Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File:                     iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier:          ZN3fC/xK6MkLyWJ6lUfIuDBH5fdhTBcEAd5fTOj6+70=
Subject key identifier:   5C:D1:EB:43:56:4C:4C:64:64:08:66:84:86:3C:BF:C2:A9:3B:2D:0D
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer:       /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial:       01936AEB825AB49E82AA9C6C7186512AE94C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number:          10F7
Signing time:             Wed 27 Nov 2024 00:00:39 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:39 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:39 +0000
Files and hashes:         1: 1-joSiX3Htc7Df9RSA41Wko1aDtY.roa (hash: 3J+h0D0T/u1pF4YOsKgMI+bNU/7c/+60BYmvVflamq4=)
                          2: 5Grtd8EjB8TA9OMGKBFL9EBnemc.roa (hash: exjb4sg0wNk6L7EvwKbwTbj3lb9nbnZupEgfy7vMABM=)
                          3: Johv_1ZHm9BnPmbrSaD1g2r2nHQ.roa (hash: tNwKWd1R801ObXmox90ZNPkPpTSAXLB3O2CiUBCHxkg=)
                          4: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: 5CMG3SHAgxjE1G8p4kUvyG3hyQiFS8aRIo96bwbkQ/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:82:5a:b4:9e:82:aa:9c:6c:71:86:51:2a:e9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
        Validity
            Not Before: Nov 27 00:00:39 2024 GMT
            Not After : Nov 28 00:00:39 2024 GMT
        Subject: CN=5cd1eb43564c4c6464086684863cbfc2a93b2d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:08:2c:e9:fc:4b:07:45:51:fd:a9:68:3b:
                    2c:fc:43:48:c0:41:b3:92:f8:28:26:69:9d:71:2f:
                    f3:73:bd:d6:1c:64:d8:13:f8:79:b3:3d:18:24:00:
                    d9:81:8a:5b:e9:dc:94:d1:c9:83:c0:8b:84:7d:5f:
                    0f:5a:ec:3c:42:2e:23:91:e7:80:54:6a:7f:7c:10:
                    dc:8a:50:15:16:9c:dd:e6:a7:00:dd:c3:5c:ae:fc:
                    17:4d:01:01:e1:62:a2:ae:86:a6:2a:51:86:14:56:
                    a5:dc:ac:6b:d6:0e:9f:f1:ae:79:a2:58:15:81:d8:
                    62:79:58:b0:52:24:9e:82:7a:9a:71:15:02:72:da:
                    14:c7:f5:61:7a:63:0b:8c:6e:fe:ae:2e:f2:a7:96:
                    70:70:f3:d0:26:92:54:9d:fe:ba:99:7a:dd:6d:94:
                    98:9f:d9:2a:a3:6e:2b:b2:69:9c:92:52:19:fd:9e:
                    63:c5:8a:d1:ad:07:72:d0:43:70:d5:a3:ab:6a:18:
                    9b:00:96:dc:c2:aa:11:31:de:30:a9:08:ab:c5:b7:
                    f8:2e:3d:07:86:c5:06:7a:7a:44:1f:fe:fc:9f:65:
                    c2:13:f9:f3:c2:b7:42:f7:42:86:8e:74:67:c2:77:
                    fa:36:0e:4b:d5:8f:4e:d0:d0:41:e7:0a:69:10:f0:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:EB:43:56:4C:4C:64:64:08:66:84:86:3C:BF:C2:A9:3B:2D:0D
            X509v3 Authority Key Identifier:
                keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:0c:5e:9d:f0:ea:ca:55:0b:5e:c8:99:b5:0c:53:04:e3:
         e0:94:5b:aa:b1:be:0f:9a:db:fe:1b:4a:2e:8a:a7:c2:10:0b:
         76:ce:ba:27:3b:27:6f:4b:fc:51:ab:c7:37:89:83:13:4c:8b:
         7c:f3:0b:68:39:65:c5:6b:d2:2d:16:3b:ae:80:e2:21:c4:c4:
         99:0c:e7:c1:10:6b:ae:5b:95:65:f9:f9:46:e4:f8:81:8b:df:
         f0:ae:79:b9:c5:16:66:81:94:4d:5e:3e:0e:34:34:33:61:52:
         95:bc:37:e6:bc:d9:2a:41:56:cb:5e:7e:33:23:14:87:f7:c9:
         0e:8c:1c:0e:1f:89:90:82:04:d9:c2:63:66:95:6b:8f:6e:d6:
         e1:3d:f0:96:de:22:cd:16:56:dd:e7:65:98:d1:eb:99:d9:a5:
         25:75:12:3e:b5:e0:e3:46:40:9b:e9:d8:5f:34:97:71:76:49:
         5d:38:e7:3b:fe:4f:38:9a:66:68:c7:9a:a1:6a:05:cd:93:d8:
         d8:f9:fc:cb:03:8e:7f:1a:5e:18:c4:00:1d:90:70:7c:8e:2c:
         ff:84:82:9c:d3:9d:01:79:1a:b0:4a:de:0a:27:23:fc:60:4e:
         c6:e1:47:94:50:c2:cc:bb:d5:3f:77:6b:ab:c0:6e:d8:8d:42:
         6e:8c:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----