Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          OFp6MzkaojdfXDFa3fF2MwRlUgOh4STLD3Wwjij5d6A=
Subject key identifier:   B0:BB:62:EB:7A:DE:B9:E5:AA:AD:8C:56:97:73:42:46:E5:F7:3F:FB
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       019366A0D2C7D1D908C07F1C1B3EECCA0FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 04:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 04:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 04:00:35 +0000
Files and hashes:         1: Gx7OkGWWTGl1oOg0iNnT7Ci2jHU.roa (hash: haYSGVQZ+QJEhN5KxxjAEBW6p+tWAT1hJY2kH/N/s6c=)
                          2: RPm0NONgd8VqUTk5UfKgaJxjz9s.roa (hash: KHAeG0lg/rP1k5auSyBX2vz1EIX3wQlG0VET6jY+RcM=)
                          3: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: qYBCp2New5pcWKppBctt0FclnooeC0qV/LZzAJPH0EA=)
                          4: huxuj0-9cOQqIeyGs6o9EhLGLjM.roa (hash: vt/7gDRuNzTkySaU0jgP3ggt8BaGtJYxApiZ7dlSJ6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:a0:d2:c7:d1:d9:08:c0:7f:1c:1b:3e:ec:ca:0f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Nov 26 04:00:35 2024 GMT
            Not After : Nov 27 04:00:35 2024 GMT
        Subject: CN=b0bb62eb7adeb9e5aaad8c5697734246e5f73ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:d3:08:e7:3c:cb:8d:bd:9e:f3:84:0f:2a:
                    e9:bc:6f:52:fe:c9:60:83:c2:c6:b6:e0:fe:ae:40:
                    55:27:c4:7c:17:73:53:64:0d:f6:9b:6d:cb:55:32:
                    e5:83:35:12:25:54:16:18:44:c2:66:fd:e1:3c:62:
                    30:70:17:16:3f:07:b9:fd:ee:c8:2f:c2:2b:4d:43:
                    85:73:77:ac:f8:d5:a9:b2:2e:87:49:ca:48:aa:5c:
                    18:c3:15:34:f4:98:98:31:91:8a:b6:82:53:65:d5:
                    0b:a0:02:68:fc:3d:19:15:4b:e1:3c:69:6e:0f:12:
                    1f:7b:9d:c8:68:c7:97:6a:5f:e7:7f:d0:b9:07:f0:
                    cd:40:d1:c1:37:df:48:52:a3:16:e4:72:38:1a:52:
                    8f:30:6c:a1:0e:e4:64:ca:b8:73:52:fc:52:d6:6c:
                    d5:32:d2:5b:1e:83:a7:00:57:05:e2:eb:a6:d3:e6:
                    09:24:32:71:28:84:2d:2f:ee:67:50:ea:2f:79:18:
                    39:c1:65:84:50:6d:fd:0a:2a:e2:9b:cd:08:6f:b7:
                    50:50:da:f2:cc:fa:d3:a1:a4:22:ae:b1:32:c6:62:
                    da:0e:80:ed:c8:c9:c3:68:29:9c:69:7b:5c:d9:de:
                    76:ff:0c:e1:a0:d5:00:c9:a5:52:4a:e6:67:96:ec:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:62:EB:7A:DE:B9:E5:AA:AD:8C:56:97:73:42:46:E5:F7:3F:FB
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:f5:0d:66:02:03:21:34:1f:3c:5a:c8:3c:00:d5:1e:8b:
         f0:77:5a:a0:8a:b3:14:db:cf:74:f3:23:2d:d1:06:76:11:a9:
         a9:61:e8:8b:bc:88:4f:a7:fd:a2:23:f8:e1:0e:01:e6:68:b1:
         04:7f:3b:61:f7:ec:d5:23:cb:0b:64:66:ce:07:23:ab:e5:3c:
         2e:89:c7:1f:ec:7c:00:47:7f:12:80:3b:10:28:dd:fb:f2:6f:
         1f:cf:84:77:78:b9:72:41:c2:69:44:21:ca:28:13:34:a5:c8:
         19:96:d5:9f:b2:92:1c:d1:51:23:0a:75:cd:ec:91:99:5d:3f:
         d7:68:f1:d7:b2:c2:d9:ac:fe:ff:35:86:34:3d:3a:f1:8a:bc:
         7c:92:f7:5c:65:53:6a:f3:f4:25:69:49:68:06:1e:ae:26:39:
         c3:82:6f:83:17:ef:62:26:3b:28:9e:51:59:c7:1a:c9:24:d6:
         97:b3:e0:50:3b:33:73:ba:c6:d4:88:0c:48:95:72:67:f8:65:
         bd:2e:e5:81:5c:96:12:d2:c8:00:f3:f2:be:c7:e9:69:3b:d0:
         9b:da:54:8b:17:b1:28:0f:01:9e:ee:68:c6:43:94:e1:01:47:
         76:9f:d8:11:57:27:11:52:bd:d7:bb:ac:fa:5d:90:72:42:55:
         33:31:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----