Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          9uMXcvStSlX8OJ7mHZoHYp5O9KfxsOeObia7i8Ue1tk=
Subject key identifier:   75:C1:A1:DA:DA:B9:2C:7E:CA:DC:41:0D:19:13:48:A7:72:03:21:F0
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       0193561AF717908BF0161A670CC568CA9EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          138B
Signing time:             Fri 22 Nov 2024 23:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:27 +0000
Files and hashes:         1: 3NlUHjTIpuxw8jsV3-jx2gCpmIs.roa (hash: Nb3i620YL9Lnc6kZdsDJWmpBWkrWlkrK/ADT581nr0k=)
                          2: PsJCC-2q1jNOpmEHhiZii3JPV6w.roa (hash: 00ckeFN5qqKzOeVrhxjqdT6WSXVy2xotlwcrjM4YSgU=)
                          3: d6RUmJcXzCFmlWB4n4V7JW-1cEg.roa (hash: 3aUajsHSIzJi3GUGe+HmwWRn0X0oUkvzWB/MNCc07Rw=)
                          4: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: CEbZbFcPsFpQ91mmlbYtPAvUX/rjXvpuGJFDyZHGQpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f7:17:90:8b:f0:16:1a:67:0c:c5:68:ca:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Nov 22 23:00:27 2024 GMT
            Not After : Nov 23 23:00:27 2024 GMT
        Subject: CN=75c1a1dadab92c7ecadc410d191348a7720321f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:f4:b6:d8:9b:43:3a:87:01:b0:97:d7:ec:
                    cf:77:1a:84:b7:d8:ec:72:b3:62:ae:57:aa:21:76:
                    75:72:9c:7a:0e:3e:5b:e2:af:1f:c9:69:ae:bd:f2:
                    32:fd:ca:74:f9:f5:ee:77:05:77:ee:19:58:ff:a4:
                    5c:6c:38:42:03:39:3b:7f:a0:5f:78:33:76:9f:22:
                    64:f8:39:c7:8e:ee:2f:12:be:7b:9e:13:93:eb:ef:
                    29:73:1f:ed:11:18:a8:35:a1:3a:33:9e:07:53:04:
                    fb:08:6d:d4:b0:00:00:4c:bf:8f:3b:96:c7:9b:f2:
                    39:75:cd:88:d8:0c:b9:a9:21:7c:72:3d:74:1d:a1:
                    b4:dd:b8:4d:03:38:fe:1c:c7:c2:fc:16:af:68:9b:
                    7c:c1:9b:c5:bc:d8:16:b3:62:60:27:f6:24:2b:86:
                    4a:8e:ab:1a:b0:cb:39:2b:fb:69:f4:e1:f8:69:a2:
                    bb:93:cd:89:d3:99:5d:17:c7:95:a9:f8:55:74:93:
                    34:1c:f9:58:f3:19:b4:67:e8:ed:74:48:cb:45:ac:
                    d7:1b:6e:10:7b:d2:02:b3:6e:bf:8a:9b:78:41:db:
                    ad:ee:ee:75:51:54:0c:cd:c6:05:4b:51:3b:74:d6:
                    b9:9e:d4:65:99:fd:63:bf:b6:9a:e4:f0:0a:62:26:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:A1:DA:DA:B9:2C:7E:CA:DC:41:0D:19:13:48:A7:72:03:21:F0
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:f7:54:f9:07:18:83:7c:03:31:61:bf:87:29:c3:47:f2:
         f3:0a:30:22:67:7a:1c:04:ca:3a:94:24:52:d1:28:b1:78:ac:
         9a:b5:6f:aa:2c:e4:2e:a3:5e:cf:0c:ff:1e:39:a8:54:94:60:
         0e:c6:ae:7d:59:c5:41:c9:16:e9:cf:13:7d:2c:0c:87:4d:f3:
         ab:36:ee:80:24:85:b9:f2:a0:41:55:24:fe:d0:01:f3:1c:d6:
         3b:74:d7:62:5d:07:e6:6f:ce:a0:29:3f:75:dc:79:a4:c5:1e:
         48:8f:9a:2a:b1:66:09:8b:86:cc:d6:4a:e3:16:5f:8d:f9:32:
         88:07:c7:29:de:84:36:7f:3f:0c:46:c2:d2:59:42:cf:5b:8f:
         67:2d:dd:b2:1e:48:39:85:fb:27:58:df:b8:ad:9d:1d:4f:fa:
         7e:33:da:f8:09:a7:69:60:f3:36:3b:77:f8:d2:a0:90:55:69:
         c4:00:15:36:d7:95:ba:ae:6b:7c:80:9e:a7:57:ad:67:a4:74:
         72:75:4e:27:26:2c:a2:7b:86:4a:5e:05:de:02:e5:6d:b1:23:
         20:d5:91:ed:a6:5d:79:2f:c4:21:26:0f:ff:d5:2e:d0:84:c1:
         d9:26:14:97:ad:7e:55:1c:2e:5b:37:29:b1:0b:f1:5b:de:0b:
         ec:d2:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----