbVHKVpltUtbK-fZfFpF0.roa (hash: Y4Kc9CUf5dZhU9zFcs2WzjWDU67TLdDWFbzkKRHGc0Y=)
                          3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: QSUOm6JUqQabAcR1jRz9mvT/EsEBiTt9o/c/1AhbFV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:cc:9b:d1:86:7e:d9:d3:5c:c5:59:18:46:b5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
        Validity
            Not Before: Nov 22 07:01:16 2024 GMT
            Not After : Nov 23 07:01:16 2024 GMT
        Subject: CN=2ade201eb84a7c99602f39d83daeb7b00138499b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:a0:eb:d1:64:5a:94:b1:23:1a:d1:f8:81:
                    21:49:4e:d0:2b:36:95:0d:a4:bf:e4:12:a3:8a:8b:
                    e2:a8:40:b8:89:c6:25:4d:b5:25:d6:5c:72:e4:0e:
                    12:f4:7a:f8:2d:0e:93:70:a7:69:46:59:22:00:40:
                    3c:59:59:32:fd:7d:ea:ef:a8:9a:64:35:e6:5c:8f:
                    8d:44:f9:07:6e:c6:93:9f:9a:be:61:7b:74:05:fd:
                    22:6e:50:b3:cd:b9:6d:19:61:fb:a5:8f:73:5a:7e:
                    b1:a4:02:18:d8:3a:3e:7e:ba:63:49:d9:d7:a4:b3:
                    bb:fc:42:b4:61:63:c5:64:c3:3b:de:51:3f:28:83:
                    f4:98:16:e5:4d:49:6e:03:85:15:97:42:ce:58:2d:
                    b3:8d:25:39:dc:00:74:a3:3f:f5:e3:31:41:7f:ef:
                    36:63:be:0c:48:86:df:3e:69:2a:41:99:32:79:da:
                    55:dd:75:2e:a2:12:a0:5e:1b:8f:8c:b9:0d:e9:0b:
                    f3:86:71:92:d6:34:d5:44:a9:05:b6:6c:ce:c4:a4:
                    ef:a8:e3:b2:77:5c:d9:7d:42:40:f3:1c:15:d9:63:
                    e3:a7:8a:ef:07:06:58:bb:30:56:15:ff:b6:29:a8:
                    21:bc:e9:e5:00:9d:59:c2:22:c7:b5:05:94:af:37:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:20:1E:B8:4A:7C:99:60:2F:39:D8:3D:AE:B7:B0:01:38:49:9B
            X509v3 Authority Key Identifier:
                keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:e6:65:ba:04:8d:7a:61:ce:77:8c:6f:96:49:a5:de:9d:
         5d:53:50:ce:0a:c6:12:b4:50:43:97:da:2e:63:38:57:94:fb:
         ca:87:1d:67:10:52:93:20:ed:be:0f:81:25:69:58:11:e6:4f:
         45:27:f2:7a:0a:d5:91:f3:3d:1a:64:69:fa:e7:ed:27:47:2c:
         55:e0:0f:18:09:32:e6:42:f6:49:52:cc:bb:74:bd:77:d1:78:
         fc:b9:0f:fd:e4:96:ea:54:4e:04:a8:d3:37:18:88:55:84:b6:
         57:4d:48:d5:03:ee:14:51:2b:44:cb:eb:77:ef:d4:81:e4:2b:
         1d:ce:07:f5:02:61:56:d2:79:20:fe:09:d0:ad:84:11:d9:10:
         7a:6b:70:08:6d:57:28:15:a0:f4:eb:cd:87:c3:5c:bf:62:31:
         e6:bf:bb:ea:ff:ab:8a:bf:bc:5d:78:aa:0b:32:97:e0:6b:4e:
         a7:52:dd:e3:9f:d9:16:d2:3a:18:4c:ae:99:cc:93:0d:14:d8:
         35:44:d7:e8:6b:a6:e8:e3:be:3e:47:55:99:e7:58:a2:e4:99:
         07:53:e3:ba:11:4a:5b:53:2c:cc:df:ad:0d:ed:1e:9f:a4:72:
         12:e0:f3:88:49:83:17:09:2e:fa:71:8d:63:18:b3:4d:c4:6a:
         13:fd:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----