Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File:                     aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier:          uB6k23nDKXMs3ve5I50Vaw+RWF1eOew4Xk7pzzF1/Z8=
Subject key identifier:   2C:15:A8:B8:73:A1:8F:33:D4:9D:2A:2F:99:DC:78:14:A2:7D:C7:58
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer:       /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial:       019355762D4DFAB09A67111ACFECE682BA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 20:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:28 +0000
Files and hashes:         1: 2G0aA9WeNc8hSUz91i_ssdjmYpU.roa (hash: RCRi5dV122qlgePbodlkVl4rH7RAJ29nSO/brPOjJlA=)
                          2: 8r0Pw1i7GV7teN3hHEa_s9eHLnc.roa (hash: y8OIzf+PyqZ46X46PvSzRBTC719r6bsUGNpOzv9P0Ys=)
                          3: SAR-i__y05eafLBhPtZ8CUPZ1Rw.roa (hash: kUf2JW7WdN59FA+69R/YfspDcccIvGrB5LCXH/oR5Bc=)
                          4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: jc97qEinHpBY/h+5bOeYr/59p96RoRTFlBO7jXanwUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:2d:4d:fa:b0:9a:67:11:1a:cf:ec:e6:82:ba:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
        Validity
            Not Before: Nov 22 20:00:28 2024 GMT
            Not After : Nov 23 20:00:28 2024 GMT
        Subject: CN=2c15a8b873a18f33d49d2a2f99dc7814a27dc758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e7:f7:e8:39:11:27:b3:b4:d8:80:8e:8c:43:
                    e1:2a:f5:2d:c9:1b:eb:9e:c5:bc:55:7d:17:13:ab:
                    71:f8:62:7a:c7:c7:ee:8a:01:aa:bc:24:18:73:95:
                    79:19:ca:f4:c4:a5:0b:84:1d:62:b9:e5:63:5f:5f:
                    52:13:51:b7:c1:e6:6d:25:31:5c:89:5f:cf:ee:62:
                    61:24:d1:32:9a:11:7b:e4:01:f0:ee:98:10:34:3d:
                    3d:76:9d:91:99:48:40:e2:20:cb:d3:7c:49:b0:8a:
                    3b:64:91:a0:a3:e2:ab:b3:ec:8a:11:83:aa:eb:a7:
                    dc:59:e3:bf:9c:7d:98:94:7c:b0:02:2a:45:90:09:
                    43:df:13:57:8b:ad:44:8e:f1:e2:37:ae:3b:af:20:
                    5f:a3:a9:33:2b:a3:29:c8:fb:e8:e6:a6:ae:1d:fa:
                    0a:97:2e:b7:c6:07:63:09:83:e1:21:df:0d:f9:99:
                    73:8e:85:12:24:ac:0c:3c:80:64:ba:6d:2c:b6:e6:
                    3f:01:2b:0e:42:aa:9b:7b:14:2d:64:fe:0a:9d:f9:
                    e5:5f:65:a1:0f:68:74:1d:00:93:cf:b0:27:96:84:
                    18:51:47:f0:28:f7:65:0b:44:61:86:df:f2:b7:9f:
                    9c:e4:02:ca:e0:11:45:34:a3:22:94:16:bb:eb:d8:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:A8:B8:73:A1:8F:33:D4:9D:2A:2F:99:DC:78:14:A2:7D:C7:58
            X509v3 Authority Key Identifier:
                keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:bb:d7:7c:df:b2:ac:a3:a6:b2:41:45:9f:57:eb:5f:53:
         5a:2f:b1:db:52:5a:6b:60:15:a8:ba:18:96:8e:de:d2:27:3a:
         2a:79:08:e8:c0:ca:0f:e5:96:86:8e:05:47:56:6d:4a:04:c2:
         b8:b6:0f:ce:18:c3:f4:5d:f8:4a:c6:8a:c2:ac:eb:1a:3b:7c:
         fd:15:b7:24:a2:1c:97:57:a4:65:fa:6d:f0:8f:75:c8:91:84:
         6a:42:5b:8d:f5:20:3e:b4:63:99:3e:d9:5d:b5:c9:46:b3:8f:
         da:2f:d1:16:2c:66:65:d5:c1:9c:3c:cb:f6:c5:b8:fd:29:57:
         b2:9f:fe:a1:15:0b:be:0f:79:5d:5b:93:05:3a:6d:dd:a0:56:
         30:6b:66:03:37:3c:a6:36:d2:82:09:58:dc:f7:c9:45:6c:6f:
         b0:43:28:08:42:57:18:5a:f6:e3:7a:68:3d:91:7f:43:f5:70:
         05:63:e4:be:4e:ee:22:c5:1f:35:0d:21:c6:c3:fb:de:4c:28:
         60:49:77:e8:fe:8b:39:0c:fb:72:b2:e9:1a:ad:8e:25:95:e4:
         2c:84:b1:64:f8:fa:f3:77:27:dd:0d:38:18:07:c8:e0:84:2e:
         60:ab:59:3c:5d:aa:2e:f6:54:ee:25:5a:f9:6f:8a:9c:3b:d4:
         7f:18:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----