Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File:                     IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier:          YD/4j0JTzFP9JTmqxacAqabw4cOf9D9XAnz7QP3NQbA=
Subject key identifier:   3A:FD:3F:84:44:98:98:BD:99:F4:BF:28:9B:82:E3:4C:3F:5A:65:A4
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer:       /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial:       0193628D47AD8DE57E5A7D910CCF2546EC71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number:          1383
Signing time:             Mon 25 Nov 2024 09:00:46 +0000
Manifest this update:     Mon 25 Nov 2024 09:00:46 +0000
Manifest next update:     Tue 26 Nov 2024 09:00:46 +0000
Files and hashes:         1: GdhAz4Y7RO0Qpef515DWZOid9-Q.roa (hash: KjybAgwqfo9nAx/a4JZveMUdCz6dD2g+us4XH+5J7jI=)
                          2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: BrE8zziFKKVQa6IEnPHJZDxgV0i3ZjxqejzCCiSRr7k=)
                          3: xDJiIEnpcAwt-jkG8pxUDh3i1HQ.roa (hash: 3qb45nmQnCoN/QFzSrj+jKZN6KVW2+CbY6n5mty+zgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:8d:47:ad:8d:e5:7e:5a:7d:91:0c:cf:25:46:ec:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
        Validity
            Not Before: Nov 25 09:00:46 2024 GMT
            Not After : Nov 26 09:00:46 2024 GMT
        Subject: CN=3afd3f84449898bd99f4bf289b82e34c3f5a65a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:30:ff:ef:5f:3c:bd:4e:44:b3:78:c0:fb:
                    98:c5:6d:29:82:8e:7b:40:ae:66:a0:0d:13:00:71:
                    25:61:97:e5:2e:a9:a7:ce:0d:b4:27:9b:27:9d:41:
                    54:81:80:f1:2e:9f:75:88:50:0f:bc:8f:c8:1a:18:
                    d9:17:7e:73:bb:4b:29:58:b0:36:3d:81:38:78:23:
                    e4:f3:98:60:16:fe:57:a8:85:1f:f3:87:08:a3:15:
                    2f:c1:67:a2:fb:22:da:78:24:51:67:15:c2:a2:6a:
                    26:b7:fb:8c:f5:54:83:de:21:b2:92:5a:18:14:00:
                    e8:31:28:19:44:40:c9:16:68:1f:6c:cf:4a:0b:88:
                    c4:d4:41:81:f6:40:65:04:52:dd:9b:bd:cf:12:9f:
                    e0:5b:ff:9f:7b:69:86:2c:4f:1c:20:7f:fe:a2:4c:
                    7f:51:af:91:59:ea:a3:eb:7c:f6:6c:20:07:0c:0c:
                    48:f1:bc:8c:7b:c4:d4:41:d3:45:ef:95:2a:45:31:
                    ea:83:8f:7d:74:5f:b0:cb:4e:0f:08:66:b9:e0:23:
                    57:0f:bc:a5:6d:47:e6:4a:30:a4:04:7b:64:cb:fa:
                    0d:ed:07:84:78:05:2f:f0:53:3c:0c:f1:2e:2c:8c:
                    85:1b:1a:3e:23:92:c9:e9:9e:2e:39:1d:f1:2f:cf:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:3F:84:44:98:98:BD:99:F4:BF:28:9B:82:E3:4C:3F:5A:65:A4
            X509v3 Authority Key Identifier:
                keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:38:f6:ca:9a:ae:95:78:63:86:3f:55:69:91:56:5d:46:
         74:76:cd:0a:e7:f0:e1:f0:0a:73:d6:6c:e7:aa:37:a4:84:44:
         dc:e2:b6:94:61:d0:f2:a9:03:37:f4:0f:90:ba:08:85:5b:e8:
         b8:7f:f4:e7:87:ae:d4:bd:fd:99:e0:9d:c1:ab:2e:8f:2b:2c:
         b4:7c:c9:07:f3:0c:03:2d:c0:b9:75:e6:48:e8:45:05:f7:64:
         c4:00:96:50:18:34:a2:40:8b:df:85:ef:56:71:b8:31:f2:3e:
         14:6f:ab:ea:b1:27:79:8c:41:1b:91:26:84:af:66:f5:4c:df:
         6b:63:7c:79:98:95:ae:39:6a:1e:d0:32:68:c8:0b:41:f0:d7:
         08:5e:e6:65:86:49:a8:e5:94:9c:43:27:a3:5a:d7:fc:de:5a:
         3e:02:13:c9:3d:4f:e3:8c:ce:68:a2:ca:f2:e8:72:75:1f:d4:
         cb:54:80:79:07:45:6b:37:1e:9e:8c:1b:31:d2:72:c1:06:bd:
         7d:de:11:21:b0:32:33:9c:ee:52:c2:dd:3d:74:8e:df:6d:de:
         d9:47:99:9c:02:df:d8:46:3e:cb:d3:70:9e:77:bd:59:d2:94:
         da:d6:0d:41:e1:38:13:97:db:73:c4:2f:70:33:63:81:80:eb:
         fd:d4:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----