Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
File:                     nBzRs8h3KVb6hVNahGS0yhlmOt4.mft (raw, json)
Hash identifier:          iZmwjXbWJfrOJDS/c5q1ChG3fpwlCBfG/nPOPpgMo8g=
Subject key identifier:   45:B3:18:D4:18:C3:56:C8:32:6F:7A:99:80:7D:26:4B:F9:68:C1:60
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Certificate issuer:       /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial:       019356F6B0CAB1BA35468A558EFBEC724CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 03:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:27 +0000
Files and hashes:         1: 1yMEAbiSgNnK-H7vmg_2X-wQ8pI.roa (hash: u3AaibGPYL9XT+3zn7Ds1RJg81ruQzEaXQnqoKGaHe0=)
                          2: Z_PWIiLpTxj_PchWQoCOxVCeKHw.roa (hash: 7YdVHqj70hyseQtR2kAYWvb++lq31LrSnkvOWUwdxvc=)
                          3: _eyAsEk8KjzB9qxu-LIq_K1zcXw.roa (hash: /fBAWwiV95g44vBniC1RXrxoInOrJKoHojRaEri343Y=)
                          4: nBzRs8h3KVb6hVNahGS0yhlmOt4.crl (hash: MfGelzm9dgTm40bQafh3Z1YSKTeWDOHGNxyYCBZ2YL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b0:ca:b1:ba:35:46:8a:55:8e:fb:ec:72:4c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
        Validity
            Not Before: Nov 23 03:00:27 2024 GMT
            Not After : Nov 24 03:00:27 2024 GMT
        Subject: CN=45b318d418c356c8326f7a99807d264bf968c160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:cf:24:18:10:47:82:ff:4a:b0:2c:39:81:
                    f7:aa:dc:a1:09:67:d0:b4:27:59:2d:ba:f2:b4:8a:
                    37:6f:e4:25:b0:28:80:2e:a2:e8:c8:f9:60:72:24:
                    2e:f3:0f:af:d3:60:21:89:3f:ec:3f:86:5a:9f:d4:
                    3e:ea:03:40:73:62:8f:d1:f4:fd:57:ac:36:fa:36:
                    96:6a:20:08:00:87:f9:b1:dd:01:d7:67:03:0c:0a:
                    45:0f:96:f7:5a:a9:6e:5a:20:d7:4e:03:19:f4:03:
                    5f:f7:37:cd:51:3a:08:2c:65:fe:f5:83:dd:22:53:
                    b7:79:9a:0e:a8:5c:4c:9f:4f:eb:87:70:96:1c:e8:
                    6e:d8:46:f9:4a:6f:ec:f2:0e:22:0f:33:28:21:10:
                    dd:91:5f:29:9b:2f:cf:16:7a:9c:a8:2e:54:7c:66:
                    f5:13:8b:78:3b:41:1d:99:1b:96:22:f3:6b:c0:e3:
                    1d:f0:c3:3d:85:ad:00:62:8a:bd:9e:7e:f0:17:e7:
                    14:0f:7f:37:26:5a:10:7b:5d:6e:ed:67:55:57:48:
                    57:23:b4:b0:39:77:42:70:91:49:ed:cd:32:8b:15:
                    1d:36:47:c8:8e:b2:8c:d3:90:6f:12:5b:da:68:00:
                    72:f9:18:e2:45:f2:f3:bd:32:dc:b1:41:a1:70:e8:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B3:18:D4:18:C3:56:C8:32:6F:7A:99:80:7D:26:4B:F9:68:C1:60
            X509v3 Authority Key Identifier:
                keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c0:d5:52:ba:97:25:4e:25:69:20:4b:02:49:77:79:0d:20:
         23:19:a7:19:2a:84:bf:dd:ac:44:14:59:30:47:2b:4d:d4:17:
         0f:e6:f1:c6:11:32:23:09:77:32:c0:3f:4b:ee:0d:05:af:fc:
         bd:15:e3:1b:f6:84:6d:76:e2:8b:c5:d8:f9:ba:cc:fb:f8:c6:
         fa:a8:cc:f5:6f:10:bd:ef:8f:55:86:9c:47:ad:31:5c:8d:a2:
         ff:5b:95:b5:6a:5c:32:e3:0e:6a:84:2c:a4:5f:f9:34:1a:27:
         90:64:1a:ea:8c:07:50:bd:a0:c7:cc:a6:51:3b:a9:94:2d:a6:
         ca:3e:e8:7d:4e:cc:75:f8:5d:52:6d:66:8d:10:a3:0c:cf:9d:
         44:92:98:12:43:e9:c6:3b:6f:3a:d0:4f:ec:a0:29:9f:8c:73:
         fb:92:8b:68:3e:32:31:0b:6e:3d:09:c2:a1:f2:d9:1d:93:16:
         f1:3e:e8:c9:d1:18:f4:33:9a:3e:64:07:50:ca:0b:b1:d7:28:
         c5:e1:1a:40:ec:9b:c7:03:69:2a:7d:08:78:3d:68:59:ce:b5:
         fc:c0:d4:dc:55:c3:24:37:34:f9:99:dd:ea:96:11:d2:a5:e5:
         d0:97:9a:ff:86:a3:95:d7:40:4b:1f:e4:a3:49:88:aa:9f:89:
         23:80:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----