Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File:                     bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier:          PSIam+6G7hk8Pifuxf08JPhyf1YJv1CIu/TLJ5CNvms=
Subject key identifier:   55:55:AF:B5:F9:AA:9D:83:8F:A7:1A:31:13:B9:8A:F9:30:A4:2D:ED
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer:       /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial:       019369A1BB504D126AD5CF0AFDB275C18285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number:          06CA
Signing time:             Tue 26 Nov 2024 18:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:27 +0000
Files and hashes:         1: R8JIpEG5H2pcg5h0IwSpUi52sHc.roa (hash: 2it8MBe/PEjLBsK1hLe5q7k8JM3KW46YF36yhB+bXYs=)
                          2: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: G4iyjjChp5k4FGK8g+D7tLLuMkIUxQvLKW1fKC4a7Do=)
                          3: fqiWB9DtDp5ujEWVh2baM4pZU0s.roa (hash: JhZ6pVYRuk3AEfRwUR2IXrxNqDbO0f/r9SE8HI2oFQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:bb:50:4d:12:6a:d5:cf:0a:fd:b2:75:c1:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
        Validity
            Not Before: Nov 26 18:00:27 2024 GMT
            Not After : Nov 27 18:00:27 2024 GMT
        Subject: CN=5555afb5f9aa9d838fa71a3113b98af930a42ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:53:95:a5:a7:4f:ab:ae:04:f4:54:53:86:
                    d3:36:8a:f3:4f:58:a6:e4:d1:d4:e1:60:c7:1f:2b:
                    8c:16:ef:a0:1e:cc:bf:cf:8e:bb:92:97:22:e4:f2:
                    4d:55:9e:c2:55:aa:a8:e4:18:61:46:5a:75:00:54:
                    94:8d:51:20:fd:de:fe:da:ca:00:5f:8c:b9:63:1f:
                    10:86:15:e0:9e:5c:fd:17:11:9b:bb:79:f5:81:d5:
                    81:db:18:f1:34:2f:02:50:49:e3:7c:e7:05:91:93:
                    53:70:ec:51:3b:cb:2e:9a:cc:02:aa:5b:ee:5e:a0:
                    5c:3c:00:c2:96:54:29:25:11:65:50:18:52:de:75:
                    df:17:82:99:ea:7f:7d:35:fc:9d:4c:7d:a5:71:1e:
                    76:3e:7e:9d:5c:18:50:13:e6:25:33:ed:7f:7f:68:
                    bd:e8:3e:53:5b:55:af:f6:38:e9:4a:eb:17:7f:0e:
                    77:38:4e:19:f8:e4:7d:ab:c2:00:2e:1f:44:5a:3b:
                    c5:34:64:28:25:44:29:8a:d5:c9:c0:11:64:79:06:
                    ab:3c:d2:ac:43:f4:c9:35:77:75:83:0b:6e:69:ca:
                    01:b3:5b:17:f5:12:e5:ac:21:94:56:89:61:3a:0a:
                    bc:7c:6a:81:1c:57:11:47:93:8d:43:5d:0e:fd:28:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:AF:B5:F9:AA:9D:83:8F:A7:1A:31:13:B9:8A:F9:30:A4:2D:ED
            X509v3 Authority Key Identifier:
                keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:97:c8:e8:02:51:6c:2a:5a:d8:46:69:a2:50:d5:b3:2d:
         00:fa:76:52:e4:7a:76:f5:4d:60:67:c7:b8:37:8c:2e:19:f3:
         24:20:d3:dc:6e:4e:86:1f:ca:f7:ac:7e:f0:56:6e:6c:70:40:
         96:ca:f4:91:62:da:38:13:ed:5a:21:2d:84:5b:ec:48:cf:46:
         e4:54:3e:94:27:25:64:a1:fe:dc:66:e2:db:df:6e:4a:3b:37:
         a8:3a:b7:df:ad:43:d8:f2:cc:45:eb:8d:3c:8c:8d:36:9c:fd:
         92:29:0d:07:d2:d2:2f:c2:cc:65:4e:f9:2d:e4:e4:df:6f:1c:
         fc:3d:6d:b5:9d:48:69:73:fe:12:1a:ba:e9:02:1d:6b:b3:0d:
         58:b1:07:06:4a:67:39:1e:07:58:bd:e3:a1:a6:b8:c3:7b:3c:
         d3:60:8d:93:f0:cb:31:32:1b:e5:59:5e:a8:19:a1:42:55:6a:
         6e:0e:7b:88:41:a1:f9:29:de:ea:3c:b5:e3:41:88:f6:64:52:
         9f:82:0a:91:53:e7:b4:3c:d3:11:1a:b0:c8:d4:ca:23:50:40:
         71:90:c9:e6:af:91:4a:f5:e9:75:9c:f4:4d:3a:00:68:d0:31:
         87:7b:79:b2:53:72:6a:bb:6a:49:d7:b2:1a:cb:86:09:c5:22:
         04:f0:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----