Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          0Yx677k6qCN9DGKXLqkV+RKqQKQCZ7VMNec6wLhzGyw=
Subject key identifier:   B7:FE:64:1F:4A:47:90:5B:1C:CC:64:01:EE:94:7C:6C:99:AD:B2:A6
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       0194060EC984730D8EC4302DCA00BC003909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          13CF
Signing time:             Fri 27 Dec 2024 03:00:19 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:19 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:19 +0000
Files and hashes:         1: 4_Uv0GY1xluVW2gDdTDbO7iLWl8.roa (hash: u6eNswjAv6AGShRlESHRIbsJ7y7YQ8VViSp+A3TiFXY=)
                          2: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: Lrx+gry4fHZbpRNph4wEd5wsPgqKi7gdn+Qd6ApuHes=)
                          3: MoLEFgLvRRHrG_ayUl7WDIJy2z4.roa (hash: bvRTUrlyqDD2F/6ricqPK846iv2PLZ8JU/rJGCUyxlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:c9:84:73:0d:8e:c4:30:2d:ca:00:bc:00:39:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Dec 27 03:00:19 2024 GMT
            Not After : Dec 28 03:00:19 2024 GMT
        Subject: CN=b7fe641f4a47905b1ccc6401ee947c6c99adb2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:1d:1e:8e:33:e6:95:a8:7e:8b:85:59:ed:
                    63:8e:5e:11:3a:3a:3c:be:9d:e6:2e:7e:de:ed:5b:
                    04:f2:7c:94:54:d5:11:16:2c:b4:b0:28:d3:f4:6a:
                    6d:05:42:67:84:73:08:fd:10:de:0f:49:5d:33:2e:
                    37:97:a3:d6:bb:ba:fd:34:8e:59:b5:78:90:4f:14:
                    0d:ab:b4:96:6a:ee:97:11:78:f5:2a:2a:ec:7c:98:
                    7c:c5:36:de:42:4a:a5:d0:03:75:22:06:25:68:03:
                    7b:b5:7d:20:01:aa:fd:0b:62:b7:ae:a3:46:38:13:
                    83:ce:bb:61:4b:4e:73:ee:60:f3:ff:f1:fd:06:64:
                    e4:42:4d:aa:81:ef:3b:63:34:7a:4c:a9:1a:a2:08:
                    53:8c:91:b8:91:50:fe:2e:9e:02:6e:63:62:b1:87:
                    59:e8:30:05:3b:85:9a:30:3a:d0:99:04:b9:d5:7b:
                    05:e7:97:fc:9e:a2:3e:da:e0:a5:30:2d:78:2f:17:
                    3e:80:21:f2:9d:f7:23:30:ae:67:da:f5:5d:73:4d:
                    7c:6b:ca:e9:3a:41:51:e6:59:91:a1:df:1b:49:a3:
                    8d:fe:5f:bb:3e:16:4b:eb:cd:37:27:7c:71:68:0c:
                    db:77:84:86:7c:f2:b4:ba:32:12:c2:32:3e:8e:b3:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FE:64:1F:4A:47:90:5B:1C:CC:64:01:EE:94:7C:6C:99:AD:B2:A6
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:10:40:41:3b:b2:da:37:6e:d1:41:d2:f6:7d:45:b1:85:
         ec:f1:3c:76:b2:92:92:18:b5:01:e3:13:aa:99:b5:55:04:65:
         9c:ae:3e:78:7d:55:c9:68:1c:0f:47:94:3b:59:9a:f0:63:02:
         c0:e1:b3:10:d5:d4:f8:9c:5d:03:32:c5:51:42:08:6f:99:87:
         ed:74:51:bc:1a:ec:cf:0c:ae:37:34:04:69:b3:59:57:ca:8c:
         9d:f1:4d:b6:74:a9:d8:82:c7:fd:1b:b1:b3:4c:9a:50:ff:95:
         77:90:f4:67:b7:76:d7:8b:b1:a8:e1:cf:18:45:4b:d6:a0:b8:
         9c:cd:4e:7e:a0:b7:a7:e0:56:32:0b:37:8b:9a:f2:5d:3f:03:
         24:c8:41:b6:0d:7b:9b:8f:d7:ba:3b:3c:90:44:e5:df:f7:91:
         2c:93:ea:5a:f6:b6:7c:df:62:d3:8e:d7:d1:a4:c0:be:9c:6b:
         45:41:71:d6:dc:1f:7d:7a:eb:81:78:22:9c:5f:47:1d:eb:eb:
         f4:47:af:91:34:78:1c:e0:95:e7:20:cd:55:77:c6:39:ab:86:
         22:7c:ab:73:76:7b:2d:6a:f6:5c:ae:e3:82:f1:1f:c1:b7:cc:
         93:1e:9f:61:0f:50:40:0e:2c:1a:cc:31:ae:4d:66:e1:72:49:
         14:ff:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----