Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File:                     vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier:          7VHr21I7Qkw74H2k5D+rd1W7gzsm2//LjwxAtGeLHH8=
Subject key identifier:   60:CD:49:15:C7:11:44:0E:0F:D4:21:8F:57:C5:E3:A6:FF:E5:03:13
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer:       /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial:       019355084D8B0204D8085B38A4AFE381BBD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number:          06A3
Signing time:             Fri 22 Nov 2024 18:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:27 +0000
Files and hashes:         1: mkePU5aiVtTaAQeXZHaF83zG2hk.roa (hash: /YDg1w0tsdkTs2WO0e2t9CwPMUcV3hUN6DA3TGLtoTk=)
                          2: o2xUULFVR-9Isxw6INsgzGy7qDo.roa (hash: ZDLJs1a4SE+kfPetS/EW2UhauBK2pHMsuTZIRLs9elw=)
                          3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: DxjQ2Kl/XszXEZEnbbTivOrATqptD5gUQ44RBu37Ey8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:4d:8b:02:04:d8:08:5b:38:a4:af:e3:81:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
        Validity
            Not Before: Nov 22 18:00:27 2024 GMT
            Not After : Nov 23 18:00:27 2024 GMT
        Subject: CN=60cd4915c711440e0fd4218f57c5e3a6ffe50313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:1a:45:61:06:39:56:14:bd:dd:a8:6e:53:
                    e1:c3:05:41:c3:9c:cd:81:a8:8d:a0:49:83:3b:32:
                    88:c2:4d:0b:f7:e7:19:67:a9:db:fc:5f:e7:aa:c1:
                    ec:1c:d7:eb:b3:3d:2b:9c:66:f9:b3:f7:c1:d2:e9:
                    4b:fd:4e:38:c3:99:c3:c1:6f:a8:0d:1b:18:b2:c7:
                    6f:cd:c0:14:f2:0a:cf:2a:11:c7:29:d7:55:50:53:
                    f5:d3:4b:5c:c5:72:ae:d7:e5:0b:ef:ae:27:1c:bd:
                    20:c1:9a:9f:26:5c:c9:e6:a6:92:9a:b6:33:96:65:
                    6d:a8:9b:df:01:31:3c:cf:c3:7f:7a:5c:64:af:51:
                    80:7f:23:7f:05:23:82:00:64:b2:bf:27:a9:f9:33:
                    b6:0e:f8:e6:43:9c:72:c3:8b:88:20:f8:82:a6:cc:
                    11:4e:12:2b:a9:1b:a8:f0:0a:b5:e3:86:2a:62:ff:
                    1e:67:26:3c:db:36:9d:99:0d:16:59:84:f4:6c:f2:
                    9f:f7:e7:b8:c8:c4:b3:ba:1f:fb:39:b3:63:4d:8c:
                    07:4c:fa:62:95:79:f6:1f:24:b0:97:e2:a3:fe:0a:
                    4c:b7:f7:2a:50:e3:88:04:28:d3:1c:44:40:36:7b:
                    64:c6:50:7e:3a:ec:bf:a0:df:d3:99:cf:b8:91:d2:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:49:15:C7:11:44:0E:0F:D4:21:8F:57:C5:E3:A6:FF:E5:03:13
            X509v3 Authority Key Identifier:
                keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:39:be:eb:aa:7a:15:2a:d4:72:78:a4:c1:07:0a:09:df:
         c2:b9:9e:2d:89:85:6e:91:39:e7:a5:8d:e0:36:cd:f8:39:00:
         a3:cc:a3:a4:0c:73:e1:57:f9:92:86:fb:63:e8:28:a7:90:ff:
         17:32:e7:45:01:b0:a3:ce:0e:c1:7b:8a:c6:41:6e:1f:0d:c6:
         1b:34:31:8b:2c:ce:43:3d:b2:c8:05:5b:71:c0:f8:05:e0:3a:
         13:de:d2:13:d5:b5:3a:0a:f0:31:d9:61:31:8a:70:5f:77:07:
         5d:19:ec:96:39:03:92:f0:1c:c3:45:88:5e:86:42:1d:0b:b2:
         e3:a3:eb:bb:81:d5:55:45:74:79:bc:6d:40:2a:0a:0e:fd:35:
         b4:1d:01:77:e0:2a:0b:bc:1c:a2:65:2f:a1:40:2b:f3:51:96:
         7a:f0:52:2c:73:18:49:35:c8:a1:bf:f4:f0:00:49:25:69:79:
         f8:ea:99:63:f7:bc:35:55:db:fb:9e:d5:a2:32:a4:68:fb:d3:
         43:c3:a3:0d:f2:c4:7f:fd:72:b8:f8:d5:98:80:1f:ad:5d:13:
         e6:71:4d:fb:c8:92:2f:ab:54:df:9f:45:a1:b9:91:fa:32:ff:
         c9:e6:fe:e8:4c:8d:8e:50:df:82:d9:82:93:8e:08:ac:03:32:
         b9:61:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----